10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
The C/SCU exam has 50 questions and runs 2 hours.
These 10 free C/SCU questions are organized by exam domain, so you can see how each part of the Certified Secure Computer User (CSCU) blueprint is tested. Reveal the answer and explanation under each question.
An employee denies authorizing a payment, even though the instruction was sent from their email account and carried their digital signature. Which element of information security specifically prevents them from credibly denying it?
Correct answer: C - Non-repudiation
A company laptop is running an operating system that has not received security patches for two years. An attacker who wants to steal client records uses a published exploit against it. In security terminology, the missing patches represent the:
Correct answer: D - Vulnerability
Security guidance recommends configuring Windows to display file name extensions. What is the MAIN security benefit of doing so?
Correct answer: B - It reveals disguised executables such as invoice.pdf.exe
Overnight, malicious code spread to more than 400 workstations across a company network. No employee opened an attachment or clicked a link, and the code did not attach itself to any existing file. Which type of malware BEST fits this behavior?
Correct answer: A - Worm
A user wants to verify that their antivirus software's real-time protection is genuinely working. What is the correct and safe way to test this?
Correct answer: D - Use the EICAR test file, a harmless industry-standard detection string
A shopping website shows "https://" and a padlock icon in the browser address bar. What does this actually prove?
Correct answer: B - The connection is encrypted and the certificate matches the domain
A user manually types their bank's correct web address into the browser but still arrives at a convincing fake copy of the site. Which attack is MOST likely responsible?
Correct answer: D - Pharming
A widely shared social media quiz invites users to publicly post their first pet's name, the street they grew up on, and the make of their first car. What is the MOST significant security risk of taking part?
Correct answer: B - The answers match common account recovery security questions
A finance officer receives an urgent, confidential email that appears to come from the CEO, requesting a same-day wire transfer to a new supplier account. What is the BEST first action?
Correct answer: B - Call the CEO on a number the company already holds
To send an email that only the intended recipient is able to read, the sender must encrypt the message using:
Correct answer: A - The recipient's public key
The C/SCU exam also covers these domains. Drill them in the full free practice test:
The full bank has 1,020 more C/SCU questions with explanations.
Continue in the free practice test →
View plans