SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

Disable ads (and more) with a membership for a one time $2.99 payment

Enhance your understanding of SANS ASLP Security Awareness Training with flashcards and multiple-choice questions, each offering hints and explanations. Prepare effectively for your exam!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which action is advisable if an employee receives a suspicious email asking for personal information?

  1. Reply immediately

  2. Forward the email to IT support

  3. Delete the email without reading

  4. Provide the information if it seems urgent

The correct answer is: Forward the email to IT support

Forwarding the suspicious email to IT support is the advisable action because it allows trained professionals to analyze the email for potential threats. IT support can investigate whether the email is part of a phishing attempt or other malicious activity that could compromise the organization's security. By notifying IT, the employee helps in the broader effort to protect both personal and organizational data. Taking immediate action without due caution, such as replying to the email or providing information, can lead to personal data breaches or other types of cyber attacks. Deleting the email without reading does not provide the opportunity to alert IT to a potential threat, which could leave other employees vulnerable if the email is circulated among them.