CompTIA Security+ (SY0-701) — Question 9

Several employees received a fraudulent text message from someone claiming to be the Chief Executive Officer (CEO). The message stated:
“I’m in an airport right now with no access to email. I need you to buy gift cards for employee recognition awards. Please send the gift cards to following email address.”
Which of the following are the best responses to this situation? (Choose two).

Answer options

• A. Cancel current employee recognition gift cards.
• B. Add a smishing exercise to the annual company training.
• C. Issue a general email warning to the company.
• D. Have the CEO change phone numbers.
• E. Conduct a forensic investigation on the CEO’s phone.
• F. Implement mobile device management.

Correct answer: B, C

Explanation

The correct answers, B and C, focus on preventive education and communication to raise awareness about smishing attacks among employees. Option A is not effective since it does not address the underlying issue of awareness, and options D, E, and F do not directly inform or educate the staff about the threat posed by such messages.