ComputerSecuritySelf-Test-UCSantaCruz.pdfVIP

Computer Security Self-Test: Questions Scenarios Rev. Sept 2015 Scenario #1: Your supervisor is very busy and asks you to log into the HR Server using her user-ID and password to retrieve some reports. What should you do? a)  It’s your boss, so it’s okay to do this. b)  Ignore the request and hope she forgets. c)  Decline the request and remind your supervisor that it is against UC policy. See next page for answer 2 Scenario #1: Answer : C. User IDs and passwords must not be shared. If pressured further, report the situation to management, the ITS Support Center (/get-help/index.html) or the Whistleblower Office (). 3 Scenario #2: You receive the following email from the Help Desk: Dear UCSC Email User, Beginning next week, we will be deleting all inactive email accounts in order to create space for more users. You are required to send the following information in order to continue using your email account. If we do not receive this information from you by the end of the week, your email account will be closed. *Name (first and last): *Email Login: *Password: *Date of birth: *Alternate email: Please contact the Webmail Team with any questions. Thank you for your immediate attention. What should you do? 4 Scenario #2: Answer : This email is a classic example of “phishing” – trying to trick you into “biting”. They want your information. Dont respond to email, instant messages (IM), texts, phone calls, etc., asking you for your password or other private information. You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other