Describe two common email security best practices to avoid phishing and social engineering scams.

Describe two common email security best practices to avoid phishing and social engineering scams.

• A. Open attachments from unknown senders to check safety
• B. Share credentials to verify identity
• C. Verify sender identity and avoid clicking suspicious links; do not share sensitive data via email without verification.
• D. Disable email security features

Answer: (C)

Protecting yourself from phishing and social engineering through email relies on two practical habits: verify who sent the message and avoid sharing or acting on sensitive data without confirmation through a trusted channel. Phishing often hinges on impersonation. By confirming the sender’s identity—checking the actual email address, domain, and any available indicators, and verifying through a separate, official contact method if something seems off—you reduce the chance you’ll be lured by a fake message into taking harmful action. At the same time, many scams rely on prompting you to click malicious links or disclose credentials or other sensitive information. Avoiding suspicious links (and never entering passwords, codes, or financial details via email) unless you have independently verified the request through a known, legitimate channel cuts off the attacker’s route to compromise. Practically, this means be cautious with links and attachments, especially from unexpected senders, and use verified channels to confirm requests for sensitive data. Enabling security features like MFA and keeping software up to date adds extra layers of protection. Opening attachments from unknown senders, sharing credentials via email, or turning off security protections all increase vulnerability to scams and should be avoided.

Protecting yourself from phishing and social engineering through email relies on two practical habits: verify who sent the message and avoid sharing or acting on sensitive data without confirmation through a trusted channel.

Phishing often hinges on impersonation. By confirming the sender’s identity—checking the actual email address, domain, and any available indicators, and verifying through a separate, official contact method if something seems off—you reduce the chance you’ll be lured by a fake message into taking harmful action. At the same time, many scams rely on prompting you to click malicious links or disclose credentials or other sensitive information. Avoiding suspicious links (and never entering passwords, codes, or financial details via email) unless you have independently verified the request through a known, legitimate channel cuts off the attacker’s route to compromise.

Practically, this means be cautious with links and attachments, especially from unexpected senders, and use verified channels to confirm requests for sensitive data. Enabling security features like MFA and keeping software up to date adds extra layers of protection.

Opening attachments from unknown senders, sharing credentials via email, or turning off security protections all increase vulnerability to scams and should be avoided.