Question

you get a call from someone saying they are from your organization’s it department. they claim there was a security incident, and they need you to provide your username and password to check if your account was compromised. what’s the best response?
hang up and call your it department using a trusted method of communication to verify the request.
give them your username and password to fix the problem since it’s related to an urgent security incident.
end the call and check with your co - workers to see if they got the same call.

Explanation:

This is a question about cybersecurity best practices. The correct approach is to verify the request through a trusted channel. Hanging up and using a trusted method to contact the IT department ensures that you are not falling for a phishing attempt. Giving out credentials is unsafe, and checking with coworkers doesn't directly verify the legitimacy of the IT request.

Answer:

A. Hang up and call your IT department using a trusted method of communication to verify the request.