Certified Incident Handler (CIH) Practice Ecam

Which of the following practices is not a best practice against email security incidents?

1. Enable two-factor authentication

2. Turn on the preview feature

3. Educate staff about phishing

4. Regularly update security software

The correct answer is: Turn on the preview feature

Turning on the preview feature in email clients generally increases the risk of security incidents rather than mitigating them. This feature allows email content to be displayed without the need to open the email fully, which can inadvertently trigger embedded malicious content or allow harmful attachments to execute. As a result, it poses a significant risk, especially for emails that may contain phishing threats or malware. On the other hand, enabling two-factor authentication enhances account security by ensuring that access requires not only a password but also an additional verification step, making unauthorized access much more difficult. Educating staff about phishing helps build awareness about potential threats, enabling individuals to recognize and avoid phishing attempts. Regularly updating security software is crucial for safeguarding systems against the latest vulnerabilities and threats. These practices collectively contribute to a comprehensive email security strategy, making the preview feature an outlier in this context.