Free SC-730 Practice Test – 20 Questions with Explanations

A project manager wants to use an AI tool to summarize a project issue log.
Steps
1. Remove names, account numbers, and secrets.
2. Check whether the AI tool is approved.
3. Confirm the remaining text is allowed by policy.
4. Paste the approved non-sensitive content.
What is the correct order?

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. A deepfake can use AI to imitate a real person’s voice or face.
2. A deepfake is safe to trust if it includes a company logo.
3. A deepfake may be used to support a fraud or phishing attempt.

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. Remote work can make it easier to accidentally discuss sensitive information where others can hear it.
2. Using personal email for work files is safe if the user deletes the message later.
3. Home routers and personal devices can affect the security of remote work.

A team needs to handle a confidential client spreadsheet from creation through end-of-use.
Steps
1. Destroy it using approved methods.
2. Store it in an approved location.
3. Collect only required fields.
4. Transfer it through an approved channel.
What is the correct order?

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. Internal legal advice should not be pasted into an unapproved AI tool.
2. A masked example that removes real names and account numbers is usually safer than raw customer data.
3. A one-time passcode is safe to share with AI because it expires quickly.

Answer bank
A. Personal data
B. Public data
C. Proprietary data
D. Archived data
E. Credentials
F. Test data
G. Financial data
H. Meeting notes
I. Device data
J. General notice
Match each description to the correct answer bank item.
1. Usernames, passwords, or sign-in secrets.
2. Information that identifies a customer or employee.
3. Business information such as unreleased designs or formulas.

A staff member receives a realistic video call recording from a director asking for an urgent supplier bank-account change.
Steps
1. Report the suspicious request.
2. Verify through a trusted channel.
3. Pause the payment change.
4. Record key details.
What is the correct order?

Answer bank
A. Phishing
B. Pretexting
C. Baiting
D. Malware
E. MFA fatigue
F. Tailgating
G. Password manager
H. Smishing
I. Vishing
J. Business email compromise
Match each description to the correct answer bank item.
1. A text message with a fake delivery link.
2. A believable story used to make a sensitive request seem legitimate.
3. A free USB drive left near a shared workspace.

Answer bank
A. Evil twin hotspot
B. Password manager
C. Traffic interception
D. Screen lock
E. Approved VPN
F. Cloud backup
G. Fake login page
H. Privacy screen
I. Software update
J. Data retention
Match each description to the correct answer bank item.
1. A fake Wi-Fi network that copies a trusted name.
2. A risk where activity may be observed on an unsafe network.
3. A protection required by policy for remote access on public Wi-Fi.

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. Strong unique passphrases help reduce the risk of credential reuse.
2. An unexpected MFA prompt should be approved if it appears on the user’s own phone.
3. A remote workspace should protect screens and documents from nearby people.

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. A message requesting urgent payment to a changed bank account may indicate fraud risk.
2. A document marked confidential can be shared in a public group chat if the audience seems work-related.
3. A request to send employee ID numbers through personal email may create a privacy risk.

A project team wants to collect customer birth dates for a survey, but the survey goal only requires age ranges. What should the team do? Select one answer.

A user receives an unexpected email attachment that appears to be from a senior manager.
Steps
1. Report the message through the approved process.
2. Verify the request using a trusted separate channel.
3. Avoid opening the attachment.
4. Follow IT or security instructions.
What is the correct order?

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. Unexpected new apps appearing on a work device can be abnormal behavior.
2. Repeated sign-in prompts after opening an attachment should be approved to continue working.
3. Security tools turning off without user action can be an infection symptom.

Answer bank
A. Password manager
B. Phishing email
C. Ransomware
D. Browser redirect
E. Slow performance
F. Approved VPN
G. Software update
H. Pop-up alert
I. Incident report
J. Screen lock
Match each description to the correct answer bank item.
1. Search results open unexpected websites.
2. Files become locked with a payment demand.
3. The device becomes unusually slow and apps crash.

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. Keeping all work files local can make recovery harder.
2. Backups can help recover files after ransomware.
3. A personal USB drive is the safest work backup method.

Answer bank
A. Version history
B. Personal drive
C. Help desk
D. Ransom payment
E. Approved backup
F. Unapproved tool
G. Restore point
H. Incident report
I. File overwrite
J. Cloud recycle bin
Match each description to the correct answer bank item.
1. The right place to escalate when normal recovery does not work.
2. A feature that can recover an earlier copy of a changed document.
3. A managed copy used to restore data after loss or corruption.

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. A ransomware message on a work device requires escalation.
2. Sensitive customer data sent to the wrong person can require escalation.
3. A suspicious incident should be escalated only after the user proves the cause.

Answer bank
A. Incident form
B. Help desk
C. Report phishing
D. Manager update
E. Payroll mailbox
F. Reply to sender
G. Public team chat
H. Privacy request
I. Security hotline
J. Personal email
Match each description to the correct answer bank item.
1. Suspicious email reported through the mail client.
2. Lost work phone needing IT support.
3. Sensitive file sent to the wrong recipient and requiring formal tracking.

For each statement, select Yes if the statement is correct. Otherwise, select No.
1. Exposure of public marketing text usually has the same urgency as exposed payroll data.
2. Ransomware should be escalated even if only one device appears affected.
3. Suspected exposure of personal data should follow the incident process.