Cert Master

KT-EMS Business email compromise (BEC)

Finance receives wire instructions changing bank details via email right before quarter close. What verification is REQUIRED?

Multiple choice — select one answer

Answer choices

  1. a. Out-of-band callback to a known number on file, not numbers in the email
  2. b. Reply to the same thread asking 'Is this real?', without security or identity team coordination per policy.
  3. c. Process if the logo matches, without security or identity team coordination per policy.
  4. d. Trust because the subject says 'CONFIDENTIAL', without security or identity team coordination per policy.

Architectural breakdown & explanation

BEC wire fraud relies on urgency; verified voice callback stops many losses.

Correct answer(s): a. Out-of-band callback to a known number on file, not numbers in the email

Exam domain: Business email compromise (BEC) (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Email Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications