If you feel you are being solicited for information, which of the following should you do?

If you feel you are being solicited for information, which of the following should you do?

• A. All of these
• B. Report to security or CI
• C. Refuse to provide information
• D. Continue the conversation

Answer: (A)

The situation tests how to handle suspected social engineering: you stop sharing information, involve the right people, and ensure the incident is properly handled. Refusing to provide information immediately cuts off any potential data leakage. Reporting to security or CI creates an official record and triggers a trained response so the situation can be investigated and contained. Continuing the conversation isn’t about talking with the solicitant further on your own; it means staying aligned with the escalation process—keeping the dialogue within official channels and with security involvement to ensure proper documentation and response. When you combine all these steps, you’re applying a full, cautious response that enhances protection and proper handling of the incident.

The situation tests how to handle suspected social engineering: you stop sharing information, involve the right people, and ensure the incident is properly handled. Refusing to provide information immediately cuts off any potential data leakage. Reporting to security or CI creates an official record and triggers a trained response so the situation can be investigated and contained. Continuing the conversation isn’t about talking with the solicitant further on your own; it means staying aligned with the escalation process—keeping the dialogue within official channels and with security involvement to ensure proper documentation and response. When you combine all these steps, you’re applying a full, cautious response that enhances protection and proper handling of the incident.