CyberCertPrepAI Security FundamentalsGenAI Misuse, Deepfakes & AI-enabled AttacksEASYFree question
Scenario
Sarah, an accounts payable specialist at a mid-sized manufacturing firm, receives an unexpected phone call. The voice on the line is unmistakably her CFO's - she has spoken with him dozens of times. He explains he is at an airport in Singapore, his laptop is dead, and he urgently needs her to wire $200,000 to a new supplier account within the hour or a major contract will fall through. He asks her not to email because he cannot access his phone's email app.
A finance employee receives a voice call from what sounds exactly like her CFO, urgently requesting a $200,000 wire transfer to a new vendor. The CFO is known to be traveling internationally. What verification procedure should the employee use before acting?
- A.Hang up and call the CFO back on a known, pre-established phone number, or verify through an out-of-band channel such as a pre-agreed code word
- B.Request the wire transfer via email instead, since deepfakes only work over voice
- C.Check if the caller ID matches the CFO's corporate number, because voice cloning needs hours of clean audio
- D.Ask the caller to spell their name - a deepfake voice cannot spell