The help desk gets an urgent call demanding an immediate password reset for an executive, with no identity verification and lots of time pressure. What should the agent do?

An urgent call demanding an immediate password reset for an executive, with no verification and heavy time pressure, isn't a customer-service problem — it's a social-engineering attack in progress until proven otherwise. The correct action is to follow the identity-verification procedure before resetting anything, and escalate if it can't be completed.

Reading the red flags

Attackers engineer exactly this scenario on purpose. The call combines several classic pretexting levers:

• Authority — invoking a senior executive to make the agent reluctant to say no.
• Urgency / time pressure — "right now, it's an emergency" to short-circuit careful thinking.
• A high-value target — an executive account, whose takeover yields email, approvals, and trust to attack others.
• Skipping verification — pushing the agent to bypass the one control that stops the attack.

When several of these appear together, the right instinct is more scrutiny, not less.

The correct action

Apply the organization's identity-proofing process for a privileged reset — ideally out-of-band (call back the executive on their known number, verify through a manager, or use an MFA/verification workflow). If identity can't be confirmed, do not reset, and escalate to security, because a refused-but-legitimate exec can be helped properly in minutes, while a successful attacker gets the keys to the kingdom.

Why the distractors are dangerous

• "Reset it right away to be helpful" is the exact failure the attacker is counting on — helpfulness weaponized.
• "Ask for the exec's favorite color" is theater: a guessable, publicly-discoverable, or simply attacker-supplied "answer" verifies nothing.
• "Reset and email the new password to the caller" delivers the credential straight to the attacker — possibly the worst option, since it completes the account takeover.

The interviewer is checking that a junior analyst can recognize manufactured urgency, hold the line on verification, and escalate rather than fold under pressure.