Cyber security refresher

Which of the following attacks requires a carrier file to self-replicate?

• Trojan

• Virus

• Worm

• Spam

Someone who is posing as an IT tech requests information about your computer configuration.  What kind of attack is this?

• Insider threat

• Phishing

• Social engineering

• Whaling

Which of the following describes monitoring software installed without your consent?

• Malware

• Adware

• Spyware

• Ransomware

You have received an email purportedly from Shopee regarding a discount offer for a product with a link provided. What should you do about it?

• Click on the link immediately so that you do not miss out on the opportunity

• Verify the display name of the sender and proceed to click on the link if it looks genuine

• Verify the email id of the sender and proceed to click on the link if it looks genuine

• Go directly to Shopee website and look for the offer there

You’ve inadvertently opened a web link contained in a suspicious email and now your computer is behaving strangely. What should course of action should you follow next?

• The purpose of a firewall and security software is to block malicious code getting into your computer in the first place so no action is needed.

• You need to update and run your anti-virus software.

• You need to contact ICT Service Deck.

• Keep an eye on the performance of your computer.

What is the best way to validate a legitimate email vs. a phishing email?

• Bad spelling, poor syntax and grammar are one of the tell-tale signs of a fake email.

• Look at the email headers to see where it really came from.

• Look for poorly replicated logos.

• Contact the sender on some other medium besides email to verify whether they sent you the email.

Unexpectedly, you get an email from a colleague who requests you to urgently click on an email link which they’ve sent you. What is the safest option?

• The link is from a known person therefore it’s safe to open.

• If the link was malicious the organisation’s firewall would have flagged or blocked it, therefore it’s safe to open.

• Reply to the sender to double-check if the link is safe to open as they might have sent it accidentally.

• Do not click the link. Phone the sender for verification.

You see a person in your building who is acting suspiciously. He is holding a clipboard and is wearing a high visibility jacket. You approach him and ask him if everything is okay and he claims to be inspecting the fire safety equipment. What should you do next?

• In compliance with fire safety regulations, this is standard procedure and no action needs to be taken.

• Report the incident to Security personnel.

• Ask to see his identity card to verify his identity.

• Ask him the name of his company and verify it using Google.

You’ve just got a warning from your bank that suspicious activity has been detected and to login immediately using a URL (link) provided. What is the best course of action to take?

• Login immediately and change your password to a more complex one.

• Contact your bank using the telephone number on the back of your credit card.

• Login to your bank account immediately and check your balance.

• Check the headers in the email and then login.

Your email account has been compromised. What is the best way of preventing further unauthorised access to your email account?

• Change the password and enable two-factor authentication on the email account.

• Change the password, then run an anti-virus scan an anti-malware scan.

• Change the login password to your computer.

• Updating your email application software to the latest version.