Security Awareness Quiz

You receive an email from someone that you don't recognize but is listed as an executive at your organization. The message contains a link to a shared file. Which of the following actions will help keep you and your organization secure?

• Reply to the email and ask if they intended to send it to you before you open it.

• Review the link carefully before taking any other action and notify IT/Security if it seems suspicious.

• Click on the link; it's ok because the message came from someone you work with.

• Ignore the request; they most likely accidentally typed the wrong email address.

You receive an unexpected email that appears to be from a co-worker, but you don't recognize the email address. The email is asking you to complete a wire transfer because your co-worker is out of the office, and the request was urgent from your CEO. Which of the following actions will help keep you and your organization secure?

• Complete the transfer; it's from someone you trust.

• Ignore the message; let someone else report it.

• Call your co-worker using a phone number you know is correct and ask if they sent this message.

• Complete the transfer, then confirm if the request was legitimate.

Alma needs to create a new password for one of her organization's systems. What are some best practices for creating a new password? Select all that apply

• Never reuse the same password.

• Use numbers and special characters.

• Use a familiar password, but change a character or two to make it unique.

• Create a unique, complex password with at least 16 characters.

You notice one of your co-workers is inquiring about information unrelated to their job. In addition, you have also noticed they are on the phone more often than usual. What is the most appropriate action you should take regarding this observation?

• Follow you organization's policy for reporting suspicious behavior.

• Listen closely to their phone call to get the definitive proof you need.

• Ignore it; whatever is going on does not impact your work.

• Reach out to them to find out what is really going on and if you can help them with anything.

Is this a phishing email, or is it legitimate?

• It's a phish

• It's real

Is the following post real, or is it disinformation?

• Disinformation

• It's real

Which one is more dangerous: misinformation or disinformation?

• Misinformation because it's an example of someone not bothering to research or think critically about what they share.

• Disinformation because it's intentionally spread to maliciously influence public opinion.

• Neither causes much harm and are not something to worry about.

• They are equally dangerous because they both spread false information.

Social media provides a lot of benefits that improve our daily lives. But it also presents numerous security challenges when not handled properly. What are a few ways to stay safe on social media? Choose all that apply.

• By vetting anyone who adds you as a friend or connection.

• By never sharing anything that could be deemed confidential.

• By thinking critically before sharing anything that might be false information.

• By reviewing and maximizing privacy settings.

• By not using profile picture.

You receive a suspicious email from an unknown sender claiming that your bank account has been suspended due to fraudulent activity. It urges you to click on a link and change your login credentials immediately, or your account will be permanently terminated. What should you do next?

• Click on the link so you don't lose control of the account.

• Forward it to a co-worker and see if they think it's a phishing scam.

• Delete the email, and get back to work.

• Immediately report it as a phishing attack, and contact your bank directly to confirm.

How do social engineers successfully manipulate people? Choose all that apply.

• By collecting personal information found on public forums like social media.

• By impersonating members of our organization, such as the IT department.

• By following closely behind real employees as they enter the building.

• By planting malicious USB flash drives around our organization.