Craft Silicon IT Security Awareness Test

What is phishing, and how does it differ from other cyber threats?

• A computer virus

• Social media manipulation

• Deceptive attempts to trick individuals into revealing sensitive information

What are some common tactics used by phishers to manipulate individuals?

• Urgency and fear

• Positive reinforcement

• Entertainment and humour

What are some safe email habits that individuals can adopt to avoid falling victim to phishing?

• Click on links from known senders

• Download attachments from unfamiliar emails

• Verify email sender addresses and avoid clicking on suspicious links

How can you identify a phishing URL, and why is it crucial to verify website addresses?

• Ignore website addresses

• Click on any link and assess the website later

• Verify URLs by checking for spelling mistakes and using HTTPS

Attackers often use email attachments as a method for phishing. What is the risk associated with opening attachments from unknown or suspicious emails?

• No risk, as email attachments are always safe to open

• Risk of spreading positive content

• Risk of downloading malware or viruses onto your device

You receive an email from the group CEO, which email would you respond to?

• [e-mail]

• [e-mail]

• [e-mail]

• [e-mail]

Define social engineering and provide examples of how it can be used in cyber attacks.

• A type of computer programming that helps protect from cyber attacks

• Manipulating individuals to gain confidential information

• A form of networking and socialisation

Why is impersonation a common social engineering tactic, and how can individuals verify someone's identity?

• Impersonation is rarely used in social engineering

• By not questioning anyone's identity

• Verifying identity through multiple channels

How can oversharing on social media contribute to social engineering attacks?

• It has no impact on security

• Enhances online privacy

• Provides attackers with personal information

Why is it essential to verify unexpected requests for sensitive information, even if they seem to come from trusted sources?

• It's not necessary to verify such requests

• To avoid inconvenience

• To prevent falling victim to phishing attacks