Phishing Awareness Quiz

These attacks involve the compromise of legitimate business email accounts to conduct unauthorized transfers of funds.

• Email Phishing

• BEC

• URL

• Smishing

Answer explanation

The correct answer is BEC (Business Email Compromise), which specifically refers to attacks that exploit legitimate business email accounts to carry out unauthorized fund transfers.

How do you spot a spear phish?

• Unexpected requests from known contacts.

• Personalized messages that seem out of character.

• Emails that request sensitive information or immediate action.

• Look for inconsistencies in the sender's email address and domain

• All of the above.

Answer explanation

To spot a spear phish, look for unexpected requests from known contacts, personalized messages that seem unusual, emails asking for sensitive info or urgent action, and inconsistencies in the sender's email. All these signs indicate a potential spear phishing attempt.

In what type of phishing attack do attackers create fake profiles or hijack legitimate ones to deceive users into revealing personal information or downloading malware?

• Angler Phishing

• Whaling

• Vising

• Email Phishing

Answer explanation

Angler Phishing involves attackers creating fake profiles or hijacking legitimate ones on social media to trick users into sharing personal information or downloading malware, making it the correct choice.

Smishing uses _________ to deceive people.

• Emails

• Fake websites

• Text messages

• Short videos

Answer explanation

Smishing specifically uses text messages to trick individuals into revealing personal information or downloading malicious content, making 'Text messages' the correct answer.

Which one is NOT a common characteristic of phishing?

• Urgent or threatening tone

• Offers that seem too good to be true

• Unusual or generic greetings

• Emails from a known source

Answer explanation

Phishing typically involves emails that appear to be from unknown or suspicious sources. Emails from a known source are not characteristic of phishing, as they usually aim to deceive by impersonating legitimate entities.

What scenario could happen if you open a phishing link?

• Nothing

• A website opens asking for additional personal information.

• You get an error message

• Chrome will close.

Answer explanation

Opening a phishing link often leads to a fraudulent website that requests personal information, making 'A website opens asking for additional personal information' the correct scenario. Other options are less likely.

What are common characteristics of a phishing attack?

• The sender email address does not match the expected sender name.

• The email is an email that you expected.

• The email includes a disclaimer this email is a scam.

• The email does not contain a link.

Answer explanation

A common characteristic of phishing attacks is that the sender's email address often does not match the expected sender name, indicating a potential scam. The other options do not accurately describe typical phishing traits.

Which items are a potential ramification for an individual of falling for a phishing attack?

• Data Breach

• Anxiety

• Reputation Damage

• Productivity Loss

Answer explanation

Falling for a phishing attack can lead to anxiety due to the stress of potential identity theft and financial loss. Additionally, reputation damage may occur if sensitive information is leaked, affecting personal and professional relationships.

What are some potential consequences for an organization if an employee falls for a phishing attack?

• Ransomware

• Reputation Damage

• Financial Damages

• All of the above

Answer explanation

If an employee falls for a phishing attack, it can lead to ransomware infections, financial losses, and significant damage to the organization's reputation. Therefore, the correct answer is 'All of the above'.

How should I report a phishing attack?

• Report? I just delete it.

• I hear someone else got it, I will tell my peers.

• I can share it with my supervisor during my weekly meeting next week.

• I immediately report it via email to [e-mail].

Answer explanation

The correct choice is to report the phishing attack immediately via email to [e-mail]. This ensures that AUM can take action, rather than just deleting it or informing peers later.