Workplace Information and Security Quiz

What is a code of conduct?

• A set of optional guidelines for employees

• A set of rules outlining expected behaviours and ethical standards

• A list of laws that all businesses must follow

• A suggestion for how to treat clients

Adherence to organizational policies and procedures related to what is part of professional standards?

• Personal opinions and beliefs

• Data handling and confidentiality

• Social media usage

• Work place gossip

What is the consequence of non-compliance with a code of conduct?

• A promotion

• Disciplinary actions, legal ramifications, and loss of trust

• A raise in salary

• A bonus

Which of the following is an example of personal data that should be kept confidential?

• Company's annual reports

• Employee records and medical history

• Marketing brochures

• Public announcements

What is the principle of least privilege?

• Granting all employees access to all information

• Granting access only to authorized personnel based on job roles

• Sharing passwords with colleagues

• Not classifying data at all

What is the purpose of an NDA?

• To allow for the release of sensitive information

• To ensure employees sign confidentiality agreements before handling sensitive data

• To publicly share company information

• To avoid dealing with sensitive data

What is the correct way to dispose of paper documents with confidential information?

• Throw them in the regular trash

• Use shredding machines

• Burn them in the backyard

• Recycle them without shredding

What does data classification ensure?

• That no one handles the data

• Proper handling of information based on its label (confidential, internal or public)

• That all data is treated as public information

• That all data is treated as confidential

Which of the following is a physical security measure?

• Using strong passwords

• CCTV monitoring in sensitive areas

• Encrypting emails

• Anti-virus software

What is multi-factor authentication (MFA)?

• Using only one password for all accounts

• A security system using multiple methods to verify a user's identity

• Sharing passwords with colleagues

• A system that gives access to all devices