Week 10 - Cyber Attacks Quiz - Exercise 1

What is an example of tailgating in cybersecurity?

• A hacker using social engineering to get passwords

• Someone following an employee into a secure building without a badge

• A hacker stealing data from a company's database

• Sending fake emails to employees

You get a phone call from someone claiming to be from IT support. They ask for your login details to "fix an urgent issue." What should you do?

• Give them the details to avoid trouble

• Hang up and report the call to IT

• Ask for their name and call them back later

• Change your password immediately

Why is dumpster diving a cybersecurity risk?

• Attackers can find discarded sensitive documents

• Hackers dive into online forums for data

• It involves hacking into a company’s trash servers

• It only affects people who work in finance

You're working on your laptop in a café, and someone behind you is glancing at your screen. What is the best way to protect yourself?

• Log out and stop working

• Turn your screen brightness down

• Use a privacy screen and be aware of your surroundings

• Ignore them, as they probably aren’t interested

You see a post on social media saying, "Forward this message to 10 people, or your account will be deleted!" What type of attack is this?

• Phishing

• Tailgating

• Impersonation

• Hoax

A hacker infects a website that employees of a company frequently visit. When they access the site, malware gets installed on their computers. What is this attack called?

• Phishing

• Shoulder surfing

• Watering hole attack

• Hoax

You receive an email saying, "Your bank account has been locked. Click here to verify your details!" The email looks real, but the link goes to a suspicious website. What is this attack called?

• Phishing

• Shoulder surfing

• Watering hole attack

• Dumpster diving

You receive an email from "[e-mail]" asking you to reset your password. What should you check before clicking anything?

• The sender’s email address

• If the link matches the real website

• Whether the email has urgent or threatening language

• All of the above

What is the best way to protect yourself from phishing attacks?

• Use a simple password for all accounts

• Enable Multi-Factor Authentication (MFA)

• Only open emails from people you know

• Keep your passwords written on a sticky note

You receive a message from your manager via WhatsApp asking for your login details for an "urgent task." What is the safest response?

• Reply with the details to avoid delaying the task

• Verify by calling your manager directly

• Ignore the message and do nothing

• Change your password just in case