Case Study: The Phishing Email Incident

1. What type of cyberattack did Dr. Reyes fall victim to?

• A. Ransomware

• B. Phishing

• C. Man-in-the-Middle Attack

• D. Denial of Service (DoS)

2. What was the first warning sign that the email was suspicious?

• A. The email contained an urgent request.

• B. The email had a professional signature.

• C. The email came from the IT department.

• D. The email was sent early in the morning.

3. How could Dr. Reyes have verified the legitimacy of the email?

• A. Clicking the link and checking the webpage.

• B. Calling the IT department directly.

• C. Forwarding the email to his colleagues.

• D. Ignoring all IT-related emails.

4. What should Dr. Reyes have checked before clicking the link?

• A. The length of the email

• B. The email subject line

• C. The sender's email address and the link URL

• D. The color of the email background

5. If Dr. Reyes accidentally entered his credentials, what should he have done immediately?

• A. Waited to see if anything bad happened

• B. Changed his password and reported it to IT

• C. Deleted his email account

• D. Forwarded the email to students for awareness

6. Why did the hackers send emails from Dr. Reyes’s account after the breach?

• A. To trick others into sharing their information

• B. To delete his academic records

• C. To automatically install malware on all devices

• D. To help him reset his password

7. What is the best way to prevent phishing attacks?

• A. Never use email for communication

• B. Regularly change passwords and use multi-factor authentication (MFA)

• C. Only use personal email for work-related tasks

• D. Print all emails before reading them

8. What should faculty members do if they receive a suspicious email?

• A. Immediately click the link to check its content

• B. Reply to the sender and ask for confirmation

• C. Report it to IT and delete the email

• D. Forward it to students for their awareness

9. Why do hackers target faculty members with phishing attacks?

• A. Faculty members have access to sensitive student data

• B. Faculty members are required to respond to all emails

• C. Faculty members do not use passwords

• D. Hackers want to invite them to academic conferences

10. What lesson should faculty members learn from this case?

• A. Never trust IT emails

• B. Always verify suspicious emails before taking action

• C. Use the same password for all accounts for convenience

• D. Ignore cybersecurity training because IT will handle it