Social Engineering Awareness Quiz

Which of the following is the BEST example of a social engineering attack?

• A hacker using brute force to guess a password

• A colleague requesting your password to fix your computer

• Malware automatically spreading through the network

• A server failing due to overheating

What is the most appropriate response if someone calls claiming to be from IT Operations and asks for your login credentials?

• Provide the credentials if they sound professional

• Ask them to send an email first

• Politely refuse and report the incident to IT/Information Security

• Ignore the call and continue working

An unknown visitor enters your office without a badge and says they forgot it at home. What should you do?

• Escort them to their desk

• Allow them access if they look familiar

• Inform your manager or security immediately

• Let them in and ask them to report it later

You receive an urgent email from the Managing Director (MD) asking for a list of employees and their phone numbers. What should you do?

• Send the information immediately to avoid delay

• Call the MD directly to confirm the request

• Forward the email to your colleagues to help respond quickly

• Reply and ask for more details

What is "phishing"?

• Sending malware through USB devices

• A type of firewall

• A deceptive email that tricks users into revealing sensitive information

• Monitoring employee internet activity

Which of the following is a sign that an email might be a phishing attempt?

• The email is from your department head

• There are spelling and grammatical errors, and a sense of urgency

• It has a standard company signature

• It only asks you to confirm your meeting schedule

Why are social engineering attacks often successful?

• They rely on advanced hacking tools

• They take advantage of system misconfigurations

• They exploit human psychology and trust

• They use strong encryption to hide malware

What is the most important step to take before clicking a link in an email?

• Check if it matches your interests

• Verify the link by hovering over it to see the actual URL

• Copy the link and send it to your colleague

• Click quickly to avoid missing out on the offer

What is "baiting" in Social Engineering?

• Offering fake rewards to trick users into giving information

• Following employees into secure areas

• Sending malware through system updates

• Listening in on phone calls for data leaks

Which of the following actions will help prevent social engineering attacks in Global Accelerex?

• Ignoring suspicious messages

• Regularly changing your passwords

• Being cautious with emails, verifying requests, and reporting incidents

• Sharing security policies only with management