WorksheetsCyber Social
Total questions: 25
Worksheet time: 24mins
Phishing
Data Backup
Social Engineering
Ransomware
MFA (Security Token)
Information security is the responsibility of:
Everyone in an Organization
IT Department
Top Management
Security Guards
If you receive an email like this you should:
Forward as an attachment to phish@oti.nyc.gov.
Not click on links or attachments.
Permanently delete the email from your inbox.
All of the above
It's okay to leave your computer unlocked while you run to get water quickly since you're coming right back.
Yes because my computer locks after 15 minutes of no use.
No
Once in a while.
Only if I don't take more than 5 minutes long.
CIA triad in security stands for:
Command, Information, Attackers
Cybersecurity Is Amazing
Cybersecurity, Information, Authorization
Confidentiality, Availability, Integrity
Human Error accounts for _% of breaches.
3%
48%
95%
None of the above.
The cost of cybercrime is predicted to hit $10.5 trillion annually by 2025.
True
False
The government sector had the least cyber attacks at the end of 2021 compared to other sectors.
True
False
Multi-Factor Authentication is:
Something You Know
Something You Have
Something You Are
All of the Above
What is not a form of MFA?
Security Questions
Authenticator Apps
Voice Recognition
PIN Number
MFA should only be used if you have weak passwords.
True
False
How often should you backup your data?
At least once a week, but preferably once every 24 hours.
At least once a month, but preferably once a week.
At least once a year, but preferable once a month.
None of the Above.
What rule is important to remember in Data Backup?
123 Rule
CCHR Data Backup Rule
321 Rule
101 Rule
Fear
Guilt
Urgency
Common Signs of Social Engineering
Fingerprint
Authenticator App
Password
Types of MFA
Frameworks & Standards
Security Operations
Security Architecture
Threat Intelligence
Risk Assessment
Governance
User Education
Career Development
Cyber Domains
SSN
Bank Acct. Info
Passport
Personally Identifiable Information (PII)
Evil Twin
Whaling
Spoofing
Types of Phishing
Which website is secure?
https://www.outlook.com
http://www.facebook.com
http://www.nyc.gov/HumanRights
http://www.instagram.com
All of the Above
If you need IT assistance you should first:
Go to the IT department and ask for help.
Ask your supervisor for help.
Email helpdesk@cchr.nyc.gov
Create a ticket.
A secure password must include:
Uppercase/Lowercase Letters, numbers, special characters.
No names or pet names.
Passphrases
All of the Above
When creating a secure password you should:
Not reuse previously used passwords.
Avoid common passwords like qwerty, 123456789, admin, etc.
Avoid using common words & use phonetic replacements instead.
All of the Above.
It is recommended to use Autofill to access your accounts faster.
True
False
It is important to:
Keep your software updated.
Use antivirus software.
Not be suspicious.
Use a firewall.
A, B, C
What is a firewall?
A wall that is reinforced & cannot catch on fire.
A program that protects against viruses.
A filter for internet connection that monitors outgoing & incoming activity.
A fire that's put out by a wall.
What is phishing?
Attacks using email or malicious websites to infect a machine with malware & viruses to collect information.
A platform for users to know how to combat attackers.
An encryption method that uses complex algorithms.
An attacker on a boat catching fish.
What is it called when you access a system over the internet to store, manage, & process data?
Phishing
Physical Storage
Internet Security
Cloud Computing
Why might someone break into or hack into your computer?
To get Access to Information
Financial Gain
Revenge
To Distribute Malicious Programs
All of the Above
Name of the phishing awareness & training platform used by employees at CCHR.
(a)
