Cybersecurity Awareness — Proficiency Exam

15 questions · pass with 50%

1. Most successful attacks against ordinary workplace accounts start with:
A rare technical flaw that only specialists can findA mysterious break-in that employees cannot influenceSomeone being tricked into clicking, logging in, or sharingPhysical theft of the office server every time
2. When a message says your email will be deleted in ten minutes unless you log in now, the safest first move is to:
Treat the urgency as a warning sign and verify through official channelsClick the link immediately so you do not lose accessForward the message to all coworkers so they can click tooReply with your password so IT can save the account
3. As an employee, your primary security job during a suspected incident is to:
Wipe the laptop yourself so nothing remainsHunt through system logs until you find the causePost a warning on social media so customers knowReport through the official channel and follow the playbook
4. Which signal is a stronger phishing warning than a missing comma?
The email uses your company logoA demand to bypass normal process under a fake deadlineThe message is addressed to you by nameThe sender's display name matches a coworker
5. You get an unexpected invoice with a link. The safest action is to:
Click once to preview the site, then decideOpen the attachment in a personal webmail tabCall the number listed inside the suspicious emailStop, and report the message through your official phishing channel
6. You typed your work password on a page that now looks fake. You should:
Report immediately and say that you submitted credentialsWait a week to see whether anything appears on your accountEmail the password to a friend so they can watch the accountIgnore it if the page did not show an error
7. The most important password habit for everyday accounts is:
Changing one reused password on the first of every monthUsing the company name plus the year so you can remember itA unique long secret per account, stored in an approved managerTexting passwords to yourself so they are always available
8. Compared with SMS codes, an authenticator app is generally:
Illegal for workplace useStronger because it does not rely on the phone network in the same wayWeaker because apps cannot generate one-time codesIdentical in every risk, so the choice never matters
9. An MFA push appears on your phone while you are not logging in. You should:
Deny it and report the unexpected promptApprove it so a coworker is not locked outRead the code to anyone who calls claiming to be ITIgnore all MFA from now on
10. Why do ransomware criminals care about backups?
Backups make laptops boot faster every morningBackups replace the need for passwordsBackups are only used for family photosGood backups give the organisation a way to restore work without paying
11. A document from an unknown sender asks you to "enable content" to see an invoice. You should:
Enable it so you can process the invoice todayTreat it as a warning sign, not enable it, and report the messageForward it to finance with a note to enable it for youSave it to a USB stick and open it at home
12. If you think a work PC may have malware, the best employee action is to:
Stop using it for further work and report to IT or securityInstall a free cleaner advertised in a pop-upEmail the ransom note to all staff as an FYIPay a small personal amount to see if files return
13. Least privilege means:
Everyone in the department should have edit rights to save timeAdmin rights should be permanent once grantedEach person and app gets only the access the job requiresPublic links are better because they need no accounts
14. A coworker asks you to email a full customer list to their personal Gmail so they can work on the weekend. You should:
Send it this once because they asked nicelyDecline and use the approved work system or escalate if the process is brokenPost the list in a public chat so the whole team can helpPrint it and leave it on their chair
15. Your work laptop is missing after a trip. The first security step is to:
Wait two weeks in case it is at the hotelReport the loss immediately so the device can be locked or wipedPost the serial number on social mediaKeep using cloud apps from a family tablet with the same passwords written down

Answer all 15 questions to submit.