Social Media Safety
What type of information commonly shared on social media can help attackers guess security questions or passwords?
Personal details such as birthdays, pet names, schools attended, family member names, or hometowns.
What is it called when an attacker tries to trick you into doing something that you wouldn't normally do, such as clicking a link or providing confidential information?
phishing
What is it called when AI is used to generate fake images, videos, or audio to impersonate an individual or group?
Deepfake
Attackers often use publicly available information from social media to build trust before launching an attack. What is this reconnaissance phase called?
Open Source Intelligence (OSINT).
What information is needed to authenticate yourself when calling into the NJR helpdesk?
Asset tag ID (hostname)
True or False: If a LinkedIn profile has a professional photo and hundreds of connections, it is safe to assume the account is legitimate.
False. Attackers often create convincing fake profiles to gather information or conduct social engineering attacks.
What is it called when an attacker performs a phishing attack over the phone?
vishing
How can cybercriminals use AI to improve phishing attacks?
A. Write more convincing messages with fewer spelling mistakes
B. Personalize messages using publicly available information
C. Create messages at a much larger scale
D. All of the above
D. All of the above.
What is the cyber attack technique where an attacker manipulates a victim into performing actions or revealing information by exploiting human psychology rather than technical vulnerabilities?
Social Engineering
What is the process of transforming readable data into an unreadable format so that only authorized parties can restore it?
Encryption
Which social media activity can unintentionally provide answers to account recovery questions?
A. Following coworkers
B. Taking personality quizzes and posting results
C. Liking company posts
D. Watching videos
B. Taking personality quizzes and posting results.
What is it called when an attacker performs a phishing attack via text message?
smishing
Which information should NEVER be entered into a public AI chatbot unless approved by your organization?
A. Public weather information
B. Publicly available news articles
C. Sensitive company data, passwords, or customer information
D. General cybersecurity tips
C. Sensitive company data, passwords, or customer information.
What kind of tool can securely store hundreds of passwords in one place so that you don't have to remember them?
Password Manager
How can you report a phishing email?
"Report This Email" link in the banner, or email the helpdesk
Why is it a red flag when a social media contact suddenly asks you to move the conversation to another platform and click a link?
It could be a social engineering or phishing attempt designed to steal credentials or deliver malware by circumventing security controls.
What is is called when attackers target phishing attacks at high-value targets, such as C-suite executives?
whaling
An employee receives a voicemail that sounds exactly like their manager asking for an urgent wire transfer. What AI-related threat could this be?
A. Ransomware
B. Voice cloning (audio deepfake)
C. Distributed denial of service (DDoS)
D. Software patching
B. Voice cloning (audio deepfake).
What type of malware can lock your files and demand payment to restore access?
Ransomware
What is the term that refers to information that can identify a specific person such as social security number, driver's license number, or date of birth?
Personally identifiable information (PII)
How can cybercriminals use information found on your social media profile together with AI?
A. Create personalized phishing messages
B. Clone your voice or writing style
C. Impersonate you or someone you trust
D. All of the above
D. All of the above.
What is is called when an attacker places a malicious QR code in a public place?
quishing
True or False: Information generated by AI should always be verified before being used for business decisions.
True. AI can make mistakes, provide outdated information, or generate convincing but incorrect content.
What is the name of the physical security violation where an unauthorized person gaines access to a building by following an authorized employee through a secure door?
Tailgating
What is the security principle that states that a user should only have the mimimum permissions necessary to perform their job functions?
Least privilege