SOCIAL ENGINEERING
A colleague starts discussing a confidential project in a crowded elevator. What is the safest response?
A. Continue using project code names
B. Speak quietly so others cannot hear
C. Pause the discussion until reaching a private location
D. Check whether anyone appears interested
C. Pause the discussion until reaching a private location
Which of the following is the safest place to work remotely?
A. Public cafe Wi-Fi
B. Airport lounge
C. Secured home network
D. Shared public workstation
C. Secured home network
What does AI stand for?
A. Artificial Intelligence
B. Automated Internet
C. Advanced Interface
D. Active Integration
A. Artificial Intelligence
Which password is strongest?
A. P@ssw0rd!2025
B. 123456
C. password
D. qwerty
A. P@ssw0rd!2025
What should you do before leaving your desk?
A. Lock your computer
B. Leave it on
C. Share your password
D. Turn off Wi-Fi
A. Lock your computer
A visitor walks closely behind you toward a badge-controlled door and says, “I’m already late for a meeting.” What is the best response?
A. Hold the door because the visitor appears to know where they are going
B. Ask the visitor to enter first and follow them inside
C. Direct the visitor to complete the required access verification
D. Allow entry but inform reception afterward
C. Direct the visitor to complete the required access verification
What is the primary security risk of using public Wi-Fi without protection?
A. Reduced internet speed
B. Increased power consumption
C. Data interception by attackers
D. Device overheating
C. Data interception by attackers
What is a deepfake?
A. A fake image or video made with AI
B. A strong password
C. A type of firewall
D. A secure website
A. A fake image or video made with AI
What should you never do with your password?
A. Share it
B. Change it
C. Remember it
D. Use special characters
A. Share it
Which is an example of physical security?
A. Door lock
B. VPN
C. Firewall
D. Antivirus
A. Door lock
An employee receives an urgent request in person to reveal sensitive information for an unexpected executive meeting. What should most influence the employee’s decision?
A. The requester’s confidence and job title
B. The urgency of the meeting
C. Whether others appear to trust the requester
D. Whether the requester’s need and authorization can be independently verified
D. Whether the requester’s need and authorization can be independently verified
What should employees use when accessing company resources remotely?
A. Personal email account
B. VPN approved by the organization
C. Unsecured public Wi-Fi
D. Social media login
B. VPN approved by the organization
Why are deepfakes dangerous?
A. They can spread false information
B. They speed up computers
C. They block ads
D. They encrypt files
A. They can spread false information
What is a password manager?
A. A tool that stores passwords securely
B. A type of antivirus
C. A browser extension for ads
D. A Wi-Fi booster
A. A tool that stores passwords securely
What is tailgating?
A. Following someone into a secure area
B. Looking over someone’s shoulder
C. Throwing away documents
D. Sharing passwords
A. Following someone into a secure area
During a security conference, a well-dressed individual distributes free USB drives branded with the conference logo. What is the main concern?
A. The drives may have insufficient storage capacity
B. The conference branding may violate copyright rules
C. The drives may contain malicious code designed to compromise connected devices
D. The individual may collect feedback without attendee consent
C. The drives may contain malicious code designed to compromise connected devices
An employee asks a spouse to monitor incoming work emails and notify them of urgent requests while they are away from their desk. Which statement is correct?
A. This is acceptable if the spouse does not reply
B. This is acceptable because the spouse is helping the employee
C. This may expose company information to an unauthorized individual and violates confidentiality requirements
D. There is no violation if the emails are work-related.
C. This may expose company information to an unauthorized individual and violates confidentiality requirements
What is voice cloning?
a. Recording a podcast
b. Encrypting audio
c. Blocking spam calls
d. AI copying someone’s voice
d. AI copying someone’s voice
What is two-factor authentication?
A. Password plus another verification
B. Two passwords
C. Two devices
D. Two browsers
A. Password plus another verification
What should you do with sensitive papers?
A. Shred them
B. Leave them on your desk
C. Email them to yourself
D. Put them in the trash
A. Shred them
At an industry event, someone confidently but incorrectly names the security platform used by your organization. What is their most likely objective?
A. Prompt you to correct them and disclose internal information
B. Assess your knowledge of competing security platforms
C. Determine whether your organization follows industry standards
D. Start a general conversation about cybersecurity products
A. Prompt you to correct them and disclose internal information
What is the MOST effective way to reduce data leakage risks in a remote work setup?
A. Disable security controls
B. Use personal devices without approval
C. Follow data classification, encryption, and access control policies
D. Store all files locally
C. Follow data classification, encryption, and access control policies
Which technology is often used to make deepfakes?
A. GANs
B. VPNs
C. DNS
D. API
A. GANs
What is a brute-force attack?
A Forcing the crack a database
B. Guessing every details of the code
C. Guessing every password
D. Blocking websites
C. Guessing every password
What is dumpster diving?
A. Searching trash for sensitive info
B. Encrypting files
C. Blocking spam
D. Using strong passwords
A. Searching trash for sensitive info