Houston, We Have a Phish-ing Problem
Mission Credentials
Planet Social Engineering
Houston, Systems Failure!
Alien Invasion (Cyber Threats)
100

This type of email pretends to be from a trusted source to trick you into clicking a link or providing information. 

What is phishing?

100

This should be unique for every account and never shared.

What is a password?

100

Cybercriminals often exploit this human trait more than technical vulnerabilities. 

What is trust?

100

Malware that locks files and demands payment is called this

What is ransomware?

100

Software designed to harm, disrupt, or steal information is known as this.

What is malware?

200

Before clicking a link in an email, you should do this to verify where it really goes.

What is hover over the link?

200

Using a second verification step, such as a text code or app notification, is called this.

What is Multi-Factor Authentication (MFA)?

200

Someone tailgating through a secure door without a badge is an example of this. 

What is physical social engineering?

200

When a computer behaves unusually, the first thing you should do is this. 

What is report it immediately?

200

A self-replicating type of malware often spreads without user interaction.

What is a worm?

300

This type of phishing attack targets a specific individual or department.

What is spear phishing?

300

A password manager helps users do this safely.

What is store and generate strong passwords?

300

An attacker pretending to be IT Support to gather information is called this.

What is pretexting?

300

Regularly creating copies of important data helps protect against this type of incident.

What is data loss?

300

Malware disguised as legitimate software is called this.

hat is a Trojan horse?

400

An email claiming your account will be suspended unless you act immediately is using this tactic.

What is urgency?

400

This attack attempts to guess passwords by trying many combinations. 

What is a brute-force attack?

400

Leaving infected USB drives for employees to find is known as this social engineering technique.

What is baiting?

400

This term describes software updates that fix security weaknesses

 What are patches?

400

Criminals who break into systems for financial gain are commonly called this.

What are cybercriminals?

500

If you suspect a phishing email, this is the best action to take.

What is report it using the Report Phish button?

500

The strongest passwords are typically these four things. 

hat are long, unique, complex, and memorable?

500

This is the best defense against social engineering attacks. 

What is verifying requests before acting?

500

The time between discovering a vulnerability and fixing it can create this kind of exposure.

 What is security risk?

500

A group of compromised devices controlled remotely is known as this.

What is a botnet?