Phishing & Social Engineering
You get an email from what looks like the IT Service Desk asking for your username and password. How can you tell this is a phishing email?
IT will never ask for your credentials
Which button should you look for to report a potential phishing email?
"ProofPoint" -> "Report Phish"
What is one easy feature you can enable to protect your accounts?
MFA (multi-factor authentication)
What is it called when an AI model makes up information when it can’t find a source?
Hallucination
What is a vulnerability?
A weakness which can be exploited
Someone wants to connect with you on LinkedIn. What’s one thing you can look for to see if it is a legitimate account?
A verification badge
What is a phishing attack targeted towards executives, payroll administrators, senior leaders, etc.?
Spear phishing / whaling
What can protect your data in the case of an outage or potential ransomware scenario?
A data backup
What can protect your data when using a public WiFi network?
a VPN (virtual private network)
What should you do if you find an unknown USB drive at work?
Report it to InfoSec
In a “quishing” attack, what is the attack vector? (i.e. what is the main tool used in the attack?)
A QR code
What is it called when a legitimate email address is used to impersonate an employee?
Business Email Compromise (BEC)
What is the technology used to ensure no unauthorized changes have been made to a file?
File Integrity Monitoring
What is it called when an attacker attempts to manipulate an AI system by inserting malicious or misleading instructions into a prompt?
Prompt injection
Why are updates important?
They fix security vulnerabilities.
What is one thing you can do to prevent clicking on phishing links for work applications?
Inputting the URL yourself or through "My Apps" instead of through external links
What is it called when an attacker encrypts your data and demands money to get it back?
Ransomware
What is the order of flags used to label files from least to most sensitive?
Public, Internal, Restricted, Confidential
What type of virus disguises itself as a legitimate application?
A Trojan
What does it mean when you see a padlock on a browser URL?
The connection uses secure HTTPS encryption
What is it called when an attacker uses a URL that contains a commonly misspelled word? (i.e. Goggle instead of Google)
Typosquatting
What does the P in the P-A-U-S-E protocol stand for?
Pressure
What process is conducted to ensure that only authorized users have access to an application?
A user entitlement review
What is the purpose of a firewall?
It controls network traffic according to security rules
What is the difference between authentication and authorization?
Authentication verifies who you are; authorization determines what you have access to