Phishing & Social Engineering
You get an email from what looks like the IT Service Desk asking for your username and password. How can you tell this is a phishing email?
IT will never ask for your credentials
What is one easy feature you can enable to protect your accounts?
MFA (multi-factor authentication)
What is the most common password found in data leaks?
123456
Someone wants to connect with you on LinkedIn. What’s one thing you can look for to see if it is a legitimate account?
A verification badge
What can protect your data in the case of an outage or critical error?
A data backup
What is it called when an AI model makes up information when it can’t find a source?
Hallucination
In a “quishing” attack, what is the attack vector? (i.e. what is the main tool used in the attack?)
A QR code
What is one way you can monitor file integrity and make sure no unauthorized changes have been made?
Viewing the version history
What is it called when an attacker encrypts your data and demands money to get it back?
Ransomware
What is one thing you can do to prevent clicking on phishing links for work applications?
Navigating to the app from “My Apps” (instead of through external email links)
What is the order of flags used to label files from least to most sensitive?
Public, Internal, Restricted, Confidential
What can protect your data when using a public WiFi network?
a VPN (virtual private network)
What is it called when an attacker uses a URL that contains a commonly misspelled word? (i.e. Goggle instead of Google)
Typosquatting
What process is conducted to ensure that only authorized users have access to an application?
A user entitlement review
What type of virus disguises itself as a legitimate application?
A Trojan