General Cybersecurity Awareness Quiz

The biggest threat to organizational cybersecurity comes from individuals within the organization, intentionally or unintentionally.

Introducing a personal device to a work network can expose the network to malware, viruses, and other security risks, even if the device appears clean.

Using a VPN alone doesn't completely eliminate the chance of cyberattacks. It simply adds a layer of protection, not a full-proof shield.

A strong password is long, uses a combination of uppercase and lowercase letters, numbers, and symbols, and is easy to remember for the user.

Always verify any software update through official channels before installing it to avoid risks from malicious updates.

Personally identifiable information (PII) refers to any data that can be used to identify a person.

While a business phone number might identify a company, it doesn't directly identify a specific individual.

Encryption scrambles data, making it unreadable without the correct key, providing strong protection for sensitive information.

Sharing PII without encryption even within an organization can lead to security breaches and legal issues.

Protecting PII is crucial as it ensures compliance with regulations, maintains trust with users, and prevents financial penalties.

Urgent language, mismatched email domains, and unexpected attachments are common indicators of a fake (phishing) email.

Social engineering is a psychological manipulation tactic to trick individuals into revealing sensitive information.

If you suspect a phishing attempt, report it to your IT security department immediately for prompt action.

Enabling two-factor authentication is a security measure, not a social engineering tactic.

The first line of defense against phishing attacks is to use email spam filters to block suspicious emails before they reach your inbox.

Ransomware is a type of malware that encrypts files on your device and demands payment to decrypt them.

Keeping software updated, using antivirus software, and avoiding clicking unknown links are key to preventing malware infections.

If a ransomware attack occurs, disconnecting the infected device is a crucial first step to prevent further spread.

Paying the ransom for ransomware does not guarantee the recovery of your data. Attackers can renege, demand more, or release malware again.

A firewall, a security feature that protects your network, is not a type of malware.

Working remotely introduces risks like device theft, access to unsecured networks, and exposure of sensitive data.

When connecting to public Wi-Fi, using a VPN is essential for secure communication and to protect sensitive data from hackers.

Using strong, unique passwords for all your accounts, especially when working remotely, is a fundamental security practice.

Securing your home Wi-Fi by using a strong password, enabling WPA3 encryption, and updating your router firmware regularly is essential.

When a security breach is suspected while working remotely, immediate reporting to the IT team is crucial for prompt investigation and mitigation.

The first step in responding to a suspected security incident is to report it to the IT security team for a coordinated response.

Incident reports should include a description of the event, date and time of occurrence, and actions taken to address it.

Prompt reporting of security incidents is vital to minimize damage, enable quick mitigation, and prevent further attacks.

Responding to security incidents is a collaborative effort involving various stakeholders, not solely the responsibility of the IT team.

Tampering with evidence associated with a security incident can hinder investigation efforts and compromise the integrity of findings.

Regularly updating software and tools is crucial to address security vulnerabilities and patch known weaknesses that attackers might exploit.

Using public file-sharing services for sensitive files increases the risk of unauthorized access and data leaks.

Password managers store and manage strong, unique passwords securely, reducing the burden of remembering complex passwords.

Securing collaboration tools like MS Teams involves avoiding clicking unknown links, restricting access to sensitive content, and using strong passwords.

VPNs encrypt and secure communication, protecting your data from interception and snooping, especially when using public Wi-Fi.