Security Awareness Training (Security+) Quiz

1. Which action violates data protection practices?

Logging off when leaving your desk

Writing passwords on sticky notes

Using multi-factor authentication

Encrypting sensitive files

Submit

3. A manager asks you to bypass security controls to speed up a project. The appropriate response is to:

Comply immediately

Explain the security risks and suggest approved alternatives

Ignore the request

Tell other employees about it

4. Downloading software from untrusted sources is a security risk.

True

False

5. Which is NOT a recommended security practice?

Using strong, unique passwords

Enabling two-factor authentication

Clicking links in unsolicited emails

Reporting suspicious activity promptly

Submit

7. Reusing the same password across multiple accounts increases security risk.

True

False

8. Which scenario demonstrates proper incident reporting?

Ignoring a suspicious email

Reporting a potential security breach to IT

Asking colleagues about the threat

Deleting evidence of the incident

9. A vendor sends an unexpected attachment claiming to contain important contract updates. What is the safest action?

Open it immediately to review

Verify with the vendor before opening

Forward to all team members

Delete without question

10. It is safe to use public WiFi networks for accessing company email and systems.

True

False

11. An employee receives an email claiming to be from IT support asking to verify login credentials by clicking a link. What type of attack is this?

Phishing

Malware injection

DDoS attack

Brute force attack

Submit

13. Social engineering relies primarily on exploiting human psychology rather than technical vulnerabilities.

True

False

14. You discover sensitive company data on a public USB drive. What should you do?

Use it to access the data

Report it to IT security immediately

Throw it away

Share it with your manager

15. Which is a red flag for a phishing email?

Urgent language demanding immediate action

Generic greeting like 'Dear User'

Links that don't match displayed text

All of the above

16. Sharing passwords with trusted coworkers is acceptable practice.

True

False

17. A stranger in the office asks for your badge to access a restricted area. What should you do?

Allow them in if they seem friendly

Politely decline and direct them to security

Ask for their ID and let them in

Ignore them and leave

18. Which password is most secure?

Password123

MyDog2024!

12345678

Admin

19. A coworker leaves their unlocked computer unattended in a common area. Is this a security risk?

True

False

Awareness Quiz: Can You Spot the Risky Behavior?

1. Which action violates data protection practices?

2.

What first name or nickname would you like us to use?

2. Leaving classified documents visible on your desk is an example of poor ______ control.

3. A manager asks you to bypass security controls to speed up a project. The appropriate response is to:

4. Downloading software from untrusted sources is a security risk.

5. Which is NOT a recommended security practice?

6. A person claiming to be from HR requests employee personal information via email. The safest approach is to ______ the request through official channels.

7. Reusing the same password across multiple accounts increases security risk.

8. Which scenario demonstrates proper incident reporting?

9. A vendor sends an unexpected attachment claiming to contain important contract updates. What is the safest action?

10. It is safe to use public WiFi networks for accessing company email and systems.

11. An employee receives an email claiming to be from IT support asking to verify login credentials by clicking a link. What type of attack is this?

12. A caller claims to be from tech support and asks for your system password to fix a problem. This is likely a ______ attack.

13. Social engineering relies primarily on exploiting human psychology rather than technical vulnerabilities.

14. You discover sensitive company data on a public USB drive. What should you do?

15. Which is a red flag for a phishing email?

16. Sharing passwords with trusted coworkers is acceptable practice.

17. A stranger in the office asks for your badge to access a restricted area. What should you do?

18. Which password is most secure?

19. A coworker leaves their unlocked computer unattended in a common area. Is this a security risk?