Social Engineering and Phishing Awareness Quiz

1. What should you do if you receive a suspicious email requesting sensitive information?

Reply asking for clarification about the request

Verify the sender through an independent contact method before responding

Forward it to your spam folder without reading

Click the link to check if it's legitimate

2. Quid pro quo attacks involve offering what incentive to manipulate victims?

A discount on company products

A service or benefit in exchange for information or access

Free software downloads

Lottery winnings

3. What is the most important action after discovering you clicked a phishing link?

Ignore it and continue working normally

Immediately report it to IT security and change relevant passwords

Delete the email from your inbox

Forward it to all colleagues as a warning

4. Smishing attacks target users through which channel?

Email systems

Social media platforms

Short message service (SMS) or text messages

Voice calls only

5. What does OSINT stand for in the context of social engineering preparation?

Open Source Internet Navigation

Open Source Intelligence

Organized Security Information Network

Online System Integration Notice

6. Which is a best practice for password security against social engineering?

Share passwords with trusted colleagues for backup access

Use the same password across multiple accounts for easy memorization

Never disclose your password, even to IT support personnel requesting it directly

Write passwords in a notebook kept in your desk drawer

7. What is the primary goal of security awareness training?

To make employees IT experts

To teach employees to recognize and respond appropriately to security threats

To eliminate the need for technical security controls

To prevent all cyberattacks permanently

8. Tailgating (piggybacking) is a physical security breach where an attacker does what?

Guesses passwords to access systems

Follows an authorized person through a secure door without using credentials

Installs hidden cameras in offices

Intercepts wireless network traffic

9. What is a business email compromise (BEC) attack?

Malware that corrupts email servers

An attack impersonating trusted business contacts to authorize fraudulent transactions

Unauthorized access to all employee email accounts

A virus spread through email attachments

10. Which psychological principle do social engineers exploit most commonly?

Authority and trust

Only technical vulnerabilities

Random chance

Mathematical algorithms

11. What is social engineering in cybersecurity?

Using technical exploits to breach firewalls

Manipulating people to divulge confidential information or perform security-compromising actions

Designing secure network infrastructure

Implementing encryption protocols on servers

12. Vishing is a social engineering attack that uses what medium?

Text messages only

Video conferencing platforms

Voice calls or VoIP

Social media direct messages

13. What is whaling?

A mass phishing campaign targeting random users

Phishing attacks specifically targeting senior executives and high-value individuals

Using whale-themed images in phishing emails

Stealing login credentials from public Wi-Fi networks

14. Spear phishing differs from standard phishing in what way?

It targets only executives in large corporations

It is personalized and targeted at specific individuals or organizations

It uses only malware attachments

It requires the victim to download files

15. Which defense strategy is most effective against phishing?

Opening all emails to identify threats quickly

User training combined with email filtering and verification protocols

Disabling all external email sources

Using only wireless networks to avoid interception

16. What red flag indicates a likely phishing email?

The sender's email domain matches the company website exactly

The email requests you to click a link and verify login credentials

The email is addressed to your full name

The email includes company logos and professional formatting

17. Baiting attacks typically offer something attractive to lure victims. Which is an example?

A USB drive labeled 'Employee Salary Info' left in a parking lot

A verified email from the IT department

A request to update your password monthly

An invitation to a company training webinar

18. What is pretexting?

A fake email sent to multiple users at once

Creating a fabricated scenario to extract information from a target

Using malware to steal credentials

Installing keyloggers on company computers

19. Phishing emails often create urgency by claiming what?

Your account will be upgraded soon

Your account has been compromised and immediate action is required

New features are available for your profile

You have earned loyalty rewards

20. Which of the following is a common phishing technique?

Sending legitimate emails from company domains

Creating fake login pages that mimic trusted websites

Using only encrypted communication channels

Requiring multi-factor authentication for all users

Tech+ Social Engineering and Phishing Awareness Basics Quiz