IT Quiz

Cyber Security Awareness

IT Quiz

Q1: You receive an urgent email from your CFO at 4:45 PM on a Friday stating: "I am boarding a flight and need an urgent wire transfer sent to a new vendor by end of day. Click here for details." What is the single biggest red flag?

1: Q1: You receive an urgent email from your CFO at 4:45 PM on a Friday stating: "I am boarding a flight and need an urgent wire transfer sent to a new vendor by end of day. Click here for details." What is the single biggest red flag?

A) The email arrived late in the day.

B) The request uses the term "wire transfer."

D) It includes a link instead of an attached PDF.

C) High urgency combined with unavailability for secondary verification.

Q2: You receive a call from someone claiming to be from your company’s IT Help Desk. They sound professional and ask for your one-time multi-factor authentication (MFA) passcode to "complete an urgent system update." What should you do?

2: Q2: You receive a call from someone claiming to be from your company’s IT Help Desk. They sound professional and ask for your one-time multi-factor authentication (MFA) passcode to "complete an urgent system update." What should you do?

A) Provide the code since IT requires access for system maintenance.

B) Give the code only after they confirm your employee ID number.

C) Refuse to share the code, hang up, and report the call to your internal IT/Security team.

D) Ask them to send an official email request before sharing the code.

Q3: What is the main security risk of reusing your work password for personal services (like online shopping or streaming apps)?

3: Q3: What is the main security risk of reusing your work password for personal services (like online shopping or streaming apps)?

A) It makes your home computer run slower.

B) If the personal site suffers a data breach, attackers can use those credentials to access your corporate network.

C) Personal websites will gain access to your work emails.

D) IT will lose the ability to reset your password.

Q4: Why is Multi-Factor Authentication (MFA) considered critical for workplace accounts?

4: Q4: Why is Multi-Factor Authentication (MFA) considered critical for workplace accounts?

A) It replaces the need to use passwords altogether.

B) It automatically scans your emails for malicious attachments.

C) It encrypts your local hard drive automatically.

D) It blocks unauthorized access even if an attacker obtains your correct password.

Q5: What is the security term for an unauthorized person following an employee through a secure door or turnstile into a restricted office area?

5: Q5: What is the security term for an unauthorized person following an employee through a secure door or turnstile into a restricted office area?

A) Tailgating (or piggybacking)

B) Shoulder surfing

C) Dumpster diving

D) Whaling

Q6: You need to step away from your computer desk for 2 minutes to grab a coffee from the breakroom. What is the correct action?

6: Q6: You need to step away from your computer desk for 2 minutes to grab a coffee from the breakroom. What is the correct action?

A) Leave it as is since you will be back in less than 5 minutes.

B) Ask a nearby coworker to watch your desk while away.

C) Turn off your computer monitor screen only.

D) Manually lock your screen (e.g., Win + L ) before leaving.

Q7: What should you do immediately if you suspect your work computer has been compromised by malware or a cyber attack?

7: Q7: What should you do immediately if you suspect your work computer has been compromised by malware or a cyber attack?

A) Turn off the monitor, ignore it, and check back the next morning.

B) Attempt to search for and delete suspicious files yourself.

C) Disconnect the computer from Wi-Fi/Ethernet immediately and report the event to your IT/Security team.

D) Forward the suspicious email to all coworkers to see if they faced the same issue.

Q8: What is a "deepfake" scam, and how does it typically target employees in business operations?

8: Q8: What is a "deepfake" scam, and how does it typically target employees in business operations?

A) A type of network virus that slows down local file transfers.

B) AI-generated voice or video clones designed to impersonate executives or business partners in urgent requests.

C) A fake pop-up ad offering computer cleanup tools.

D) A corrupted database entry created by system hardware failures.

Q9: Which of the following details in an unexpected email are strong red flags indicating a potential phishing attempt? (Select ALL that apply)

9: Q9: Which of the following details in an unexpected email are strong red flags indicating a potential phishing attempt? (Select ALL that apply)

A) The sender's display name says "IT Help Desk", but the actual email address is support@company-helpdesk-security.com instead of your official corporate domain.

B) The email contains an attached executable or zip file

C) The message demands immediate action within 15 minutes to avoid account termination.

E) The email asks you to click a link and log into your corporate portal to re-verify your password.

Q10: Why is it important to restart your work computer regularly when prompted by system notifications?

10: Q10: Why is it important to restart your work computer regularly when prompted by system notifications?

A) Restarts clear the physical memory and delete archived corporate emails.

B) Restarts complete the installation of critical security patches and system bug fixes.

C) System restarts reset your password back to its default state.

D) Restarts notify your ISP that your home connection is active.