Social Engineering Awareness Course for Guards 2026

1. السؤال 1 من 25

   What is social engineering?

   • ATricking or pressuring people into giving access, information or money
   • BTraining dogs for patrol
   • CBuilding a new security system
   • DRepairing broken locks
   أظهر الإجابة

   الإجابة: A. Tricking or pressuring people into giving access, information or money

   Social engineering uses manipulation and deception to get people to compromise security.

2. السؤال 2 من 25

   Why are security guards common targets of social engineering?

   • AThey control doors, keys, codes and visitor logs
   • BThey are paid more than other staff
   • CThey work only in daytime
   • DThey never check ID
   أظهر الإجابة

   الإجابة: A. They control doors, keys, codes and visitor logs

   Guards hold access and site knowledge that attackers want.

3. السؤال 3 من 25

   A person you do not know follows an employee through a card-access door without badging. What is this called?

   • APhishing
   • BBaiting
   • CTailgating
   • DQuishing
   أظهر الإجابة

   الإجابة: C. Tailgating

   Tailgating is following an authorized person through a secured door without using your own access.

4. السؤال 4 من 25

   An employee knowingly holds a secured door for someone who has no access. What is this often called?

   • ASmishing
   • BPiggybacking
   • CWhaling
   • DShoulder surfing
   أظهر الإجابة

   الإجابة: B. Piggybacking

   When the authorized person knowingly lets someone in, it is often called piggybacking.

5. السؤال 5 من 25

   A person with arms full of boxes waits for you to hold a secured door. What should you do?

   • ATake the boxes and let them in
   • BIgnore them and walk away
   • CHold the door to be helpful
   • DPolitely ask them to badge in or sign in before entering
   أظهر الإجابة

   الإجابة: D. Politely ask them to badge in or sign in before entering

   Every person must use their own access or be signed in, even when they look busy.

6. السؤال 6 من 25

   A man in a hi-vis vest says he is a fire inspector and needs into the electrical room now. What should you do first?

   • ARefuse and call 911 right away
   • BCheck his ID and verify with the client contact using a number you already have
   • CAsk him for his supervisor's number and call it
   • DLet him in because he looks official
   أظهر الإجابة

   الإجابة: B. Check his ID and verify with the client contact using a number you already have

   Pretexting uses made-up stories; verify through a separate, trusted channel, not details the visitor provides.

7. السؤال 7 من 25

   What is pretexting?

   • ASending a text message with a link
   • BLeaving a USB stick in a parking lot
   • CUsing a made-up story to build trust and get information or access
   • DWatching someone type a code
   أظهر الإجابة

   الإجابة: C. Using a made-up story to build trust and get information or access

   Pretexting is using a fabricated scenario to gain trust and extract information.

8. السؤال 8 من 25

   You find a USB stick labelled "Payroll" in the lobby. What should you do?

   • AThrow it in the garbage
   • BHand it to IT or your supervisor without plugging it in
   • CPlug it into the desk computer to find the owner
   • DKeep it for yourself
   أظهر الإجابة

   الإجابة: B. Hand it to IT or your supervisor without plugging it in

   A planted device is a baiting trick; plugging it in could infect the computer.

9. السؤال 9 من 25

   Someone stands close behind you while you enter an alarm code. What is the risk?

   • AQuishing
   • BMFA fatigue
   • CShoulder surfing, where they learn the code
   • DTailgating into the parking lot
   أظهر الإجابة

   الإجابة: C. Shoulder surfing, where they learn the code

   Shoulder surfing means watching someone enter a code or password; shield the keypad.

10. السؤال 10 من 25

    A caller says they are from the alarm company and needs the site's alarm code. What should you do?

    • ARefuse, hang up and call the alarm company on a known number
    • BAsk them to call back in an hour and then give it
    • CGive half of the code
    • DGive the code because they know the company name
    أظهر الإجابة

    الإجابة: A. Refuse, hang up and call the alarm company on a known number

    Never share codes by phone; verify through a separate, trusted channel.

11. السؤال 11 من 25

    What is vishing?

    • AA scam using QR codes
    • BA scam using text messages
    • CFollowing someone through a door
    • DA scam using phone calls or voicemail
    أظهر الإجابة

    الإجابة: D. A scam using phone calls or voicemail

    Vishing is voice phishing, sometimes with spoofed numbers or AI voice copies.

12. السؤال 12 من 25

    What is smishing?

    • AA scam using phone calls
    • BA scam using QR codes
    • CA scam using USB sticks
    • DA scam using text messages
    أظهر الإجابة

    الإجابة: D. A scam using text messages

    Smishing is phishing by SMS or text message.

13. السؤال 13 من 25

    A sticker with a QR code on a parking sign says "Scan to pay". What scam could this be?

    • AQuishing, sending you to a fake payment site
    • BPiggybacking
    • CTailgating
    • DWhaling
    أظهر الإجابة

    الإجابة: A. Quishing, sending you to a fake payment site

    Quishing uses QR codes that lead to malicious websites.

14. السؤال 14 من 25

    Your phone keeps asking you to approve logins you did not start. What should you do?

    • ADeny them and report it, because someone may have your password
    • BApprove one so the alerts stop
    • CTurn off your phone for the shift
    • DIgnore them and say nothing
    أظهر الإجابة

    الإجابة: A. Deny them and report it, because someone may have your password

    Repeated prompts are an MFA fatigue attack; approving gives the attacker access.

15. السؤال 15 من 25

    Which is a warning sign of a phishing email?

    • AIt has no links or attachments
    • BThe sender's address is slightly different from the real one
    • CIt uses your company's normal greeting
    • DIt comes from a coworker you were expecting to hear from
    أظهر الإجابة

    الإجابة: B. The sender's address is slightly different from the real one

    Spoofed or mismatched sender details are a common warning sign.

16. السؤال 16 من 25

    How should you check a link in an email before clicking?

    • AForward it to friends to check
    • BClick it quickly and close the page
    • CHover over it to see where it really goes
    • DReply and ask the sender
    أظهر الإجابة

    الإجابة: C. Hover over it to see where it really goes

    Hovering shows the real web address so you can check the domain.

17. السؤال 17 من 25

    An urgent email from "your bank" asks you to log in through a link today. What should you do?

    • ADo not use the link; contact the bank through its known website or number
    • BForward it to the whole team
    • CClick the link and log in
    • DReply with your card number
    أظهر الإجابة

    الإجابة: A. Do not use the link; contact the bank through its known website or number

    Banks do not send account links in unexpected messages; use a separate, trusted channel.

18. السؤال 18 من 25

    Under PIPEDA, which is an example of a physical safeguard for personal information?

    • AA privacy notice on a website
    • BA strong password policy
    • CLocked filing cabinets and restricted access to offices
    • DA staff training video
    أظهر الإجابة

    الإجابة: C. Locked filing cabinets and restricted access to offices

    PIPEDA Schedule 1 lists locked cabinets and restricted office access as physical measures.

19. السؤال 19 من 25

    Which of these should a guard treat as sensitive information?

    • APatrol times and door codes
    • BThe name of the city
    • CThe colour of the lobby walls
    • DThe building's street address
    أظهر الإجابة

    الإجابة: A. Patrol times and door codes

    Patrol times and codes can help criminals plan; keep them private.

20. السؤال 20 من 25

    You want to post a photo from your shift on social media. Which photo is a security risk?

    • AOne that shows access badges, keys or the site's layout
    • BA photo of your lunch at home
    • CA photo of a sunset from a public park
    • DA photo of your pet
    أظهر الإجابة

    الإجابة: A. One that shows access badges, keys or the site's layout

    Photos of badges, keys or layouts can help attackers copy access or plan entry.

21. السؤال 21 من 25

    You leave the security desk for a patrol. What should you do with the computer?

    • ALeave it open for the next person
    • BTurn up the brightness
    • CTape the password to the monitor
    • DLock the screen or log out
    أظهر الإجابة

    الإجابة: D. Lock the screen or log out

    A locked screen stops others from reading or using your session.

22. السؤال 22 من 25

    A text asks you to call a number to "confirm" your work account. What should you do?

    • ACall the number to check
    • BSave it and report it without replying or calling the number
    • CClick the link in the text to find out more
    • DReply to ask who sent it
    أظهر الإجابة

    الإجابة: B. Save it and report it without replying or calling the number

    Do not reply to the sender; save the message and report it to your supervisor or IT.

23. السؤال 23 من 25

    You realize you typed your password into a fake login page. What should you do?

    • ADelete your email account
    • BTell your supervisor or IT right away and change the password
    • CWait to see if anything happens
    • DSay nothing and hope it is fine
    أظهر الإجابة

    الإجابة: B. Tell your supervisor or IT right away and change the password

    Fast reporting and a password change limit the damage.

24. السؤال 24 من 25

    A guard lost money to a phone scam. In what order should they report it?

    • AA post on social media
    • BOnly their bank
    • COnly the Canadian Anti-Fraud Centre, never police
    • DLocal police first, then the Canadian Anti-Fraud Centre
    أظهر الإجابة

    الإجابة: D. Local police first, then the Canadian Anti-Fraud Centre

    The CAFC says victims should contact local police first, then report to the CAFC.

25. السؤال 25 من 25

    Under PIPEDA, when must an organization report a breach to the Privacy Commissioner?

    • ANever; reporting is optional
    • BOnly when a guard is injured
    • COnly when more than 1,000 people are affected
    • DWhen it creates a real risk of significant harm to someone
    أظهر الإجابة

    الإجابة: D. When it creates a real risk of significant harm to someone

    PIPEDA requires reporting of breaches that create a real risk of significant harm, plus notice to affected people.

لوحة المفاتيح: 1–4 للإجابة، وEnter للسؤال التالي.