Social Engineering Awareness Course for Guards 2026
This course is for security guards, concierges and reception staff. Social engineering means tricking people into giving access or information. You will learn the common in-person, phone and online tricks, how to verify requests, how to protect site information and how to report an attempt.
Kurz und knapp
Dieser kostenlose Kurs hat Lektionen für etwa 15 Minuten und einen Test mit 25 Fragen. Ab 80 % können Sie eine Teilnahmebescheinigung herunterladen (privat, nicht akkreditiert). Am 11. Oktober 2026 mit offiziellen Quellen abgeglichen.
Das lernen Sie
- Explain what social engineering is and why guards are targets
- Spot tailgating, pretexting and other in-person tricks
- Recognize phishing, vishing, smishing and QR code scams
- Verify requests through a separate, trusted channel
- Protect site information and report attempts correctly
Erreichen Sie mindestens 80 %, um Ihr Zertifikat herunterzuladen.
-
Frage 1 von 25
Antwort anzeigen
Antwort: A. Tricking or pressuring people into giving access, information or money
Social engineering uses manipulation and deception to get people to compromise security.
-
Frage 2 von 25
Antwort anzeigen
Antwort: A. They control doors, keys, codes and visitor logs
Guards hold access and site knowledge that attackers want.
-
Frage 3 von 25
Antwort anzeigen
Antwort: C. Tailgating
Tailgating is following an authorized person through a secured door without using your own access.
-
Frage 4 von 25
Antwort anzeigen
Antwort: B. Piggybacking
When the authorized person knowingly lets someone in, it is often called piggybacking.
-
Frage 5 von 25
Antwort anzeigen
Antwort: D. Politely ask them to badge in or sign in before entering
Every person must use their own access or be signed in, even when they look busy.
-
Frage 6 von 25
Antwort anzeigen
Antwort: B. Check his ID and verify with the client contact using a number you already have
Pretexting uses made-up stories; verify through a separate, trusted channel, not details the visitor provides.
-
Frage 7 von 25
Antwort anzeigen
Antwort: C. Using a made-up story to build trust and get information or access
Pretexting is using a fabricated scenario to gain trust and extract information.
-
Frage 8 von 25
Antwort anzeigen
Antwort: B. Hand it to IT or your supervisor without plugging it in
A planted device is a baiting trick; plugging it in could infect the computer.
-
Frage 9 von 25
Antwort anzeigen
Antwort: C. Shoulder surfing, where they learn the code
Shoulder surfing means watching someone enter a code or password; shield the keypad.
-
Frage 10 von 25
Antwort anzeigen
Antwort: A. Refuse, hang up and call the alarm company on a known number
Never share codes by phone; verify through a separate, trusted channel.
-
Frage 11 von 25
Antwort anzeigen
Antwort: D. A scam using phone calls or voicemail
Vishing is voice phishing, sometimes with spoofed numbers or AI voice copies.
-
Frage 12 von 25
Antwort anzeigen
Antwort: D. A scam using text messages
Smishing is phishing by SMS or text message.
-
Frage 13 von 25
Antwort anzeigen
Antwort: A. Quishing, sending you to a fake payment site
Quishing uses QR codes that lead to malicious websites.
-
Frage 14 von 25
Antwort anzeigen
Antwort: A. Deny them and report it, because someone may have your password
Repeated prompts are an MFA fatigue attack; approving gives the attacker access.
-
Frage 15 von 25
Antwort anzeigen
Antwort: B. The sender's address is slightly different from the real one
Spoofed or mismatched sender details are a common warning sign.
-
Frage 16 von 25
Antwort anzeigen
Antwort: C. Hover over it to see where it really goes
Hovering shows the real web address so you can check the domain.
-
Frage 17 von 25
Antwort anzeigen
Antwort: A. Do not use the link; contact the bank through its known website or number
Banks do not send account links in unexpected messages; use a separate, trusted channel.
-
Frage 18 von 25
Antwort anzeigen
Antwort: C. Locked filing cabinets and restricted access to offices
PIPEDA Schedule 1 lists locked cabinets and restricted office access as physical measures.
-
Frage 19 von 25
Antwort anzeigen
Antwort: A. Patrol times and door codes
Patrol times and codes can help criminals plan; keep them private.
-
Frage 20 von 25
Antwort anzeigen
Antwort: A. One that shows access badges, keys or the site's layout
Photos of badges, keys or layouts can help attackers copy access or plan entry.
-
Frage 21 von 25
Antwort anzeigen
Antwort: D. Lock the screen or log out
A locked screen stops others from reading or using your session.
-
Frage 22 von 25
Antwort anzeigen
Antwort: B. Save it and report it without replying or calling the number
Do not reply to the sender; save the message and report it to your supervisor or IT.
-
Frage 23 von 25
Antwort anzeigen
Antwort: B. Tell your supervisor or IT right away and change the password
Fast reporting and a password change limit the damage.
-
Frage 24 von 25
Antwort anzeigen
Antwort: D. Local police first, then the Canadian Anti-Fraud Centre
The CAFC says victims should contact local police first, then report to the CAFC.
-
Frage 25 von 25
Antwort anzeigen
Antwort: D. When it creates a real risk of significant harm to someone
PIPEDA requires reporting of breaches that create a real risk of significant harm, plus notice to affected people.
Tastatur: 1–4 zum Antworten, Eingabetaste für die nächste Frage.
Was Sie vor der Prüfung wissen sollten
- Social engineering uses manipulation and deception to pressure or trick people into actions that harm personal or organizational security.
- Do not reply to a suspicious message. Verify requests through a separate, trusted channel instead of using links or numbers in the message.
- Fraud victims should contact local police first, then report to the Canadian Anti-Fraud Centre online or at 1-888-495-8501.
- Under PIPEDA, personal information must be protected by safeguards suited to its sensitivity, including physical measures such as locked cabinets and restricted access to offices.
- Under PIPEDA, organizations must report a breach that creates a real risk of significant harm to the Privacy Commissioner, notify the people affected, and keep records of all breaches.
Häufig gestellte Fragen
What is tailgating in security?
Tailgating is when someone without access follows an authorized person through a secured door. When the authorized person knowingly holds the door, it is often called piggybacking. Both defeat access control.
What should I do if someone calls claiming to be from the alarm company and asks for the code?
Do not give it. Hang up and call the alarm company or your supervisor using a number you already trust, not one the caller gives you.
What is quishing?
Quishing is phishing that uses QR codes. The code sends you to a fake website that tries to steal your login or payment details.
Where do I report a scam in Canada?
Tell your supervisor and IT team. If you lost money or information, contact your local police, then report to the Canadian Anti-Fraud Centre.
Ist die Bescheinigung akkreditiert oder offiziell anerkannt?
Nein. Es ist eine private Teilnahmebescheinigung, nur für Ihr Wissen. Sie ist von keiner Behörde, Zulassungsstelle, Aufsichtsbehörde oder Bildungseinrichtung anerkannt, akkreditiert oder genehmigt und ersetzt keine gesetzlich vorgeschriebene Lizenz, Zertifizierung oder Ausbildung.