Cybersecurity Awareness for Employees Course: Protecting workplace information and devices

1. Question 1 of 16

   Under PIPEDA, which of these is personal information?

   • AA weather forecast
   • BAn employee's performance review
   • CThe public street address of a city library
   • DThe company's yearly budget for office supplies
   Show answer

   Answer: B. An employee's performance review

   Personal information is information about an identifiable person. It includes opinions, evaluations and employee files.

2. Question 2 of 16

   Which kinds of personal information are generally treated as sensitive?

   • AThe name of a city's main street
   • BA store's public opening hours
   • CA company's printed product catalogue
   • DHealth and financial details
   Show answer

   Answer: D. Health and financial details

   The Privacy Commissioner says health and financial information are generally sensitive, along with other types such as biometric data.

3. Question 3 of 16

   Which is an example of a physical safeguard for personal information?

   • AA locked filing cabinet
   • BEncryption software
   • CStaff privacy training
   • DA network firewall
   Show answer

   Answer: A. A locked filing cabinet

   PIPEDA safeguards are physical (such as locked cabinets), organizational (such as training) and technological (such as encryption and firewalls).

4. Question 4 of 16

   You step away from your desk for a coffee. What should you do with your computer?

   • ALock the screen
   • BClose only your email program
   • CTurn the monitor brightness down
   • DLeave it open so coworkers can use it
   Show answer

   Answer: A. Lock the screen

   Get Cyber Safe advises locking your computer when you step away.

5. Question 5 of 16

   A new coworker keeps her password on a sticky note under her keyboard. What is the best advice?

   • ADo not keep passwords near the computer; use a passphrase she can remember
   • BMove the sticky note to the side of the monitor so it is easier to find
   • CWrite the password backwards on the note so others cannot read it
   • DShare the note with the team so no one gets locked out
   Show answer

   Answer: A. Do not keep passwords near the computer; use a passphrase she can remember

   Get Cyber Safe says not to store your password near your computer.

6. Question 6 of 16

   A printed client list is no longer needed. How should it be disposed of?

   • AShred it or use your workplace's secure disposal
   • BPut it in the paper recycling bin
   • CTake it home and put it in your garbage
   • DLeave it in the printer tray for pickup
   Show answer

   Answer: A. Shred it or use your workplace's secure disposal

   Personal information cannot simply go in the trash. Paper should be destroyed, for example by shredding, or through your workplace's secure disposal.

7. Question 7 of 16

   A coworker at a clinic looks up a neighbour's file out of curiosity but tells no one. Is this a privacy problem?

   • AYes, it is access without a business reason
   • BOnly if the neighbour finds out about it
   • CNo, because the information was not shared with anyone else
   • DNo, because the coworker has a login to the records system
   Show answer

   Answer: A. Yes, it is access without a business reason

   Employee snooping is accessing personal information without authorization or a legitimate business reason, even out of curiosity.

8. Question 8 of 16

   You find a USB key in the staff parking lot. What should you do?

   • APlug it into a coworker's computer instead of your own
   • BDon't plug it in; give it to IT or security
   • CKeep it and use it for your own work files
   • DPlug it into your computer to find out who owns it
   Show answer

   Answer: B. Don't plug it in; give it to IT or security

   Confirm a device is known and trusted before connecting it. Unknown devices may contain malware, and lost items are a classic baiting trick.

9. Question 9 of 16

   A vendor at a trade show hands out free USB drives and chargers. What does the Cyber Centre warn?

   • AThey are always tested by the vendor and are safe to use
   • BThey only work with older computers and phones
   • CThey must be used within a week or they stop working
   • DThey may contain malware
   Show answer

   Answer: D. They may contain malware

   The Cyber Centre says to be cautious with gifted peripherals from unknown parties because they may contain malware.

10. Question 10 of 16

    You are at a café and see two Wi-Fi networks with almost the same name. What should you do?

    • AJoin the one that has the stronger signal
    • BAsk staff which network is theirs
    • CJoin the one that does not need a password
    • DJoin both to compare
    Show answer

    Answer: B. Ask staff which network is theirs

    Criminals set up "evil twin" hotspots with similar names. Confirm the network name with the business before connecting.

11. Question 11 of 16

    Which activity should you avoid on public Wi-Fi unless you use a VPN?

    • AChecking the schedule for the next bus
    • BSending personal data
    • CLooking up a restaurant's menu
    • DReading the headlines on a news website
    Show answer

    Answer: B. Sending personal data

    Do not send personal data or do banking over public Wi-Fi. A VPN routes your traffic through an encrypted connection.

12. Question 12 of 16

    Your work laptop says a security update is ready. What is best?

    • ATurn off automatic updates so it stops asking you
    • BSave your work and install it as soon as possible
    • CPostpone it for a few months until things are less busy
    • DIgnore it, since the laptop still works well without it
    Show answer

    Answer: B. Save your work and install it as soon as possible

    The Cyber Centre says to apply security patches as soon as possible, because they close holes that malware can use.

13. Question 13 of 16

    Why is an "end-of-life" device that the maker no longer supports a risk?

    • AIt cannot connect to any printer or monitor
    • BIt uses far too much power when it is left on
    • CIt always runs more slowly than newer devices
    • DIt no longer gets security updates
    Show answer

    Answer: D. It no longer gets security updates

    Unsupported devices stay open to problems that will never be patched. The Cyber Centre recommends replacing them.

14. Question 14 of 16

    What is the 3-2-1 backup rule?

    • A3 copies, 2 types of media, 1 copy offsite
    • B3 passwords, 2 devices and 1 backup for each employee
    • C3 copies on 2 USB keys kept in 1 locked desk drawer
    • D3 backups a day, kept for 2 weeks, all saved on 1 drive
    Show answer

    Answer: A. 3 copies, 2 types of media, 1 copy offsite

    Keep 3 copies of your information (the original and 2 backups) on 2 different media types, with 1 copy stored offsite.

15. Question 15 of 16

    Why should at least one backup be kept offline?

    • ARansomware can reach backups on the network
    • BOffline backups never need to be tested
    • COnline backups are not allowed under Canadian privacy law
    • DOffline backups are always much faster to restore than online ones
    Show answer

    Answer: A. Ransomware can reach backups on the network

    The Cyber Centre recommends keeping at least one backup offline, because ransomware can reach backups connected to your network.

16. Question 16 of 16

    Which provinces have private-sector privacy laws that are considered substantially similar to PIPEDA?

    • ASaskatchewan, Alberta and Ontario
    • BAlberta, British Columbia and Quebec
    • CBritish Columbia, Ontario and New Brunswick
    • DOntario, Manitoba and Nova Scotia
    Show answer

    Answer: B. Alberta, British Columbia and Quebec

    Alberta, British Columbia and Quebec have their own private-sector privacy laws that are considered substantially similar to PIPEDA.

Keyboard: 1–4 to answer, Enter for the next question.