Cybersecurity Awareness for Employees Course: Reporting incidents and what to do if you clicked

1. Pregunta 1 de 16

   You get a suspicious email at work. Who should you report it to first?

   • AThe person or company that sent it
   • BEvery coworker in your department
   • CNobody; just delete it right away
   • DYour IT or security team
   Ver respuesta

   Respuesta: D. Your IT or security team

   Report suspicious email to your IT and security teams and follow their instructions.

2. Pregunta 2 de 16

   Someone tried to sign in to a work account without permission, but failed. Is that a cyber incident?

   • AYes, an unauthorized attempt counts even if it fails
   • BNo, only attacks that succeed are counted as incidents
   • COnly if it happens three times in one day
   • DNo, only attacks that cost the company money are incidents
   Ver respuesta

   Respuesta: A. Yes, an unauthorized attempt counts even if it fails

   The Cyber Centre defines a cyber incident as any unauthorized attempt, whether successful or not, to access or change a system, network or account.

3. Pregunta 3 de 16

   You think a message is a scam. Before you delete it, what does the Cyber Centre suggest?

   • AReply to the sender to say you know it is a scam
   • BClick the link to see where it goes, then close the page
   • CKeep it for investigation and notify IT or security
   • DPost a screenshot of it on social media to warn others
   Ver respuesta

   Respuesta: C. Keep it for investigation and notify IT or security

   Do not reply. Save the message for investigation and notify your IT or security team right away.

4. Pregunta 4 de 16

   Read the situation. What should you do next?

   You get an email that says a coworker has shared a file with you. You click the link and type your work email and password into the sign-in page. The page then shows an error. Looking again, you notice the web address was "filesharre.example", not the file service your company uses.

   • ADelete the email so no one finds out what happened
   • BTell IT right away and change your password as they direct
   • CClear your browser history and carry on with your work
   • DWait a few days to see if anything strange happens to your account
   Ver respuesta

   Respuesta: B. Tell IT right away and change your password as they direct

   A stolen password can be used right away. Report it at once so IT can protect your account, and change your password and reset MFA as they direct.

5. Pregunta 5 de 16

   Read the situation. Why does it matter to report this even if nothing seems wrong yet?

   You get an email that says a coworker has shared a file with you. You click the link and type your work email and password into the sign-in page. The page then shows an error. Looking again, you notice the web address was "filesharre.example", not the file service your company uses.

   • AThe error page means the attack already failed, so reporting just confirms it
   • BThe stolen login can be used to get in and phish others
   • CReporting is only needed if you have already lost money
   • DPasswords typed on fake pages are deleted automatically
   Ver respuesta

   Respuesta: B. The stolen login can be used to get in and phish others

   Submitted credentials can give attackers access to your accounts, and a taken-over email account can be used to phish others.

6. Pregunta 6 de 16

   You opened an attachment and your computer starts acting strangely. Which step should come first?

   • AStop, disconnect from the network and call IT
   • BKeep working and mention it at the next team meeting
   • CInstall a free cleaning app that you found online
   • DForward the attachment to IT from the same computer so they can check it
   Ver respuesta

   Respuesta: A. Stop, disconnect from the network and call IT

   The Cyber Centre says to stop using the device, disconnect Wi-Fi or network cables and contact your IT security team.

7. Pregunta 7 de 16

   Read the situation. What should you do?

   You come back from lunch. A red message fills your work computer screen: "Your files have been encrypted. Pay 0.5 Bitcoin within 48 hours to get them back, or we will publish your company's data." Many of your files now have a strange new file extension.

   • AEmail the attacker and ask for a lower price for the key
   • BPay quickly before the 48-hour deadline runs out
   • CRestart the computer several times to clear the message
   • DDisconnect it from the network and report it now
   Ver respuesta

   Respuesta: D. Disconnect it from the network and report it now

   Isolate the device at once to stop the spread, then report so the incident response plan can start.

8. Pregunta 8 de 16

   Read the situation. Does paying the ransom guarantee the files come back?

   You come back from lunch. A red message fills your work computer screen: "Your files have been encrypted. Pay 0.5 Bitcoin within 48 hours to get them back, or we will publish your company's data." Many of your files now have a strange new file extension.

   • AYes, if the payment is approved by a manager
   • BNo, and they may still leak the data
   • CYes, as long as the payment is made before the deadline
   • DYes, attackers always unlock the files after they are paid
   Ver respuesta

   Respuesta: B. No, and they may still leak the data

   The Cyber Centre says payment does not guarantee recovery. Attackers may demand more, attack again or leak the data.

9. Pregunta 9 de 16

   You gave your bank card details to a scammer on the phone. Who should you contact right away?

   • AThe scammer, to ask for a refund
   • BA friend, for advice on what to do
   • CYour bank
   • DYour internet or phone provider
   Ver respuesta

   Respuesta: C. Your bank

   Contact your bank or card company if you shared payment or banking details, so it can block charges and protect your account.

10. Pregunta 10 de 16

    What is the Canadian Anti-Fraud Centre's toll-free phone number?

    • A1-800-959-8281
    • B7726
    • C911
    • D1-888-495-8501
    Ver respuesta

    Respuesta: D. 1-888-495-8501

    You can report fraud to the CAFC online or toll-free at 1-888-495-8501.

11. Pregunta 11 de 16

    You spotted a scam but did not lose any money. Should you report it to the Canadian Anti-Fraud Centre?

    • AYes, the CAFC asks for reports even if you were not a victim
    • BNo, the CAFC only accepts reports from people who lost money
    • CNo, only the police are allowed to report scams to the CAFC
    • DOnly if the scam came to you by regular mail
    Ver respuesta

    Respuesta: A. Yes, the CAFC asks for reports even if you were not a victim

    The CAFC recommends reporting fraud whether or not you are a victim. Reports can be made online, even anonymously.

12. Pregunta 12 de 16

    After a fraud, someone contacts you offering to recover your lost money for a fee. What should you know?

    • AMoney recovery services like this are run by the police
    • BThese offers always come from your own bank
    • CIt is a common follow-up scam; never pay
    • DPaying a small fee is the fastest way to get your money back
    Ver respuesta

    Respuesta: C. It is a common follow-up scam; never pay

    The CAFC warns that fraudsters often target victims again by promising to recover lost money.

13. Pregunta 13 de 16

    When you report a suspicious phone call, which details are most useful?

    • AYour best guess about the caller's age and where they live
    • BOnly the name the caller gave you
    • CTheir number and any websites they told you to visit
    • DOnly how many minutes the call lasted
    Ver respuesta

    Respuesta: C. Their number and any websites they told you to visit

    The Cyber Centre says to write down the scammer's phone number and any websites you were asked to visit, then report the scam.

14. Pregunta 14 de 16

    Read the situation. What should you do first?

    You meant to email a spreadsheet to your coworker, Sam Tran. The spreadsheet lists 40 clients' names, home addresses and banking details. The email program filled in the wrong address, and the email went to sam.tran@outsidefirm.example, a person outside your company.

    • AWait a week to see if anyone complains
    • BAsk the person who got it to delete it and to tell no one
    • CSay nothing, since it was an honest accident and no harm was meant
    • DReport it right away to your supervisor or privacy contact
    Ver respuesta

    Respuesta: D. Report it right away to your supervisor or privacy contact

    Sending personal information to the wrong person is a privacy breach. Your organization must quickly assess the risk and decide who to notify.

15. Pregunta 15 de 16

    Under PIPEDA, when must an organization report a breach to the Privacy Commissioner and notify the people affected?

    • AOnly when the breach is reported in the news or online
    • BWhen it creates a real risk of significant harm
    • COnly when money is stolen
    • DOnly when more than 1,000 people are affected by the breach
    Ver respuesta

    Respuesta: B. When it creates a real risk of significant harm

    Reporting and notice are required when a breach creates a real risk of significant harm, whether it affects one person or many.

16. Pregunta 16 de 16

    How long must an organization keep a record of every breach of security safeguards under PIPEDA?

    • ATen years
    • BSix months
    • CTwo years
    • DThirty days
    Ver respuesta

    Respuesta: C. Two years

    Organizations must keep records of all breaches, even those not reported, for two years.

Teclado: 1–4 para responder, Intro para la siguiente pregunta.