PassEveryTest
Français

Cybersecurity Awareness for Employees Course 2026

This course is for employees in Canada who use email, phones or computers at work. It covers common threats, phishing and payment scams, passwords and multi-factor authentication, protecting information and devices, and what to do when something goes wrong. Each topic has a short lesson and an untimed quiz, followed by a timed 30-question final assessment; score 80% or more to earn a Certificate of Completion.

  • Formation
  • Canada
  • 98 questions
  • Vérifié le 13 octobre 2026
  • Vérifié (faits) le 13 octobre 2026

En bref

Ce cours gratuit comprend environ 150 minutes de leçons, 6 quiz thématiques sans limite de temps (98 questions au total) et une évaluation finale chronométrée de 30 questions tirées au hasard. Obtenez 80 % ou plus à l’évaluation finale pour télécharger une attestation de réussite (privée, non accréditée). Vérifié à partir des sources officielles le 13 octobre 2026.

Commencez par les leçonsCybersecurity Awareness for Employees Course: Lessons : environ 150 minutes de lecture. Chaque question du test est traitée dans les leçons.

Ce que vous allez apprendre

  • Explain why every employee can be a target and name the most common cyber threats in Canada
  • Spot the warning signs of phishing in emails, texts, phone calls and QR codes
  • Verify payment, banking and gift card requests before acting
  • Create strong passphrases and use password managers and multi-factor authentication safely
  • Protect personal and workplace information on paper, devices, Wi-Fi and USB
  • Report incidents quickly and take the right first steps after clicking or sharing something

Obtenez 80 % ou plus pour télécharger votre certificat.

Votre plan d’étude

Lisez chaque leçon, faites son quiz thématique (sans limite de temps, avec explications), puis l’évaluation finale chronométrée. Un nouveau mélange de questions est tiré à chaque fois. Votre progression est enregistrée dans ce navigateur.

  1. Lire les leçons6 leçons, environ 150 min
  2. Quiz thématique 1 : Why cybersecurity matters at work15 questions
  3. Quiz thématique 2 : Spotting phishing: email, text, phone and QR codes19 questions
  4. Quiz thématique 3 : Payment fraud, fake invoices and CEO scams16 questions
  5. Quiz thématique 4 : Passwords, passphrases and multi-factor authentication16 questions
  6. Quiz thématique 5 : Protecting workplace information and devices16 questions
  7. Quiz thématique 6 : Reporting incidents and what to do if you clicked16 questions
  8. Examen final30 questions, 35 min · Obtenez 80 % ou plus

Quiz thématique 1 : Why cybersecurity matters at work

  1. Question 1 sur 15

    What is social engineering?
    Voir la réponse

    Réponse: D. Tricking people into giving away information or access

    Social engineering uses deception and impersonation to get people to share information, grant access or take harmful actions.

  2. Question 2 sur 15

    Which of these is a type of malware?
    Voir la réponse

    Réponse: A. A Trojan horse

    Malware is malicious software. Viruses, worms, Trojan horses, spyware and adware are all types of malware.

  3. Question 3 sur 15

    What does ransomware do?
    Voir la réponse

    Réponse: A. Locks systems or data until a payment is made

    Ransomware is malware that denies a victim access to a system or data until they pay money.

  4. Question 4 sur 15

    According to the Cyber Centre's National Cyber Threat Assessment 2025-2026, what is almost certainly the most common form of cybercrime affecting Canadians?
    Voir la réponse

    Réponse: D. Fraud and scams

    The assessment says fraud and scams are almost certainly the most common form of cybercrime affecting Canadians, and phishing is among the most reported types.

  5. Question 5 sur 15

    The same threat assessment names one threat as almost certainly the most impactful (most damaging) for Canadian organizations. Which one?
    Voir la réponse

    Réponse: A. Ransomware

    Fraud is more common, but the assessment says ransomware will almost certainly continue to be the most impactful cyber threat facing Canadian organizations.

  6. Question 6 sur 15

    Why do scammers so often say a request is urgent?
    Voir la réponse

    Réponse: D. So you act before you check if it is real

    Pressure and deadlines are a classic warning sign. Scammers want you to act quickly so you do not have time to verify the request.

  7. Question 7 sur 15

    What is "pretexting"?
    Voir la réponse

    Réponse: B. Using a made-up story or role to gain trust

    Pretexting is a social engineering trick that uses a made-up scenario to build trust and get information or access.

  8. Question 8 sur 15

    What is "baiting"?
    Voir la réponse

    Réponse: D. Luring someone with a prize or reward

    Baiting uses something tempting, like a prize or reward, to get the target to click a link or take another harmful action.

  9. Question 9 sur 15

    What are three common goals of malicious email, according to the Cyber Centre?
    Voir la réponse

    Réponse: D. Stealing sign-in details, spreading malware and stealing or damaging data

    Threat actors use malicious email to steal credentials, spread malware such as ransomware or spyware, and steal or corrupt information.

  10. Question 10 sur 15

    What is a deepfake?
    Voir la réponse

    Réponse: A. AI-made fake audio, video or images of a real person

    Deepfakes are AI-made audio, video or images. Scammers use them, along with voice cloning, to impersonate people the victim trusts.

  11. Question 11 sur 15

    The Cyber Centre says "no one is immune" to malicious email. Which group does it list as commonly targeted?
    Voir la réponse

    Réponse: C. Helpdesk staff and staff who deal with the public

    The Cyber Centre lists senior executives and their assistants, helpdesk staff, system administrators, people with access to sensitive information and staff who deal with the public.

  12. Question 12 sur 15

    A coworker says, "Scammers only go after big banks. Our small clinic has nothing they want." What is the best reply?
    Voir la réponse

    Réponse: D. Scammers target all kinds of workplaces, so stay alert

    Anyone with access to email, accounts or information can be a target. Fraud and scams are the most common form of cybercrime affecting Canadians, and the Cyber Centre says no one is immune.

  13. Question 13 sur 15

    Why can one infected computer become a problem for the whole organization?
    Voir la réponse

    Réponse: A. Malware can spread to other systems on the network

    Once one device is infected, malware such as ransomware can spread to other connected systems on the network.

  14. Question 14 sur 15

    What does "cybercrime-as-a-service" mean?
    Voir la réponse

    Réponse: D. Criminals selling attack tools and stolen data to others

    Specialized criminals sell stolen data and ready-made tools, which makes it easier for less skilled criminals to attack.

  15. Question 15 sur 15

    Besides locking files, what do many ransomware groups now also do to pressure victims?
    Voir la réponse

    Réponse: B. Steal data and threaten to leak it

    The Cyber Centre says attackers now often steal data and threaten to publish it as their main form of extortion.

À savoir avant l’examen

  • Fraud and scams are almost certainly the most common form of cybercrime affecting Canadians, and phishing is one of the most reported types of fraud.
  • Ransomware will almost certainly remain the most impactful cyber threat facing Canadian organizations.
  • The Cyber Centre recommends passphrases of at least 4 words and 15 characters, or passwords of at least 12 characters.
  • You can forward spam and scam texts to 7726 (SPAM on most keypads) so your cellular provider can investigate and block them.
  • Fraud can be reported to the Canadian Anti-Fraud Centre online or toll-free at 1-888-495-8501, even if you were not a victim.
  • Under PIPEDA, a breach that creates a real risk of significant harm must be reported to the Privacy Commissioner and the people affected must be notified; records of all breaches must be kept for two years.

Questions fréquentes

Is this an official cybersecurity certification?

No. When you pass the final assessment you get a PassEveryTest Certificate of Completion, which shows you finished this general awareness course. It is not an accredited cybersecurity certification and does not replace the security training your employer requires.

How does the final assessment work?

It has 30 questions drawn at random from the course question bank, with a 35-minute time limit. You need 80% to pass, and each attempt gives you a new mix of questions.

What should I do if I clicked a suspicious link at work?

Stop using the device and tell your IT or security team right away. If you typed in your password, change it and reset multi-factor authentication as they direct.

Where do I report a scam text message?

Forward it to 7726 (SPAM) so your phone provider can investigate. You can also report scams to the Canadian Anti-Fraud Centre online or at 1-888-495-8501.

Do I need technical knowledge to take this course?

No. It is written for everyday employees who use email, phones and computers at work.

L’attestation est-elle accréditée ou reconnue officiellement ?

Non. C’est une attestation de réussite privée, uniquement pour vos connaissances. Elle n’est reconnue, accréditée ni approuvée par aucun gouvernement, organisme de délivrance des permis, autorité de réglementation ou établissement d’enseignement, et elle ne remplace aucun permis, aucune certification ni aucune formation exigés par la loi.

Sources

Tests associés