Cybersecurity Awareness for Employees Course: Protecting workplace information and devices

1. Question 1 sur 16

   Under PIPEDA, which of these is personal information?

   • AA weather forecast
   • BAn employee's performance review
   • CThe public street address of a city library
   • DThe company's yearly budget for office supplies
   Voir la réponse

   Réponse: B. An employee's performance review

   Personal information is information about an identifiable person. It includes opinions, evaluations and employee files.

2. Question 2 sur 16

   Which kinds of personal information are generally treated as sensitive?

   • AThe name of a city's main street
   • BA store's public opening hours
   • CA company's printed product catalogue
   • DHealth and financial details
   Voir la réponse

   Réponse: D. Health and financial details

   The Privacy Commissioner says health and financial information are generally sensitive, along with other types such as biometric data.

3. Question 3 sur 16

   Which is an example of a physical safeguard for personal information?

   • AA locked filing cabinet
   • BEncryption software
   • CStaff privacy training
   • DA network firewall
   Voir la réponse

   Réponse: A. A locked filing cabinet

   PIPEDA safeguards are physical (such as locked cabinets), organizational (such as training) and technological (such as encryption and firewalls).

4. Question 4 sur 16

   You step away from your desk for a coffee. What should you do with your computer?

   • ALock the screen
   • BClose only your email program
   • CTurn the monitor brightness down
   • DLeave it open so coworkers can use it
   Voir la réponse

   Réponse: A. Lock the screen

   Get Cyber Safe advises locking your computer when you step away.

5. Question 5 sur 16

   A new coworker keeps her password on a sticky note under her keyboard. What is the best advice?

   • ADo not keep passwords near the computer; use a passphrase she can remember
   • BMove the sticky note to the side of the monitor so it is easier to find
   • CWrite the password backwards on the note so others cannot read it
   • DShare the note with the team so no one gets locked out
   Voir la réponse

   Réponse: A. Do not keep passwords near the computer; use a passphrase she can remember

   Get Cyber Safe says not to store your password near your computer.

6. Question 6 sur 16

   A printed client list is no longer needed. How should it be disposed of?

   • AShred it or use your workplace's secure disposal
   • BPut it in the paper recycling bin
   • CTake it home and put it in your garbage
   • DLeave it in the printer tray for pickup
   Voir la réponse

   Réponse: A. Shred it or use your workplace's secure disposal

   Personal information cannot simply go in the trash. Paper should be destroyed, for example by shredding, or through your workplace's secure disposal.

7. Question 7 sur 16

   A coworker at a clinic looks up a neighbour's file out of curiosity but tells no one. Is this a privacy problem?

   • AYes, it is access without a business reason
   • BOnly if the neighbour finds out about it
   • CNo, because the information was not shared with anyone else
   • DNo, because the coworker has a login to the records system
   Voir la réponse

   Réponse: A. Yes, it is access without a business reason

   Employee snooping is accessing personal information without authorization or a legitimate business reason, even out of curiosity.

8. Question 8 sur 16

   You find a USB key in the staff parking lot. What should you do?

   • APlug it into a coworker's computer instead of your own
   • BDon't plug it in; give it to IT or security
   • CKeep it and use it for your own work files
   • DPlug it into your computer to find out who owns it
   Voir la réponse

   Réponse: B. Don't plug it in; give it to IT or security

   Confirm a device is known and trusted before connecting it. Unknown devices may contain malware, and lost items are a classic baiting trick.

9. Question 9 sur 16

   A vendor at a trade show hands out free USB drives and chargers. What does the Cyber Centre warn?

   • AThey are always tested by the vendor and are safe to use
   • BThey only work with older computers and phones
   • CThey must be used within a week or they stop working
   • DThey may contain malware
   Voir la réponse

   Réponse: D. They may contain malware

   The Cyber Centre says to be cautious with gifted peripherals from unknown parties because they may contain malware.

10. Question 10 sur 16

    You are at a café and see two Wi-Fi networks with almost the same name. What should you do?

    • AJoin the one that has the stronger signal
    • BAsk staff which network is theirs
    • CJoin the one that does not need a password
    • DJoin both to compare
    Voir la réponse

    Réponse: B. Ask staff which network is theirs

    Criminals set up "evil twin" hotspots with similar names. Confirm the network name with the business before connecting.

11. Question 11 sur 16

    Which activity should you avoid on public Wi-Fi unless you use a VPN?

    • AChecking the schedule for the next bus
    • BSending personal data
    • CLooking up a restaurant's menu
    • DReading the headlines on a news website
    Voir la réponse

    Réponse: B. Sending personal data

    Do not send personal data or do banking over public Wi-Fi. A VPN routes your traffic through an encrypted connection.

12. Question 12 sur 16

    Your work laptop says a security update is ready. What is best?

    • ATurn off automatic updates so it stops asking you
    • BSave your work and install it as soon as possible
    • CPostpone it for a few months until things are less busy
    • DIgnore it, since the laptop still works well without it
    Voir la réponse

    Réponse: B. Save your work and install it as soon as possible

    The Cyber Centre says to apply security patches as soon as possible, because they close holes that malware can use.

13. Question 13 sur 16

    Why is an "end-of-life" device that the maker no longer supports a risk?

    • AIt cannot connect to any printer or monitor
    • BIt uses far too much power when it is left on
    • CIt always runs more slowly than newer devices
    • DIt no longer gets security updates
    Voir la réponse

    Réponse: D. It no longer gets security updates

    Unsupported devices stay open to problems that will never be patched. The Cyber Centre recommends replacing them.

14. Question 14 sur 16

    What is the 3-2-1 backup rule?

    • A3 copies, 2 types of media, 1 copy offsite
    • B3 passwords, 2 devices and 1 backup for each employee
    • C3 copies on 2 USB keys kept in 1 locked desk drawer
    • D3 backups a day, kept for 2 weeks, all saved on 1 drive
    Voir la réponse

    Réponse: A. 3 copies, 2 types of media, 1 copy offsite

    Keep 3 copies of your information (the original and 2 backups) on 2 different media types, with 1 copy stored offsite.

15. Question 15 sur 16

    Why should at least one backup be kept offline?

    • ARansomware can reach backups on the network
    • BOffline backups never need to be tested
    • COnline backups are not allowed under Canadian privacy law
    • DOffline backups are always much faster to restore than online ones
    Voir la réponse

    Réponse: A. Ransomware can reach backups on the network

    The Cyber Centre recommends keeping at least one backup offline, because ransomware can reach backups connected to your network.

16. Question 16 sur 16

    Which provinces have private-sector privacy laws that are considered substantially similar to PIPEDA?

    • ASaskatchewan, Alberta and Ontario
    • BAlberta, British Columbia and Quebec
    • CBritish Columbia, Ontario and New Brunswick
    • DOntario, Manitoba and Nova Scotia
    Voir la réponse

    Réponse: B. Alberta, British Columbia and Quebec

    Alberta, British Columbia and Quebec have their own private-sector privacy laws that are considered substantially similar to PIPEDA.

Clavier : 1–4 pour répondre, Entrée pour la question suivante.