Cybersecurity Awareness for Employees Course: Protecting workplace information and devices

1. Vraag 1 van 16

   Under PIPEDA, which of these is personal information?

   • AA weather forecast
   • BAn employee's performance review
   • CThe public street address of a city library
   • DThe company's yearly budget for office supplies
   Toon antwoord

   Antwoord: B. An employee's performance review

   Personal information is information about an identifiable person. It includes opinions, evaluations and employee files.

2. Vraag 2 van 16

   Which kinds of personal information are generally treated as sensitive?

   • AThe name of a city's main street
   • BA store's public opening hours
   • CA company's printed product catalogue
   • DHealth and financial details
   Toon antwoord

   Antwoord: D. Health and financial details

   The Privacy Commissioner says health and financial information are generally sensitive, along with other types such as biometric data.

3. Vraag 3 van 16

   Which is an example of a physical safeguard for personal information?

   • AA locked filing cabinet
   • BEncryption software
   • CStaff privacy training
   • DA network firewall
   Toon antwoord

   Antwoord: A. A locked filing cabinet

   PIPEDA safeguards are physical (such as locked cabinets), organizational (such as training) and technological (such as encryption and firewalls).

4. Vraag 4 van 16

   You step away from your desk for a coffee. What should you do with your computer?

   • ALock the screen
   • BClose only your email program
   • CTurn the monitor brightness down
   • DLeave it open so coworkers can use it
   Toon antwoord

   Antwoord: A. Lock the screen

   Get Cyber Safe advises locking your computer when you step away.

5. Vraag 5 van 16

   A new coworker keeps her password on a sticky note under her keyboard. What is the best advice?

   • ADo not keep passwords near the computer; use a passphrase she can remember
   • BMove the sticky note to the side of the monitor so it is easier to find
   • CWrite the password backwards on the note so others cannot read it
   • DShare the note with the team so no one gets locked out
   Toon antwoord

   Antwoord: A. Do not keep passwords near the computer; use a passphrase she can remember

   Get Cyber Safe says not to store your password near your computer.

6. Vraag 6 van 16

   A printed client list is no longer needed. How should it be disposed of?

   • AShred it or use your workplace's secure disposal
   • BPut it in the paper recycling bin
   • CTake it home and put it in your garbage
   • DLeave it in the printer tray for pickup
   Toon antwoord

   Antwoord: A. Shred it or use your workplace's secure disposal

   Personal information cannot simply go in the trash. Paper should be destroyed, for example by shredding, or through your workplace's secure disposal.

7. Vraag 7 van 16

   A coworker at a clinic looks up a neighbour's file out of curiosity but tells no one. Is this a privacy problem?

   • AYes, it is access without a business reason
   • BOnly if the neighbour finds out about it
   • CNo, because the information was not shared with anyone else
   • DNo, because the coworker has a login to the records system
   Toon antwoord

   Antwoord: A. Yes, it is access without a business reason

   Employee snooping is accessing personal information without authorization or a legitimate business reason, even out of curiosity.

8. Vraag 8 van 16

   You find a USB key in the staff parking lot. What should you do?

   • APlug it into a coworker's computer instead of your own
   • BDon't plug it in; give it to IT or security
   • CKeep it and use it for your own work files
   • DPlug it into your computer to find out who owns it
   Toon antwoord

   Antwoord: B. Don't plug it in; give it to IT or security

   Confirm a device is known and trusted before connecting it. Unknown devices may contain malware, and lost items are a classic baiting trick.

9. Vraag 9 van 16

   A vendor at a trade show hands out free USB drives and chargers. What does the Cyber Centre warn?

   • AThey are always tested by the vendor and are safe to use
   • BThey only work with older computers and phones
   • CThey must be used within a week or they stop working
   • DThey may contain malware
   Toon antwoord

   Antwoord: D. They may contain malware

   The Cyber Centre says to be cautious with gifted peripherals from unknown parties because they may contain malware.

10. Vraag 10 van 16

    You are at a café and see two Wi-Fi networks with almost the same name. What should you do?

    • AJoin the one that has the stronger signal
    • BAsk staff which network is theirs
    • CJoin the one that does not need a password
    • DJoin both to compare
    Toon antwoord

    Antwoord: B. Ask staff which network is theirs

    Criminals set up "evil twin" hotspots with similar names. Confirm the network name with the business before connecting.

11. Vraag 11 van 16

    Which activity should you avoid on public Wi-Fi unless you use a VPN?

    • AChecking the schedule for the next bus
    • BSending personal data
    • CLooking up a restaurant's menu
    • DReading the headlines on a news website
    Toon antwoord

    Antwoord: B. Sending personal data

    Do not send personal data or do banking over public Wi-Fi. A VPN routes your traffic through an encrypted connection.

12. Vraag 12 van 16

    Your work laptop says a security update is ready. What is best?

    • ATurn off automatic updates so it stops asking you
    • BSave your work and install it as soon as possible
    • CPostpone it for a few months until things are less busy
    • DIgnore it, since the laptop still works well without it
    Toon antwoord

    Antwoord: B. Save your work and install it as soon as possible

    The Cyber Centre says to apply security patches as soon as possible, because they close holes that malware can use.

13. Vraag 13 van 16

    Why is an "end-of-life" device that the maker no longer supports a risk?

    • AIt cannot connect to any printer or monitor
    • BIt uses far too much power when it is left on
    • CIt always runs more slowly than newer devices
    • DIt no longer gets security updates
    Toon antwoord

    Antwoord: D. It no longer gets security updates

    Unsupported devices stay open to problems that will never be patched. The Cyber Centre recommends replacing them.

14. Vraag 14 van 16

    What is the 3-2-1 backup rule?

    • A3 copies, 2 types of media, 1 copy offsite
    • B3 passwords, 2 devices and 1 backup for each employee
    • C3 copies on 2 USB keys kept in 1 locked desk drawer
    • D3 backups a day, kept for 2 weeks, all saved on 1 drive
    Toon antwoord

    Antwoord: A. 3 copies, 2 types of media, 1 copy offsite

    Keep 3 copies of your information (the original and 2 backups) on 2 different media types, with 1 copy stored offsite.

15. Vraag 15 van 16

    Why should at least one backup be kept offline?

    • ARansomware can reach backups on the network
    • BOffline backups never need to be tested
    • COnline backups are not allowed under Canadian privacy law
    • DOffline backups are always much faster to restore than online ones
    Toon antwoord

    Antwoord: A. Ransomware can reach backups on the network

    The Cyber Centre recommends keeping at least one backup offline, because ransomware can reach backups connected to your network.

16. Vraag 16 van 16

    Which provinces have private-sector privacy laws that are considered substantially similar to PIPEDA?

    • ASaskatchewan, Alberta and Ontario
    • BAlberta, British Columbia and Quebec
    • CBritish Columbia, Ontario and New Brunswick
    • DOntario, Manitoba and Nova Scotia
    Toon antwoord

    Antwoord: B. Alberta, British Columbia and Quebec

    Alberta, British Columbia and Quebec have their own private-sector privacy laws that are considered substantially similar to PIPEDA.

Toetsenbord: 1–4 om te antwoorden, Enter voor de volgende vraag.