PassEveryTest
Polski

Social Engineering Awareness Course for Guards 2026

This course is for security guards, concierges and reception staff. Social engineering means tricking people into giving access or information. You will learn the common in-person, phone and online tricks, how to verify requests, how to protect site information and how to report an attempt.

  • Kurs
  • Kanada
  • Pytania: 25
  • Sprawdzono 11 października 2026

W skrócie

Ten bezpłatny kurs obejmuje około 15 minut lekcji i test z 25 pytaniami. Uzyskaj co najmniej 80%, aby pobrać zaświadczenie o ukończeniu (prywatne, nieakredytowane). Sprawdzono z oficjalnymi źródłami 11 października 2026.

Zacznij od lekcjiSocial Engineering Course: Lessons: ok. 15 min czytania. Każde pytanie testowe jest omówione w lekcjach.

Czego się nauczysz

  • Explain what social engineering is and why guards are targets
  • Spot tailgating, pretexting and other in-person tricks
  • Recognize phishing, vishing, smishing and QR code scams
  • Verify requests through a separate, trusted channel
  • Protect site information and report attempts correctly

Uzyskaj co najmniej 80%, aby pobrać certyfikat.

  1. Pytanie 1 z 25

    What is social engineering?
    Pokaż odpowiedź

    Odpowiedź: A. Tricking or pressuring people into giving access, information or money

    Social engineering uses manipulation and deception to get people to compromise security.

  2. Pytanie 2 z 25

    Why are security guards common targets of social engineering?
    Pokaż odpowiedź

    Odpowiedź: A. They control doors, keys, codes and visitor logs

    Guards hold access and site knowledge that attackers want.

  3. Pytanie 3 z 25

    A person you do not know follows an employee through a card-access door without badging. What is this called?
    Pokaż odpowiedź

    Odpowiedź: C. Tailgating

    Tailgating is following an authorized person through a secured door without using your own access.

  4. Pytanie 4 z 25

    An employee knowingly holds a secured door for someone who has no access. What is this often called?
    Pokaż odpowiedź

    Odpowiedź: B. Piggybacking

    When the authorized person knowingly lets someone in, it is often called piggybacking.

  5. Pytanie 5 z 25

    A person with arms full of boxes waits for you to hold a secured door. What should you do?
    Pokaż odpowiedź

    Odpowiedź: D. Politely ask them to badge in or sign in before entering

    Every person must use their own access or be signed in, even when they look busy.

  6. Pytanie 6 z 25

    A man in a hi-vis vest says he is a fire inspector and needs into the electrical room now. What should you do first?
    Pokaż odpowiedź

    Odpowiedź: B. Check his ID and verify with the client contact using a number you already have

    Pretexting uses made-up stories; verify through a separate, trusted channel, not details the visitor provides.

  7. Pytanie 7 z 25

    What is pretexting?
    Pokaż odpowiedź

    Odpowiedź: C. Using a made-up story to build trust and get information or access

    Pretexting is using a fabricated scenario to gain trust and extract information.

  8. Pytanie 8 z 25

    You find a USB stick labelled "Payroll" in the lobby. What should you do?
    Pokaż odpowiedź

    Odpowiedź: B. Hand it to IT or your supervisor without plugging it in

    A planted device is a baiting trick; plugging it in could infect the computer.

  9. Pytanie 9 z 25

    Someone stands close behind you while you enter an alarm code. What is the risk?
    Pokaż odpowiedź

    Odpowiedź: C. Shoulder surfing, where they learn the code

    Shoulder surfing means watching someone enter a code or password; shield the keypad.

  10. Pytanie 10 z 25

    A caller says they are from the alarm company and needs the site's alarm code. What should you do?
    Pokaż odpowiedź

    Odpowiedź: A. Refuse, hang up and call the alarm company on a known number

    Never share codes by phone; verify through a separate, trusted channel.

  11. Pytanie 11 z 25

    What is vishing?
    Pokaż odpowiedź

    Odpowiedź: D. A scam using phone calls or voicemail

    Vishing is voice phishing, sometimes with spoofed numbers or AI voice copies.

  12. Pytanie 12 z 25

    What is smishing?
    Pokaż odpowiedź

    Odpowiedź: D. A scam using text messages

    Smishing is phishing by SMS or text message.

  13. Pytanie 13 z 25

    A sticker with a QR code on a parking sign says "Scan to pay". What scam could this be?
    Pokaż odpowiedź

    Odpowiedź: A. Quishing, sending you to a fake payment site

    Quishing uses QR codes that lead to malicious websites.

  14. Pytanie 14 z 25

    Your phone keeps asking you to approve logins you did not start. What should you do?
    Pokaż odpowiedź

    Odpowiedź: A. Deny them and report it, because someone may have your password

    Repeated prompts are an MFA fatigue attack; approving gives the attacker access.

  15. Pytanie 15 z 25

    Which is a warning sign of a phishing email?
    Pokaż odpowiedź

    Odpowiedź: B. The sender's address is slightly different from the real one

    Spoofed or mismatched sender details are a common warning sign.

  16. Pytanie 16 z 25

    How should you check a link in an email before clicking?
    Pokaż odpowiedź

    Odpowiedź: C. Hover over it to see where it really goes

    Hovering shows the real web address so you can check the domain.

  17. Pytanie 17 z 25

    An urgent email from "your bank" asks you to log in through a link today. What should you do?
    Pokaż odpowiedź

    Odpowiedź: A. Do not use the link; contact the bank through its known website or number

    Banks do not send account links in unexpected messages; use a separate, trusted channel.

  18. Pytanie 18 z 25

    Under PIPEDA, which is an example of a physical safeguard for personal information?
    Pokaż odpowiedź

    Odpowiedź: C. Locked filing cabinets and restricted access to offices

    PIPEDA Schedule 1 lists locked cabinets and restricted office access as physical measures.

  19. Pytanie 19 z 25

    Which of these should a guard treat as sensitive information?
    Pokaż odpowiedź

    Odpowiedź: A. Patrol times and door codes

    Patrol times and codes can help criminals plan; keep them private.

  20. Pytanie 20 z 25

    You want to post a photo from your shift on social media. Which photo is a security risk?
    Pokaż odpowiedź

    Odpowiedź: A. One that shows access badges, keys or the site's layout

    Photos of badges, keys or layouts can help attackers copy access or plan entry.

  21. Pytanie 21 z 25

    You leave the security desk for a patrol. What should you do with the computer?
    Pokaż odpowiedź

    Odpowiedź: D. Lock the screen or log out

    A locked screen stops others from reading or using your session.

  22. Pytanie 22 z 25

    A text asks you to call a number to "confirm" your work account. What should you do?
    Pokaż odpowiedź

    Odpowiedź: B. Save it and report it without replying or calling the number

    Do not reply to the sender; save the message and report it to your supervisor or IT.

  23. Pytanie 23 z 25

    You realize you typed your password into a fake login page. What should you do?
    Pokaż odpowiedź

    Odpowiedź: B. Tell your supervisor or IT right away and change the password

    Fast reporting and a password change limit the damage.

  24. Pytanie 24 z 25

    A guard lost money to a phone scam. In what order should they report it?
    Pokaż odpowiedź

    Odpowiedź: D. Local police first, then the Canadian Anti-Fraud Centre

    The CAFC says victims should contact local police first, then report to the CAFC.

  25. Pytanie 25 z 25

    Under PIPEDA, when must an organization report a breach to the Privacy Commissioner?
    Pokaż odpowiedź

    Odpowiedź: D. When it creates a real risk of significant harm to someone

    PIPEDA requires reporting of breaches that create a real risk of significant harm, plus notice to affected people.

Co warto wiedzieć przed egzaminem

  • Social engineering uses manipulation and deception to pressure or trick people into actions that harm personal or organizational security.
  • Do not reply to a suspicious message. Verify requests through a separate, trusted channel instead of using links or numbers in the message.
  • Fraud victims should contact local police first, then report to the Canadian Anti-Fraud Centre online or at 1-888-495-8501.
  • Under PIPEDA, personal information must be protected by safeguards suited to its sensitivity, including physical measures such as locked cabinets and restricted access to offices.
  • Under PIPEDA, organizations must report a breach that creates a real risk of significant harm to the Privacy Commissioner, notify the people affected, and keep records of all breaches.

Najczęściej zadawane pytania

What is tailgating in security?

Tailgating is when someone without access follows an authorized person through a secured door. When the authorized person knowingly holds the door, it is often called piggybacking. Both defeat access control.

What should I do if someone calls claiming to be from the alarm company and asks for the code?

Do not give it. Hang up and call the alarm company or your supervisor using a number you already trust, not one the caller gives you.

What is quishing?

Quishing is phishing that uses QR codes. The code sends you to a fake website that tries to steal your login or payment details.

Where do I report a scam in Canada?

Tell your supervisor and IT team. If you lost money or information, contact your local police, then report to the Canadian Anti-Fraud Centre.

Czy zaświadczenie jest akredytowane lub oficjalnie uznawane?

Nie. To prywatne zaświadczenie o ukończeniu, wyłącznie dla Twojej wiedzy. Nie jest uznawane, akredytowane ani zatwierdzone przez żaden rząd, organ licencyjny, regulatora ani instytucję edukacyjną i nie zastępuje żadnej licencji, certyfikacji ani szkolenia wymaganych przez prawo.

Źródła

Powiązane testy