Cybersecurity Awareness for Employees Course 2026

1. 第1题，共15题

   What is social engineering?

   • AGrowing a company's social media following
   • BRepairing network problems from a remote office using special software
   • CA type of antivirus program
   • DTricking people into giving away information or access
   显示答案

   答案: D. Tricking people into giving away information or access

   Social engineering uses deception and impersonation to get people to share information, grant access or take harmful actions.

2. 第2题，共15题

   Which of these is a type of malware?

   • AA Trojan horse
   • BA firewall
   • CA virtual private network (VPN)
   • DA password manager
   显示答案

   答案: A. A Trojan horse

   Malware is malicious software. Viruses, worms, Trojan horses, spyware and adware are all types of malware.

3. 第3题，共15题

   What does ransomware do?

   • ALocks systems or data until a payment is made
   • BShows unwanted ads every time you open your web browser
   • CCopies your files to a safe backup location every night
   • DChecks your computer for missing updates
   显示答案

   答案: A. Locks systems or data until a payment is made

   Ransomware is malware that denies a victim access to a system or data until they pay money.

4. 第4题，共15题

   According to the Cyber Centre's National Cyber Threat Assessment 2025-2026, what is almost certainly the most common form of cybercrime affecting Canadians?

   • ATheft of computers from offices
   • BHacking of smart home devices
   • CAttacks on power grids
   • DFraud and scams
   显示答案

   答案: D. Fraud and scams

   The assessment says fraud and scams are almost certainly the most common form of cybercrime affecting Canadians, and phishing is among the most reported types.

5. 第5题，共15题

   The same threat assessment names one threat as almost certainly the most impactful (most damaging) for Canadian organizations. Which one?

   • ARansomware
   • BWebsite defacement
   • CSpam advertising
   • DLost USB keys
   显示答案

   答案: A. Ransomware

   Fraud is more common, but the assessment says ransomware will almost certainly continue to be the most impactful cyber threat facing Canadian organizations.

6. 第6题，共15题

   Why do scammers so often say a request is urgent?

   • ABecause real emergencies at work almost always arrive by email
   • BTo make the message shorter
   • CBecause urgent messages skip spam filters
   • DSo you act before you check if it is real
   显示答案

   答案: D. So you act before you check if it is real

   Pressure and deadlines are a classic warning sign. Scammers want you to act quickly so you do not have time to verify the request.

7. 第7题，共15题

   What is "pretexting"?

   • AWriting a summary of a report
   • BUsing a made-up story or role to gain trust
   • CChecking a message for spelling and grammar mistakes before sending it
   • DSending a reminder message to everyone before a team meeting starts
   显示答案

   答案: B. Using a made-up story or role to gain trust

   Pretexting is a social engineering trick that uses a made-up scenario to build trust and get information or access.

8. 第8题，共15题

   What is "baiting"?

   • ABlocking a spam phone number
   • BLocking your screen when you step away
   • CTesting a backup copy to make sure the files can be restored
   • DLuring someone with a prize or reward
   显示答案

   答案: D. Luring someone with a prize or reward

   Baiting uses something tempting, like a prize or reward, to get the target to click a link or take another harmful action.

9. 第9题，共15题

   What are three common goals of malicious email, according to the Cyber Centre?

   • AAdvertise products, collect customer surveys and share company news
   • BInstall software updates, back up files and check spelling for you
   • CTest inbox storage, sort contact lists and speed up email delivery
   • DStealing sign-in details, spreading malware and stealing or damaging data
   显示答案

   答案: D. Stealing sign-in details, spreading malware and stealing or damaging data

   Threat actors use malicious email to steal credentials, spread malware such as ransomware or spyware, and steal or corrupt information.

10. 第10题，共15题

    What is a deepfake?

    • AAI-made fake audio, video or images of a real person
    • BA backup copy of your files that is stored offline
    • CA very long password made from several random words with spaces
    • DAn email that was deleted from your inbox but can still be recovered
    显示答案

    答案: A. AI-made fake audio, video or images of a real person

    Deepfakes are AI-made audio, video or images. Scammers use them, along with voice cloning, to impersonate people the victim trusts.

11. 第11题，共15题

    The Cyber Centre says "no one is immune" to malicious email. Which group does it list as commonly targeted?

    • AOnly people who never use social media
    • BOnly people who work night shifts or weekends at the office
    • CHelpdesk staff and staff who deal with the public
    • DOnly people who do not have a work email address of their own
    显示答案

    答案: C. Helpdesk staff and staff who deal with the public

    The Cyber Centre lists senior executives and their assistants, helpdesk staff, system administrators, people with access to sensitive information and staff who deal with the public.

12. 第12题，共15题

    A coworker says, "Scammers only go after big banks. Our small clinic has nothing they want." What is the best reply?

    • AOnly the IT team needs to think about cybersecurity, not the rest of us
    • BThat is true, so small offices like ours do not need any security rules
    • COur internet provider blocks all scams
    • DScammers target all kinds of workplaces, so stay alert
    显示答案

    答案: D. Scammers target all kinds of workplaces, so stay alert

    Anyone with access to email, accounts or information can be a target. Fraud and scams are the most common form of cybercrime affecting Canadians, and the Cyber Centre says no one is immune.

13. 第13题，共15题

    Why can one infected computer become a problem for the whole organization?

    • AMalware can spread to other systems on the network
    • BThe infected computer's screen may stop working for everyone
    • CAn infected computer uses much more electricity than the others in the office
    • DEmail becomes slower, but only for that one person
    显示答案

    答案: A. Malware can spread to other systems on the network

    Once one device is infected, malware such as ransomware can spread to other connected systems on the network.

14. 第14题，共15题

    What does "cybercrime-as-a-service" mean?

    • AA security company's paid training course for employees
    • BA free government help line that supports victims of cybercrime
    • CAn insurance policy that pays for losses from cyber attacks
    • DCriminals selling attack tools and stolen data to others
    显示答案

    答案: D. Criminals selling attack tools and stolen data to others

    Specialized criminals sell stolen data and ready-made tools, which makes it easier for less skilled criminals to attack.

15. 第15题，共15题

    Besides locking files, what do many ransomware groups now also do to pressure victims?

    • AInstall missing security updates on the victim's network
    • BSteal data and threaten to leak it
    • CReport the attack to the police themselves
    • DOffer free training
    显示答案

    答案: B. Steal data and threaten to leak it

    The Cyber Centre says attackers now often steal data and threaten to publish it as their main form of extortion.

键盘：按1–4作答，按 Enter 进入下一题。