Cybersecurity Awareness for Employees Course：Protecting workplace information and devices

1. 第1题，共16题

   Under PIPEDA, which of these is personal information?

   • AA weather forecast
   • BAn employee's performance review
   • CThe public street address of a city library
   • DThe company's yearly budget for office supplies
   显示答案

   答案: B. An employee's performance review

   Personal information is information about an identifiable person. It includes opinions, evaluations and employee files.

2. 第2题，共16题

   Which kinds of personal information are generally treated as sensitive?

   • AThe name of a city's main street
   • BA store's public opening hours
   • CA company's printed product catalogue
   • DHealth and financial details
   显示答案

   答案: D. Health and financial details

   The Privacy Commissioner says health and financial information are generally sensitive, along with other types such as biometric data.

3. 第3题，共16题

   Which is an example of a physical safeguard for personal information?

   • AA locked filing cabinet
   • BEncryption software
   • CStaff privacy training
   • DA network firewall
   显示答案

   答案: A. A locked filing cabinet

   PIPEDA safeguards are physical (such as locked cabinets), organizational (such as training) and technological (such as encryption and firewalls).

4. 第4题，共16题

   You step away from your desk for a coffee. What should you do with your computer?

   • ALock the screen
   • BClose only your email program
   • CTurn the monitor brightness down
   • DLeave it open so coworkers can use it
   显示答案

   答案: A. Lock the screen

   Get Cyber Safe advises locking your computer when you step away.

5. 第5题，共16题

   A new coworker keeps her password on a sticky note under her keyboard. What is the best advice?

   • ADo not keep passwords near the computer; use a passphrase she can remember
   • BMove the sticky note to the side of the monitor so it is easier to find
   • CWrite the password backwards on the note so others cannot read it
   • DShare the note with the team so no one gets locked out
   显示答案

   答案: A. Do not keep passwords near the computer; use a passphrase she can remember

   Get Cyber Safe says not to store your password near your computer.

6. 第6题，共16题

   A printed client list is no longer needed. How should it be disposed of?

   • AShred it or use your workplace's secure disposal
   • BPut it in the paper recycling bin
   • CTake it home and put it in your garbage
   • DLeave it in the printer tray for pickup
   显示答案

   答案: A. Shred it or use your workplace's secure disposal

   Personal information cannot simply go in the trash. Paper should be destroyed, for example by shredding, or through your workplace's secure disposal.

7. 第7题，共16题

   A coworker at a clinic looks up a neighbour's file out of curiosity but tells no one. Is this a privacy problem?

   • AYes, it is access without a business reason
   • BOnly if the neighbour finds out about it
   • CNo, because the information was not shared with anyone else
   • DNo, because the coworker has a login to the records system
   显示答案

   答案: A. Yes, it is access without a business reason

   Employee snooping is accessing personal information without authorization or a legitimate business reason, even out of curiosity.

8. 第8题，共16题

   You find a USB key in the staff parking lot. What should you do?

   • APlug it into a coworker's computer instead of your own
   • BDon't plug it in; give it to IT or security
   • CKeep it and use it for your own work files
   • DPlug it into your computer to find out who owns it
   显示答案

   答案: B. Don't plug it in; give it to IT or security

   Confirm a device is known and trusted before connecting it. Unknown devices may contain malware, and lost items are a classic baiting trick.

9. 第9题，共16题

   A vendor at a trade show hands out free USB drives and chargers. What does the Cyber Centre warn?

   • AThey are always tested by the vendor and are safe to use
   • BThey only work with older computers and phones
   • CThey must be used within a week or they stop working
   • DThey may contain malware
   显示答案

   答案: D. They may contain malware

   The Cyber Centre says to be cautious with gifted peripherals from unknown parties because they may contain malware.

10. 第10题，共16题

    You are at a café and see two Wi-Fi networks with almost the same name. What should you do?

    • AJoin the one that has the stronger signal
    • BAsk staff which network is theirs
    • CJoin the one that does not need a password
    • DJoin both to compare
    显示答案

    答案: B. Ask staff which network is theirs

    Criminals set up "evil twin" hotspots with similar names. Confirm the network name with the business before connecting.

11. 第11题，共16题

    Which activity should you avoid on public Wi-Fi unless you use a VPN?

    • AChecking the schedule for the next bus
    • BSending personal data
    • CLooking up a restaurant's menu
    • DReading the headlines on a news website
    显示答案

    答案: B. Sending personal data

    Do not send personal data or do banking over public Wi-Fi. A VPN routes your traffic through an encrypted connection.

12. 第12题，共16题

    Your work laptop says a security update is ready. What is best?

    • ATurn off automatic updates so it stops asking you
    • BSave your work and install it as soon as possible
    • CPostpone it for a few months until things are less busy
    • DIgnore it, since the laptop still works well without it
    显示答案

    答案: B. Save your work and install it as soon as possible

    The Cyber Centre says to apply security patches as soon as possible, because they close holes that malware can use.

13. 第13题，共16题

    Why is an "end-of-life" device that the maker no longer supports a risk?

    • AIt cannot connect to any printer or monitor
    • BIt uses far too much power when it is left on
    • CIt always runs more slowly than newer devices
    • DIt no longer gets security updates
    显示答案

    答案: D. It no longer gets security updates

    Unsupported devices stay open to problems that will never be patched. The Cyber Centre recommends replacing them.

14. 第14题，共16题

    What is the 3-2-1 backup rule?

    • A3 copies, 2 types of media, 1 copy offsite
    • B3 passwords, 2 devices and 1 backup for each employee
    • C3 copies on 2 USB keys kept in 1 locked desk drawer
    • D3 backups a day, kept for 2 weeks, all saved on 1 drive
    显示答案

    答案: A. 3 copies, 2 types of media, 1 copy offsite

    Keep 3 copies of your information (the original and 2 backups) on 2 different media types, with 1 copy stored offsite.

15. 第15题，共16题

    Why should at least one backup be kept offline?

    • ARansomware can reach backups on the network
    • BOffline backups never need to be tested
    • COnline backups are not allowed under Canadian privacy law
    • DOffline backups are always much faster to restore than online ones
    显示答案

    答案: A. Ransomware can reach backups on the network

    The Cyber Centre recommends keeping at least one backup offline, because ransomware can reach backups connected to your network.

16. 第16题，共16题

    Which provinces have private-sector privacy laws that are considered substantially similar to PIPEDA?

    • ASaskatchewan, Alberta and Ontario
    • BAlberta, British Columbia and Quebec
    • CBritish Columbia, Ontario and New Brunswick
    • DOntario, Manitoba and Nova Scotia
    显示答案

    答案: B. Alberta, British Columbia and Quebec

    Alberta, British Columbia and Quebec have their own private-sector privacy laws that are considered substantially similar to PIPEDA.

键盘：按1–4作答，按 Enter 进入下一题。