Cybersecurity Awareness for Employees Course：Reporting incidents and what to do if you clicked

1. 第1题，共16题

   You get a suspicious email at work. Who should you report it to first?

   • AThe person or company that sent it
   • BEvery coworker in your department
   • CNobody; just delete it right away
   • DYour IT or security team
   显示答案

   答案: D. Your IT or security team

   Report suspicious email to your IT and security teams and follow their instructions.

2. 第2题，共16题

   Someone tried to sign in to a work account without permission, but failed. Is that a cyber incident?

   • AYes, an unauthorized attempt counts even if it fails
   • BNo, only attacks that succeed are counted as incidents
   • COnly if it happens three times in one day
   • DNo, only attacks that cost the company money are incidents
   显示答案

   答案: A. Yes, an unauthorized attempt counts even if it fails

   The Cyber Centre defines a cyber incident as any unauthorized attempt, whether successful or not, to access or change a system, network or account.

3. 第3题，共16题

   You think a message is a scam. Before you delete it, what does the Cyber Centre suggest?

   • AReply to the sender to say you know it is a scam
   • BClick the link to see where it goes, then close the page
   • CKeep it for investigation and notify IT or security
   • DPost a screenshot of it on social media to warn others
   显示答案

   答案: C. Keep it for investigation and notify IT or security

   Do not reply. Save the message for investigation and notify your IT or security team right away.

4. 第4题，共16题

   Read the situation. What should you do next?

   You get an email that says a coworker has shared a file with you. You click the link and type your work email and password into the sign-in page. The page then shows an error. Looking again, you notice the web address was "filesharre.example", not the file service your company uses.

   • ADelete the email so no one finds out what happened
   • BTell IT right away and change your password as they direct
   • CClear your browser history and carry on with your work
   • DWait a few days to see if anything strange happens to your account
   显示答案

   答案: B. Tell IT right away and change your password as they direct

   A stolen password can be used right away. Report it at once so IT can protect your account, and change your password and reset MFA as they direct.

5. 第5题，共16题

   Read the situation. Why does it matter to report this even if nothing seems wrong yet?

   You get an email that says a coworker has shared a file with you. You click the link and type your work email and password into the sign-in page. The page then shows an error. Looking again, you notice the web address was "filesharre.example", not the file service your company uses.

   • AThe error page means the attack already failed, so reporting just confirms it
   • BThe stolen login can be used to get in and phish others
   • CReporting is only needed if you have already lost money
   • DPasswords typed on fake pages are deleted automatically
   显示答案

   答案: B. The stolen login can be used to get in and phish others

   Submitted credentials can give attackers access to your accounts, and a taken-over email account can be used to phish others.

6. 第6题，共16题

   You opened an attachment and your computer starts acting strangely. Which step should come first?

   • AStop, disconnect from the network and call IT
   • BKeep working and mention it at the next team meeting
   • CInstall a free cleaning app that you found online
   • DForward the attachment to IT from the same computer so they can check it
   显示答案

   答案: A. Stop, disconnect from the network and call IT

   The Cyber Centre says to stop using the device, disconnect Wi-Fi or network cables and contact your IT security team.

7. 第7题，共16题

   Read the situation. What should you do?

   You come back from lunch. A red message fills your work computer screen: "Your files have been encrypted. Pay 0.5 Bitcoin within 48 hours to get them back, or we will publish your company's data." Many of your files now have a strange new file extension.

   • AEmail the attacker and ask for a lower price for the key
   • BPay quickly before the 48-hour deadline runs out
   • CRestart the computer several times to clear the message
   • DDisconnect it from the network and report it now
   显示答案

   答案: D. Disconnect it from the network and report it now

   Isolate the device at once to stop the spread, then report so the incident response plan can start.

8. 第8题，共16题

   Read the situation. Does paying the ransom guarantee the files come back?

   You come back from lunch. A red message fills your work computer screen: "Your files have been encrypted. Pay 0.5 Bitcoin within 48 hours to get them back, or we will publish your company's data." Many of your files now have a strange new file extension.

   • AYes, if the payment is approved by a manager
   • BNo, and they may still leak the data
   • CYes, as long as the payment is made before the deadline
   • DYes, attackers always unlock the files after they are paid
   显示答案

   答案: B. No, and they may still leak the data

   The Cyber Centre says payment does not guarantee recovery. Attackers may demand more, attack again or leak the data.

9. 第9题，共16题

   You gave your bank card details to a scammer on the phone. Who should you contact right away?

   • AThe scammer, to ask for a refund
   • BA friend, for advice on what to do
   • CYour bank
   • DYour internet or phone provider
   显示答案

   答案: C. Your bank

   Contact your bank or card company if you shared payment or banking details, so it can block charges and protect your account.

10. 第10题，共16题

    What is the Canadian Anti-Fraud Centre's toll-free phone number?

    • A1-800-959-8281
    • B7726
    • C911
    • D1-888-495-8501
    显示答案

    答案: D. 1-888-495-8501

    You can report fraud to the CAFC online or toll-free at 1-888-495-8501.

11. 第11题，共16题

    You spotted a scam but did not lose any money. Should you report it to the Canadian Anti-Fraud Centre?

    • AYes, the CAFC asks for reports even if you were not a victim
    • BNo, the CAFC only accepts reports from people who lost money
    • CNo, only the police are allowed to report scams to the CAFC
    • DOnly if the scam came to you by regular mail
    显示答案

    答案: A. Yes, the CAFC asks for reports even if you were not a victim

    The CAFC recommends reporting fraud whether or not you are a victim. Reports can be made online, even anonymously.

12. 第12题，共16题

    After a fraud, someone contacts you offering to recover your lost money for a fee. What should you know?

    • AMoney recovery services like this are run by the police
    • BThese offers always come from your own bank
    • CIt is a common follow-up scam; never pay
    • DPaying a small fee is the fastest way to get your money back
    显示答案

    答案: C. It is a common follow-up scam; never pay

    The CAFC warns that fraudsters often target victims again by promising to recover lost money.

13. 第13题，共16题

    When you report a suspicious phone call, which details are most useful?

    • AYour best guess about the caller's age and where they live
    • BOnly the name the caller gave you
    • CTheir number and any websites they told you to visit
    • DOnly how many minutes the call lasted
    显示答案

    答案: C. Their number and any websites they told you to visit

    The Cyber Centre says to write down the scammer's phone number and any websites you were asked to visit, then report the scam.

14. 第14题，共16题

    Read the situation. What should you do first?

    You meant to email a spreadsheet to your coworker, Sam Tran. The spreadsheet lists 40 clients' names, home addresses and banking details. The email program filled in the wrong address, and the email went to sam.tran@outsidefirm.example, a person outside your company.

    • AWait a week to see if anyone complains
    • BAsk the person who got it to delete it and to tell no one
    • CSay nothing, since it was an honest accident and no harm was meant
    • DReport it right away to your supervisor or privacy contact
    显示答案

    答案: D. Report it right away to your supervisor or privacy contact

    Sending personal information to the wrong person is a privacy breach. Your organization must quickly assess the risk and decide who to notify.

15. 第15题，共16题

    Under PIPEDA, when must an organization report a breach to the Privacy Commissioner and notify the people affected?

    • AOnly when the breach is reported in the news or online
    • BWhen it creates a real risk of significant harm
    • COnly when money is stolen
    • DOnly when more than 1,000 people are affected by the breach
    显示答案

    答案: B. When it creates a real risk of significant harm

    Reporting and notice are required when a breach creates a real risk of significant harm, whether it affects one person or many.

16. 第16题，共16题

    How long must an organization keep a record of every breach of security safeguards under PIPEDA?

    • ATen years
    • BSix months
    • CTwo years
    • DThirty days
    显示答案

    答案: C. Two years

    Organizations must keep records of all breaches, even those not reported, for two years.

键盘：按1–4作答，按 Enter 进入下一题。