Recognizing Phishing and Scams Course 2026

1. 第1题，共16题

   A scammer does not break into a computer. Instead, they trick the person using it into giving access. What is this approach called?

   • ASocial engineering
   • BInstalling a software patch
   • CEncrypting the hard drive
   • DMonitoring the office network
   显示答案

   答案: A. Social engineering

   Social engineering works on people, not machines, to get information, access or money.

2. 第2题，共16题

   A message says, "Reply in the next 30 minutes or your account will be closed." Which pressure tactic is this?

   • AA casual tone
   • BUrgency
   • CFamiliarity
   • DSympathy
   显示答案

   答案: B. Urgency

   A tight deadline is urgency. It is meant to stop you from pausing to check.

3. 第3题，共16题

   A caller says he is a police officer and that you will be arrested today unless you pay. Which tactics is he using?

   • AA prize and a reward
   • BFamiliarity and a casual tone
   • CAuthority and threats
   • DSympathy and flattery
   显示答案

   答案: C. Authority and threats

   Claiming to be police uses authority, and the arrest warning is a threat. The Cyber Centre lists both as social engineering tactics.

4. 第4题，共16题

   Which payment request is a strong sign of a scam?

   • APaying a known supplier through the usual approval process
   • BPaying for groceries with a credit card at the till
   • CPaying a hydro bill on your bank's own website
   • DPaying a "fine" with gift cards
   显示答案

   答案: D. Paying a "fine" with gift cards

   Scammers ask for gift cards and prepaid cards because the money is hard to trace and hard to get back.

5. 第5题，共16题

   Why do scammers often ask to be paid in cryptocurrency?

   • AIn most cases the payment cannot be reversed
   • BBanks require it for payments over $100
   • CIt is the only payment the government accepts
   • DIt comes with free fraud insurance
   显示答案

   答案: A. In most cases the payment cannot be reversed

   The CAFC warns that cryptocurrency payments in most cases cannot be reversed, so the money is usually lost.

6. 第6题，共16题

   According to the Cyber Centre's National Cyber Threat Assessment 2025-2026, how are cybercriminals almost certainly using large language models (AI chatbots)?

   • AOnly to translate their fake websites into Canadian French
   • BTo block phishing emails before they reach any Canadians
   • CTo improve social engineering attacks such as phishing
   • DTo replace phone calls entirely
   显示答案

   答案: C. To improve social engineering attacks such as phishing

   The assessment says cybercriminals are almost certainly using LLMs to improve social engineering, including personal phishing emails at scale.

7. 第7题，共16题

   Which kind of phishing does the National Cyber Threat Assessment 2025-2026 say has one of the highest reported levels of financial impact on victims?

   • AQR code posters placed in transit stations
   • BSpear phishing aimed at chosen people
   • CPop-up ads on gaming sites
   • DPrize spam sent to millions of random people
   显示答案

   答案: B. Spear phishing aimed at chosen people

   Spear phishing targets specific people or organizations and has one of the highest reported financial impacts.

8. 第8题，共16题

   According to the Cyber Centre, what does voice cloning need to copy someone's voice?

   • AAccess to the person's phone account
   • BHours of studio recordings
   • CThe person's written permission
   • DA short audio sample of the person
   显示答案

   答案: D. A short audio sample of the person

   The Cyber Centre says threat actors use AI and short audio samples to create a copy of a person's voice.

9. 第9题，共16题

   Get Cyber Safe lists warning signs that a message or call may be AI-generated. Which is one of them?

   • AA call from a number saved in your contacts
   • BA voice call that sounds robotic or "off"
   • CA message that is short and to the point
   • DA call that comes during business hours
   显示答案

   答案: B. A voice call that sounds robotic or "off"

   Get Cyber Safe lists overly polished messages, voice calls that sound robotic or off, and suspiciously urgent content.

10. 第10题，共16题

    Why do scammers often tell you to keep a request secret?

    • ASo the payment arrives faster
    • BBecause the law requires it for bank payments
    • CBecause police always work in secret with the public
    • DSo no one can warn you that it is a scam
    显示答案

    答案: D. So no one can warn you that it is a scam

    Secrecy, such as a fake "gag order", cuts you off from people who would spot the scam.

11. 第11题，共16题

    Where do scammers often find the personal details that make their messages seem real?

    • AOnly in paper mail stolen from the victim's mailbox
    • BInside the victim's antivirus software reports
    • CIn things people post publicly on social media
    • DNowhere; they always guess
    显示答案

    答案: C. In things people post publicly on social media

    Get Cyber Safe warns that fraudsters use facts you made public on social media to make a request seem legitimate.

12. 第12题，共16题

    What is "quid pro quo" in social engineering?

    • ACopying a website to a new address
    • BFollowing someone through a locked door without using a badge or card
    • CFlooding an inbox with thousands of emails to hide a real alert
    • DOffering a service or benefit in return for information or a task
    显示答案

    答案: D. Offering a service or benefit in return for information or a task

    In quid pro quo, the attacker offers something, like free tech help, and asks for sensitive information or a task in return.

13. 第13题，共16题

    What is "scareware"?

    • AA fake warning that scares you into a harmful step
    • BSoftware that blocks frightening videos for children
    • CA tool that backs up your files before an attack
    • DAn app that checks QR codes before you scan them
    显示答案

    答案: A. A fake warning that scares you into a harmful step

    The Cyber Centre describes scareware as an attempt to scare you into believing your device is at risk so you take a harmful action.

14. 第14题，共16题

    Read the message. Which tactics does it use?

    Message in a chat app, from "Jordan (Hockey Team)":

    Hey! Coach asked me to collect for the tournament bus. Can you send $60 by e-transfer to this new email: jordan.bus2026@mailbox.example? My usual account is locked. Need it by noon, sorry for the rush!

    • AAuthority and threats of arrest
    • BScareware and a fake pop-up
    • CA prize offer and fear
    • DFamiliarity and urgency
    显示答案

    答案: D. Familiarity and urgency

    It uses a friendly, familiar name and a noon deadline. A new payment address is another warning sign.

15. 第15题，共16题

    Read the message. What is the safest next step?

    Message in a chat app, from "Jordan (Hockey Team)":

    Hey! Coach asked me to collect for the tournament bus. Can you send $60 by e-transfer to this new email: jordan.bus2026@mailbox.example? My usual account is locked. Need it by noon, sorry for the rush!

    • ASend half now and the rest after the tournament
    • BSend the money, since $60 is a small amount and Jordan is a teammate
    • CContact Jordan or the coach using a number you already have
    • DReply in the chat and ask whether it is really Jordan
    显示答案

    答案: C. Contact Jordan or the coach using a number you already have

    Verify through a different channel you already trust. Replying in the same chat may reach the scammer.

16. 第16题，共16题

    A coworker says, "I'd never fall for a scam. I can always tell." Which reply fits this course best?

    • AScams are rare in Canada, so there is little risk
    • BAnyone can be fooled, so verify every unusual request
    • CScams only happen to people who use social media
    • DThat's right; only older people who are new to technology fall for scams
    显示答案

    答案: B. Anyone can be fooled, so verify every unusual request

    Fraud and scams are almost certainly the most common cybercrime affecting Canadians, and AI makes them more convincing.

键盘：按1–4作答，按 Enter 进入下一题。