Social Engineering Awareness Course for Guards 2026

1. 第1题，共25题

   What is social engineering?

   • ATricking or pressuring people into giving access, information or money
   • BTraining dogs for patrol
   • CBuilding a new security system
   • DRepairing broken locks
   显示答案

   答案: A. Tricking or pressuring people into giving access, information or money

   Social engineering uses manipulation and deception to get people to compromise security.

2. 第2题，共25题

   Why are security guards common targets of social engineering?

   • AThey control doors, keys, codes and visitor logs
   • BThey are paid more than other staff
   • CThey work only in daytime
   • DThey never check ID
   显示答案

   答案: A. They control doors, keys, codes and visitor logs

   Guards hold access and site knowledge that attackers want.

3. 第3题，共25题

   A person you do not know follows an employee through a card-access door without badging. What is this called?

   • APhishing
   • BBaiting
   • CTailgating
   • DQuishing
   显示答案

   答案: C. Tailgating

   Tailgating is following an authorized person through a secured door without using your own access.

4. 第4题，共25题

   An employee knowingly holds a secured door for someone who has no access. What is this often called?

   • ASmishing
   • BPiggybacking
   • CWhaling
   • DShoulder surfing
   显示答案

   答案: B. Piggybacking

   When the authorized person knowingly lets someone in, it is often called piggybacking.

5. 第5题，共25题

   A person with arms full of boxes waits for you to hold a secured door. What should you do?

   • ATake the boxes and let them in
   • BIgnore them and walk away
   • CHold the door to be helpful
   • DPolitely ask them to badge in or sign in before entering
   显示答案

   答案: D. Politely ask them to badge in or sign in before entering

   Every person must use their own access or be signed in, even when they look busy.

6. 第6题，共25题

   A man in a hi-vis vest says he is a fire inspector and needs into the electrical room now. What should you do first?

   • ARefuse and call 911 right away
   • BCheck his ID and verify with the client contact using a number you already have
   • CAsk him for his supervisor's number and call it
   • DLet him in because he looks official
   显示答案

   答案: B. Check his ID and verify with the client contact using a number you already have

   Pretexting uses made-up stories; verify through a separate, trusted channel, not details the visitor provides.

7. 第7题，共25题

   What is pretexting?

   • ASending a text message with a link
   • BLeaving a USB stick in a parking lot
   • CUsing a made-up story to build trust and get information or access
   • DWatching someone type a code
   显示答案

   答案: C. Using a made-up story to build trust and get information or access

   Pretexting is using a fabricated scenario to gain trust and extract information.

8. 第8题，共25题

   You find a USB stick labelled "Payroll" in the lobby. What should you do?

   • AThrow it in the garbage
   • BHand it to IT or your supervisor without plugging it in
   • CPlug it into the desk computer to find the owner
   • DKeep it for yourself
   显示答案

   答案: B. Hand it to IT or your supervisor without plugging it in

   A planted device is a baiting trick; plugging it in could infect the computer.

9. 第9题，共25题

   Someone stands close behind you while you enter an alarm code. What is the risk?

   • AQuishing
   • BMFA fatigue
   • CShoulder surfing, where they learn the code
   • DTailgating into the parking lot
   显示答案

   答案: C. Shoulder surfing, where they learn the code

   Shoulder surfing means watching someone enter a code or password; shield the keypad.

10. 第10题，共25题

    A caller says they are from the alarm company and needs the site's alarm code. What should you do?

    • ARefuse, hang up and call the alarm company on a known number
    • BAsk them to call back in an hour and then give it
    • CGive half of the code
    • DGive the code because they know the company name
    显示答案

    答案: A. Refuse, hang up and call the alarm company on a known number

    Never share codes by phone; verify through a separate, trusted channel.

11. 第11题，共25题

    What is vishing?

    • AA scam using QR codes
    • BA scam using text messages
    • CFollowing someone through a door
    • DA scam using phone calls or voicemail
    显示答案

    答案: D. A scam using phone calls or voicemail

    Vishing is voice phishing, sometimes with spoofed numbers or AI voice copies.

12. 第12题，共25题

    What is smishing?

    • AA scam using phone calls
    • BA scam using QR codes
    • CA scam using USB sticks
    • DA scam using text messages
    显示答案

    答案: D. A scam using text messages

    Smishing is phishing by SMS or text message.

13. 第13题，共25题

    A sticker with a QR code on a parking sign says "Scan to pay". What scam could this be?

    • AQuishing, sending you to a fake payment site
    • BPiggybacking
    • CTailgating
    • DWhaling
    显示答案

    答案: A. Quishing, sending you to a fake payment site

    Quishing uses QR codes that lead to malicious websites.

14. 第14题，共25题

    Your phone keeps asking you to approve logins you did not start. What should you do?

    • ADeny them and report it, because someone may have your password
    • BApprove one so the alerts stop
    • CTurn off your phone for the shift
    • DIgnore them and say nothing
    显示答案

    答案: A. Deny them and report it, because someone may have your password

    Repeated prompts are an MFA fatigue attack; approving gives the attacker access.

15. 第15题，共25题

    Which is a warning sign of a phishing email?

    • AIt has no links or attachments
    • BThe sender's address is slightly different from the real one
    • CIt uses your company's normal greeting
    • DIt comes from a coworker you were expecting to hear from
    显示答案

    答案: B. The sender's address is slightly different from the real one

    Spoofed or mismatched sender details are a common warning sign.

16. 第16题，共25题

    How should you check a link in an email before clicking?

    • AForward it to friends to check
    • BClick it quickly and close the page
    • CHover over it to see where it really goes
    • DReply and ask the sender
    显示答案

    答案: C. Hover over it to see where it really goes

    Hovering shows the real web address so you can check the domain.

17. 第17题，共25题

    An urgent email from "your bank" asks you to log in through a link today. What should you do?

    • ADo not use the link; contact the bank through its known website or number
    • BForward it to the whole team
    • CClick the link and log in
    • DReply with your card number
    显示答案

    答案: A. Do not use the link; contact the bank through its known website or number

    Banks do not send account links in unexpected messages; use a separate, trusted channel.

18. 第18题，共25题

    Under PIPEDA, which is an example of a physical safeguard for personal information?

    • AA privacy notice on a website
    • BA strong password policy
    • CLocked filing cabinets and restricted access to offices
    • DA staff training video
    显示答案

    答案: C. Locked filing cabinets and restricted access to offices

    PIPEDA Schedule 1 lists locked cabinets and restricted office access as physical measures.

19. 第19题，共25题

    Which of these should a guard treat as sensitive information?

    • APatrol times and door codes
    • BThe name of the city
    • CThe colour of the lobby walls
    • DThe building's street address
    显示答案

    答案: A. Patrol times and door codes

    Patrol times and codes can help criminals plan; keep them private.

20. 第20题，共25题

    You want to post a photo from your shift on social media. Which photo is a security risk?

    • AOne that shows access badges, keys or the site's layout
    • BA photo of your lunch at home
    • CA photo of a sunset from a public park
    • DA photo of your pet
    显示答案

    答案: A. One that shows access badges, keys or the site's layout

    Photos of badges, keys or layouts can help attackers copy access or plan entry.

21. 第21题，共25题

    You leave the security desk for a patrol. What should you do with the computer?

    • ALeave it open for the next person
    • BTurn up the brightness
    • CTape the password to the monitor
    • DLock the screen or log out
    显示答案

    答案: D. Lock the screen or log out

    A locked screen stops others from reading or using your session.

22. 第22题，共25题

    A text asks you to call a number to "confirm" your work account. What should you do?

    • ACall the number to check
    • BSave it and report it without replying or calling the number
    • CClick the link in the text to find out more
    • DReply to ask who sent it
    显示答案

    答案: B. Save it and report it without replying or calling the number

    Do not reply to the sender; save the message and report it to your supervisor or IT.

23. 第23题，共25题

    You realize you typed your password into a fake login page. What should you do?

    • ADelete your email account
    • BTell your supervisor or IT right away and change the password
    • CWait to see if anything happens
    • DSay nothing and hope it is fine
    显示答案

    答案: B. Tell your supervisor or IT right away and change the password

    Fast reporting and a password change limit the damage.

24. 第24题，共25题

    A guard lost money to a phone scam. In what order should they report it?

    • AA post on social media
    • BOnly their bank
    • COnly the Canadian Anti-Fraud Centre, never police
    • DLocal police first, then the Canadian Anti-Fraud Centre
    显示答案

    答案: D. Local police first, then the Canadian Anti-Fraud Centre

    The CAFC says victims should contact local police first, then report to the CAFC.

25. 第25题，共25题

    Under PIPEDA, when must an organization report a breach to the Privacy Commissioner?

    • ANever; reporting is optional
    • BOnly when a guard is injured
    • COnly when more than 1,000 people are affected
    • DWhen it creates a real risk of significant harm to someone
    显示答案

    答案: D. When it creates a real risk of significant harm to someone

    PIPEDA requires reporting of breaches that create a real risk of significant harm, plus notice to affected people.

键盘：按1–4作答，按 Enter 进入下一题。