1. Please watch the Introduction video and answer questions 1 to 5.

It is the practice of protecting sensitive data and defending systems and networks against damage, unauthorized use or modification, and exploitation.

2. It is the intentional or unintentional exposure of private or confidential information to unauthorized parties.

3. This will help employees become familiar with the latest cyber-security threats and how to prevent them.

4. In cybersecurity, IS and CIA stand for:

5. Threats are:

6. Please click and watch the Social Engineering video in order to answer questions 6 to 12

This refers to any person who commits any illegal activities using technology.

7. It is an act of using human manipulation to divulge confidential or sensitive information.

8. This refers to any person who commits cybercrime by using social engineering technique.

9. Which does not belong in the group:

10. What are the steps in launching a successful reverse social engineering attack?

11. What is PII?

12. Can Social Engineering attacks be prevented?

13. Please click and watch the Creating a Strong Password video in order to answer questions 13 to 16.

This refers to a series of words with numbers and symbols in between and is used when logging into an account.

14. Which of the following is a strong password?

15. Which of the following is an example of a passphrase?

16. It provides another layer of security by providing at least two types information that only the employee knows to ensure that only the employee can access the account.

17. Please click and watch the Phishing video in order to answer questions 17 to 21.

This refers to a form of social engineering technique used to harvest employees’ sensitive information such as their usernames, passwords, and credit card information.

18. It is a form of phishing attack in which the cybercriminals targets a specific employee for a particular gain.

19. It is a form of phishing attack in which the fraudulent message is sent thru SMS or short message service.

20. It is a form of phishing attack in which the cybercriminals gain employees’ sensitive information via fraudulent phone call.

21. It is a form of phishing attack win which the cybercriminals pretends to be an executive or a VIP of the company.