Cybersecurity Basics: Protect Yourself and Understand the Threats Quiz

Quiz: Security at Work

Pass mark: 70%. You can retry as many times as you need.

1 Why do organizations write security policies? Single answer To replace all technical security tools with written rules To turn legal, contractual and risk requirements into clear shared rules that everyone can follow Only to give the legal department something to file

2 A colleague uses a free online tool to convert a confidential customer contract, without asking IT. What is this an example of, and what is the risk? (several answers) Multiple answers possible It is shadow IT, the use of tools not approved by the organization There is no risk as long as the tool is free Confidential data may be stored or accessed outside the company's control The proper reaction is to ask IT for an approved tool

3 You work from home on a company laptop. Your teenager asks to borrow it "just for ten minutes" to play a game. What should you do? Single answer Allow it if you stay in the room Allow it after disabling the antivirus so the game runs faster Politely decline: the work laptop is for work use only, and your teenager can use a personal device Allow it if you log out of your email first

4 Which are applications of the principle of least privilege? (several answers) Multiple answers possible Using a standard account for daily work, and an administrator account only when needed Giving a new employee the same permissions as a senior colleague, to save time Removing access to a project folder when you leave the project Sharing your login with a colleague who needs a file

5 You think you may have opened a malicious attachment on your work laptop. What is the best sequence of actions? Single answer Delete the email, keep working and see whether anything happens Stop using the laptop, disconnect it if instructed, keep the email and report immediately to the security contact Install a free cleaner found through a web search Wait until the end of the week to mention it, to avoid disturbing the IT team