Security basics quiz
Ten vendor-neutral questions on phishing, multi-factor authentication, passwords and tailgating, for a training session or Cybersecurity Awareness Month. Add a question or two about how to report a problem at your own company.
Opens in the editor so you can review and change it before you save. You’ll sign in with your email first if you haven’t.
The questions
An email from “IT Support” asks you to confirm your password through a link. What should you do?
- A Click and confirm it quickly
- B Reply with your password
- C Report it as suspected phishing
- D Forward it to your team
What does MFA stand for?
- A Multi-factor authentication
- B Managed firewall access
- C Main file archive
- D Multiple form approval
Your phone shows a sign-in approval request you didn’t start. What should you do?
- A Approve it to make it stop
- B Deny it and tell IT or security
- C Ignore it and keep working
- D Approve it, then change your password
Which of these passwords is strongest?
- A P@ssw0rd!
- B Summer2026
- C blue-kettle-orbit-meadow
- D qwerty123
What is the main risk of using the same password on several sites?
- A It’s harder to remember
- B One leak can open all of those accounts
- C Sites will lock you out
- D There is no real risk
A caller says they’re from IT and asks for the one-time code just sent to your phone. What should you do?
- A Read them the code
- B Never share it: hang up and report the call
- C Text the code instead
- D Share it if they know your name
A message from your manager urgently asks you to buy gift cards today. What’s the safest first step?
- A Buy them before the deadline
- B Confirm with your manager another way
- C Reply to ask for the amount
- D Forward it to a colleague to buy
Before you click a link in an email on a computer, how can you see where it really goes?
- A Hover over it to see the address
- B Check that the sender’s name looks right
- C Click it and look at the page
- D Look for a company logo
In office security, what is “tailgating”?
- A Following someone through a secure door without using your own badge
- B Sending an email to the wrong person
- C Parking too close to another car
- D Reading over someone’s shoulder
Someone you don’t know follows you toward a secure door, carrying boxes. What’s the best response?
- A Hold the door to be helpful
- B Politely point them to reception
- C Lend them your badge
- D Ignore them
Show answers
- C · Report it as suspected phishing
- A · Multi-factor authentication
- B · Deny it and tell IT or security
- C · blue-kettle-orbit-meadow
- B · One leak can open all of those accounts
- B · Never share it: hang up and report the call
- B · Confirm with your manager another way
- A · Hover over it to see the address
- A · Following someone through a secure door without using your own badge
- B · Politely point them to reception