Cybersecurity Quiz

#1. Which of the following is the biggest cybersecurity threat to your organization?

People inside your organization

People outside your organization

#2. What can happen if you bring your own device (such as your personal cellphone, tablet, external hard drive, USB, or laptop) and plug it into your government workstation?

You can upload malware virus' unsuspectingly to your government workstation.

You can bring the entire GovGuam Network down if your device cross contaminates your workstation.

You can accidentally upload malicious apps that can intercept, modify, or steal government information.

Your device sensors (e.g. microphone, camera) can be accessed by threat actors to steal government information.

All of the above

#3. Of the following passwords, which is the most secure?

Your pet's name

Guam1!

Bi%DuIn!So57Lo

Password123!

#4. Scenario: A desktop pop-up tells you a new update is available for a trusted application that you downloaded. Select all the statements that you believe are correct.

Select all that apply:

If I don’t click it, it will automatically update anyway.

Ignoring the update request leaves my agency vulnerable, and should be done right away to avoid a cyberattack.

It’s better not to apply the update, as the pop-up is likely malicious software..

Updates are not important. They just mean new features or a new design is available.

#5. True or false – a computer cannot be infected/attacked online if the user has an active virtual private network (VPN)?

True

False

#6. Which of the following is a common example of a "phishing" attack?

You receive an email from an acquaintance who you are rarely in contact with that contains only a web link.

You got an email that appears to be from your bank asking you to enter your account number and password, but the web address looks unfamiliar.

You received a text message claiming that you won a contest and asking you to click on the link.

All of the above

#7. Select the statement you believe to be most accurate.

All staff should have training on spotting the signs of a cyberattack

Specific staff (for example, IT professionals) should only be the ones to have training on spotting the signs of a cyberattack

If a business has adequate antivirus software, staff shouldn’t need any training on spotting the signs of a cyberattack

#8. TRUE or FALSE: Software and application updates are not important and can just be ignored.

True

False

#9. If you see a pop-up message like this when you’re on the web, you should:

Click OK to decide whether it’s a legitimate offer.

Click Cancel.

Click the X button on the top right of pop-up window to close

Press Ctrl + F4 on your keyboard to close it

#10. You are traveling with a government issued laptop. How can you help protect data when you’re on the road?

Lock your laptop and mobile phone with strong passwords and PINs.

Encrypt sensitive data on all smartphones, laptops, flash drives, and other portable devices.

Make sure the public Wi-Fi connection encrypts data.

All of the above.

#11. If you’ve installed all the security updates required by your system administrator, you still have to worry about viruses when you click links or open attachments in messages.

True

False

#12. If you get email or an IM from a manager within your organization asking for sensitive personal information (like a password or your Social Security number), it’s okay to supply it.

True

False

#13. When it comes to attachments and links in email, instant messaging, or text messages, which tips should you follow?: (Check three answers that apply.)

Select all that apply:

If the message comes from someone you know personally, it’s okay to open or click them.

Don’t open or click them if they’re out of context—for example, ilovepinkponies.pdf from your boss.

Look carefully at the link or attachment to decide if it’s safe to click.

Make sure your antivirus software is up to date.

View every one with suspicion.

#14. You occasionally work from home. Which is the best way to ensure you are securely accessing your agency's network remotely?

Read OTECH's cybersecurity policies thoroughly.

Use VPN when connecting remotely to your agency's network.

Use unique, complex network passwords and avoid unattended open workstations.

All of the above.

#15. Scenerio: I'm moving my office to another room, but there is no ethernet connection in that room for me to plug my computer into. What should I do?

I take it upon myself to install my own ethernet line and plug into OTECH's switch.

I install my personal router and run a new line into my new office.

Email OTECH requesting permission to add an ethernet line, ensuring end point security.

Hafa Adai

CYBERSECURITY AWARENESS QUIZ

Results

CONGRATULATIONS! YOU PASSED!

A score of Below 70% requires a retake. Thank you for doing your part in securing Gov Guam’s information and network.

#1. Which of the following is the biggest cybersecurity threat to your organization?

#2. What can happen if you bring your own device (such as your personal cellphone, tablet, external hard drive, USB, or laptop) and plug it into your government workstation?

#3. Of the following passwords, which is the most secure?

#4. Scenario: A desktop pop-up tells you a new update is available for a trusted application that you downloaded. Select all the statements that you believe are correct.

#5. True or false – a computer cannot be infected/attacked online if the user has an active virtual private network (VPN)?

#6. Which of the following is a common example of a "phishing" attack?

#7. Select the statement you believe to be most accurate.

#8. TRUE or FALSE: Software and application updates are not important and can just be ignored.

#9. If you see a pop-up message like this when you’re on the web, you should:

#10. You are traveling with a government issued laptop. How can you help protect data when you’re on the road?

#11. If you’ve installed all the security updates required by your system administrator, you still have to worry about viruses when you click links or open attachments in messages.

#12. If you get email or an IM from a manager within your organization asking for sensitive personal information (like a password or your Social Security number), it’s okay to supply it.

#13. When it comes to attachments and links in email, instant messaging, or text messages, which tips should you follow?: (Check three answers that apply.)

#14. You occasionally work from home. Which is the best way to ensure you are securely accessing your agency's network remotely?

#15. Scenerio: I'm moving my office to another room, but there is no ethernet connection in that room for me to plug my computer into. What should I do?

CONTACT US

QUESTIONS, COMMENTS, SUGGESTIONS

FIND US