Cyber Security Awareness Quiz

This 20 question quiz will test your understanding of Modern Cyber Attack Paths and Cyber Security Awareness. It focuses on how real-world cyber attacks begin, how they can progress through an organisation, and the practical steps you can take to prevent, identify, and respond to them.

The questions cover phishing and social engineering, account compromise, payment fraud, passwords and MFA, application permissions, lateral movement, incident response, data protection, backups, recovery, and the role people play in keeping an organisation secure.

The goal is not simply to recognise cyber security terminology, but to understand what you should do when faced with a real security risk. By completing the quiz, you will reinforce the decisions and behaviours that help prevent an initial compromise from developing into a serious business incident.

Choose the most accurate and security-focused answer to each question. Make your attempt count, you only have one chance to pass this quiz.

By continuing, you agree that System Force can use your details to send you your quiz results by email.

1 / 24

1. Why can combining AI automation with human security expertise be valuable?

Automation handles volume while people add judgment to uncertain cases

AI guarantees every automated response will have no operational impact

Human review removes the need to monitor accounts and endpoints continuously

Automation means organisations no longer need incident-response procedures

2 / 24

2. What is the presentation's main distinction between containment and recovery?

Containment restores backups, while recovery investigates suspicious emails

Containment limits spread, while recovery restores normal operations safely

Containment happens after recovery once normal services have been restored

Containment is only technical, while recovery is only a management task

3 / 24

3. What is a sensible way to reduce risk from application access keys or tokens?

Disable monitoring so automated tools can operate without interruptions

Track app access, remove unused keys and limit unnecessary permissions

Keep old access keys active so integrations can be restored more quickly

Give every connected application the same permissions for consistency

4 / 24

4. Why do connected apps and AI assistants create an additional security consideration?

They automatically receive administrator access when first connected

Their access tokens and permissions may reach business data and systems

They cannot be monitored by the same security processes as other apps

They always store an employee's full password in an unencrypted file

5 / 24

5. Why can separate security tools make incident response slower?

Teams may need time to correlate related evidence across different tools

Separate tools prevent organisations from using incident-response plans

Security alerts cannot be investigated until every system is offline

Each security tool requires a separate internet connection to operate

6 / 24

6. What is lateral movement in the context of the attack path presented?

A user transferring company files between approved cloud services

A security team moving alerts into a central reporting dashboard

An attacker moving from an initial foothold into other systems

An employee switching from a laptop to a mobile device for work

7 / 24

7. Why can a phishing email be only the beginning of a modern attack path?

A compromised account can provide routes into connected systems

Once email is accessed, further security controls no longer operate

Email compromise automatically encrypts every network device immediately

Phishing attacks can only succeed when antivirus software is disabled

8 / 24

8. In the framework described, what does the Govern function primarily establish?

A list of every alert generated by security monitoring tools

A schedule for replacing all passwords at fixed monthly intervals

Priorities, risk appetite and accountability for cyber risk

The technical steps required to restore each individual device

9 / 24

9. What are the six functions described in NIST Cybersecurity Framework 2.0?

Govern, Identify, Protect, Detect, Respond and Recover

Guide, Identify, Patch, Diagnose, React and Rebuild

Govern, Investigate, Protect, Disclose, Resolve and Restore

Govern, Inspect, Prevent, Defend, Restore and Review

10 / 24

10. Under the presentation's UK GDPR guidance, when may an organisation need to report a personal-data breach to the ICO?

Whenever any employee receives a suspicious phishing message

Only after the organisation has completely recovered its systems

When it is likely to risk people's rights and freedoms

Only when the affected records include financial information

11 / 24

11. Why should relevant emails, messages, times and payment details be preserved after an incident?

They prevent compromised accounts from being accessed a second time

They allow staff to publicly identify who caused the security incident

They may provide useful evidence for investigation and assessment

They remove the need to involve an IT provider or incident responder

12 / 24

12. If a fraudulent supplier payment has already been sent, what is a key immediate action?

Delete the payment emails to prevent further access to the account

Wait for the supplier to confirm that the money has not arrived

Make a second payment to the supplier using the original bank details

Contact the bank immediately through its known fraud-reporting route

13 / 24

13. Which response best reflects the presentation's approach to suspicious urgent requests?

Trust familiar names, follow the message instructions, then verify later

Ignore all urgent requests until a manager confirms them by email

Stop, verify through a trusted route, and report concerns promptly

Respond quickly, keep the request secret, and record it afterwards

14 / 24

14. An employee clicks a suspicious link and immediately realises it. What should they do first?

Delete the message and wait to see whether anything happens

Restart the computer and continue working without telling anyone

Report the activity promptly through the designated support route

Forward the suspicious message to colleagues to ask their opinion

15 / 24

15. Why should most staff avoid using administrator rights for everyday work?

Limited privileges can reduce damage if an account is compromised

Administrator accounts cannot use multi-factor authentication reliably

Standard accounts automatically block every form of malicious software

Administrator access prevents security updates from being installed

16 / 24

16. What is the best reason for testing backups rather than simply creating them?

A backup is only useful if data can actually be restored

A tested backup removes the need for an incident-response plan

Testing automatically updates every device on the network

Testing ensures backups can never be reached by an attacker

17 / 24

17. Why should one-time sign-in codes never be shared with someone who contacts you?

The code permanently reveals every password stored on the device

They may be attempting to complete a login using a stolen password

The code allows them to disable all company security software

The code automatically grants administrator rights to the network

18 / 24

18. What is the main benefit of using a password manager for business accounts?

It allows one strong password to be reused everywhere safely

It shares access credentials automatically with all colleagues

It helps create and store unique passwords for each service

It removes the need for multi-factor authentication on accounts

19 / 24

19. Why is multi-factor authentication especially important for email and finance accounts?

It automatically replaces every password with a stronger one

It adds another sign-in check if a password is stolen

It prevents all phishing messages from reaching the inbox

It guarantees an account cannot ever be compromised

20 / 24

20. A supplier emails new bank details for an invoice due today. What should you do before paying?

Verify the change using a trusted contact method

Reply to the email and request written confirmation

Use the phone number included in the new email

Pay the invoice first and verify the details later

21 / 24

1. How confident do you feel in your ability to identify and respond to cyber threats after attending this webinar?

22 / 24

2. Any additional feedback you would like to make us aware of?

23 / 24

3. What additional topics would you like to see covered in future cyber resiliency sessions?

24 / 24

4. Which part of the training did you find most valuable for improving your cyber resiliency skills, and why?

Exit

Take our Cyber Security Awareness Quiz