Quiz: How to Spot a Phishing Email

1. You receive an e-mail from your bank in which you are asked to click on a link to share your internet banking login information - i.e. username, password, one-time password (OTP). The rationale given is : “We notice suspicious activity in your account and need to verify your identity. Else, your accounts will be frozen effective immediately.” What will you do?

1. You receive an e-mail from your bank in which you are asked to click on a link to share your internet banking login information - i.e. username, password, one-time password (OTP). The rationale given is : “We notice suspicious activity in your account and need to verify your identity. Else, your accounts will be frozen effective immediately.” What will you do?

A

Click on the link and share all the required details

B

Call the bank customer service hotline and clarify

C

Share the link to your friend and ask him to click it

D

None of the above

2. On Monday morning, your manager emails you to open a pdf document containing information about your next performance appraisal. You have never received such an email before as your manager usually talks about it before scheduling a 1-1 conversation on performance. Should you open the pdf document?

2. On Monday morning, your manager emails you to open a pdf document containing information about your next performance appraisal. You have never received such an email before as your manager usually talks about it before scheduling a 1-1 conversation on performance. Should you open the pdf document?

A

Yes

B

No

3. You are tired of your current job. It’s been years that you are toiling away and feel like there is no prospect for growth. You have also been liking, re-posting content about career growth on LinkedIn. Today, you receive an email from LinkedIn about new career opportunities and roles that you are eligible for. All the roles are relevant and appear exciting. However, normally this kind of email is sent to your personal email address, but you got this one in your work inbox. What should you do?

3. You are tired of your current job. It’s been years that you are toiling away and feel like there is no prospect for growth. You have also been liking, re-posting content about career growth on LinkedIn. Today, you receive an email from LinkedIn about new career opportunities and roles that you are eligible for. All the roles are relevant and appear exciting. However, normally this kind of email is sent to your personal email address, but you got this one in your work inbox. What should you do?

A

Click the link and learn about the new roles available

B

Share the email with your colleague who is equally frustrated in current role

C

Save the email for reference later

D

Report this email as spam

4. An email arrives in your company inbox that seems to be from one of your team’s vendors. It asks you to click on a link to update your business account. Should you click?

A

No, I should verify if this email is really from the vendor I work with

B

Yes, I know and trust this vendor

5. Which one of these statements is correct?

A

You can open links in an email that looks like it’s from someone you know, as long as you have anti-virus protection and a spam blocker

B

You can trust an email really comes from a client if it contains the client’s logo and has information about the client that you know to be true.

C

Last evening, an email arrived from the IT Admin department asking you to provide personal information right away to update some business accounts. You should check it out first to make sure they are who they say they are.

D

Your colleague messages you to ask for the password to an account you both use frequently. You should give it right away.

6. Email authentication can help protect you against phishing attacks.

A

True

B

False

7. You have clicked on a link from an email that you later realized is suspicious. What should you do?

A

For sensitive accounts related to this email id, change passwords

B

Inform the IT department by escalating this suspicious email

C

Scan your computer, from which you opened this email, for malware, viruses

D

All of the above

8. You have decided to become a digital nomad and work from Bali for a quarter. The day after you have arrived in Ubud and settled into your favorite AirBnB location, you decide to login to your email account to check on work matters. As you enter the URL to navigate to your work email login address, you are directed to a page that looks very similar to your work account’s email login page, but the placement of the logo and some text appear off. What should you do?

8. You have decided to become a digital nomad and work from Bali for a quarter. The day after you have arrived in Ubud and settled into your favorite AirBnB location, you decide to login to your email account to check on work matters. As you enter the URL to navigate to your work email login address, you are directed to a page that looks very similar to your work account’s email login page, but the placement of the logo and some text appear off. What should you do?

A

Go ahead and enter your login credentials, continue as normal

B

Inspect the url closely, proceed only if the connection is on HTTPS and the url is exactly matching your workplace’s email login address

C

Ignore the warning signs and login

D

None of the above, forget about being a digital nomad. Go enjoy the padi fields of Ubud

9. Changing passwords frequently is important to safeguard my email account.

A

True, because an attacker will be confused if I vary my passwords

B

False, I should set up multi-factor authentication in addition to periodically updating my email password

10. Relying on my email provider’s advanced spam, phishing email filtering technologies is sufficient for the security of my email account. I do not need to take any further actions on my own.

A

True

B

False