stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Week 8 Cyber Aware Flashcards | StudBud
Explore
/
Week 8 Cyber Aware
Week 8 Cyber Aware
20 terms
·
StudBud Administration
·
12 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
What's the average cost of a data breach according to IBM's 2023 report
$1.2 million (pocket change)
$10 million (company killer!)
$4.45 million (major ouch!)
$2.8 million (ouch!)
2
Phishing Fiasco
- You get a suspicious email claiming you've won a million dollars (if only!). What's your move?
Block the sender AND report it to the Service Desk
Click immediately - you're feeling lucky!
Forward it to all your friends for a laugh
Delete it and pretend it never happened
3
Why is management support crucial for security awareness programs
They have the biggest offices
They're naturally more security-conscious
They look good in security training videos
They set the tone and allocate resources
4
Which department typically needs more support with technical security concepts
IT (they know everything!)
Marketing/Sales (people people)
Executives (boss level)
Finance (numbers people)
5
Your email contains a customer's home address. How should you label this digital treasure?
Super Secret Agent Level
Public (everyone can see it!)
General (meh, whatever)
Confidential (eyes only)
6
When is it totally fine to use free café Wi-Fi for work stuff?
When your phone signal is terrible
When traveling for work (gotta stay connected!)
During lunch meetings at hipster cafés
Never, ever, not even once!
7
According to the Verizon Data Breach Report, what percentage of breaches involve human error?
82%
62%
50%
92%
8
Which Australian organization is mentioned as a key source of cybersecurity information?
ACSC (cyber stuff)
AFL (footy stuff)
ASIO (spy stuff)
ABC (news stuff)
9
When a security incident occurs, organisations should:
Use it as a teaching moment
Keep it secret to avoid embarrassment
Pretend it never happened
Blame and shame the responsible person
10
When should security awareness training happen
Once a year during mandatory training week
Only after security incidents
As an ongoing program with regular touchpoints
Only during business hours
11
Which is NOT mentioned as part of a multi-channel security awareness approach
Simulated phishing exercises
Gamified learning competitions
Digital signage in common areas
Skywriting security tips
12
According to the documents, what's expanding our "attack surface"?
Bigger computer screens
Faster internet speeds
More employees working from home
More internet-connected devices (IoT)
13
Why should organizations establish baseline security awareness metrics
To make pretty charts
To compete with other companies
To measure future progress and identify gaps
To fill time in meetings
14
What's the best defense against social engineering attacks
Installing more firewalls
Never talking to anyone
Comprehensive training AND technical controls
Changing your name and moving to Antarctica
15
According to the documents, what should a good USB policy include?
Just a list of don'ts
Clear procedures AND exception processes
Only the organisation's position
Scary stories about USB disasters
16
Which metric is NOT mentioned as a way to measure security awareness training success?
Number of coffee breaks taken during training
Reduced security incidents
Increased reporting of suspicious activitie
Better phishing test performance
17
The town Jennie comes from is
Back Yamma
Bathurst
Forbes
Eugowra
18
Which password would make a hacker cry tears of frustration?
2BorNOT2BSecureIE?
qwerty2024
admin1234
password123
19
In cybersecurity, what does the "A" in CIA stand for?
Awesomeness
Authentication
Availability
Authorization
20
How should you share business files with a trusted supplier?
Email attachment (old school!)
USB drive via registered post (so retro!)
Carrier pigeon with encrypted message
Password-protected OneDrive link that expires
