Information Security & Cybersecurity Awareness Program and Quiz – Calsoft

Security

Information Security & Cyber Security Awareness Program and Quiz - Calsoft

Information Security & Cyber Security Awareness Program and Quiz - Calsoft

Please watch all the Security presentations and videos entirely, then complete the quiz using what you learned in the videos!

Please fill your Full correct Name and mail address which will be used for records and generating Cyber Security Awareness Program - Quiz and sending confirmation email as well, so re-check and then submit Full Name and correct mail ID.

Thank you and all the best!

NameEmailEmployee ID

1 / 12

Scenario: You see an ad on social media: "AI-Based Trading App – 500% Returns Guaranteed. No Risk. Join our Telegram group."

What is this indicative of?

A legitimate high-yield investment program.

A Pig Butchering Scam (Sha Zhu Pan) or a fake investment scheme.

A new IPO opportunity.

A marketing mistake.

2 / 12

Scenario: You are leaving the company. As a goodbye, you decide to keep some of the code you wrote on a personal hard drive because "you wrote it" and it might be useful for your portfolio.

Is this allowed?

Yes, you own the code you wrote.

No, the code is Intellectual Property (IP) owned by the company. Taking it is theft.

Yes, as long as you don't share it.

Yes, if you delete it after 6 months.

3 / 12

You receive an urgent email asking you to reset your account password immediately by clicking a link. The email emphasizes urgency and account suspension. What should you do?

Click the link and reset the password quickly

Verify the request through the official website or IT team

Reply to the email asking for confirmation

Ignore the email completely

4 / 12

You receive a notification that your password was found in a data breach. What’s the best immediate action?

Wait until IT contacts you

Change the password immediately and enable MFA

Ignore it since breaches are common

Use the same password across accounts for convenience

5 / 12

A coworker accidentally shares sensitive data in a public Slack channel. What’s the best response?

Save the data for future use

Delete the message and notify IT/security

Ignore it since it was accidental

Forward the data to your manager

6 / 12

Scenario: You found a GitHub repository that looks useful for your project. You clone it and add your company's API keys to the configuration file to test it locally. You accidentally run `git push` and make the repository public.

What is the consequence?

The code will just be available for others to learn from.

Your company's API keys are now compromised, allowing attackers to access your systems.

GitHub will automatically delete the keys.

Nothing happens, as long as you delete the repo immediately.

7 / 12

Your company is implementing Zero Trust architecture in 2026. What does this mean?

Trusting all internal users automatically

Allowing unrestricted access to employees

Assuming no user or device is trusted by default

Eliminating firewalls completely

8 / 12

You notice unusual login attempts from multiple countries on your cloud account. What is the most immediate step?

Contact the attackers directly

Ignore it since cloud services are secure

Change your password and enable MFA

Log out and wait to see if it continues

9 / 12

An employee shares Personally Identifiable Information (PII) of customers with an external vendor without proper authorization. What is the best response?

Ignore it since the vendor is trusted

Report the incident to the Data Protection Officer/IT security

Save the data for future use

Forward the data to another external partner

10 / 12

Scenario: You receive an email appearing to be from the Income Tax Department. It states you are eligible for a ₹50,000 tax refund and asks you to click a link to "Submit Bank Details for Refund Credit." The email address ends in `@incometax-refund-gov.com`.

Is this legitimate?

Yes, government departments use .gov domains.

No, legitimate government emails use specific official domains (usually ending in `.gov.in` or `.nic.in`) and never ask for bank details via email links.

Yes, because it has the department logo.

No, but you should click the link just to check if it looks real.

11 / 12

Scenario: You are working on a critical project involving source code. You need to work from home over the weekend, but you do not have VPN access configured yet. A colleague suggests: "Just upload the code to your personal Google Drive and download it at home."

Why is this a security violation?

It might take too long to upload.

Personal cloud drives lack company-grade security and encryption, leading to potential IP theft or data leakage.

Google Drive is unsafe in general.

It is allowed if you password-protect the file.

12 / 12

Scenario: An email claims to be from Microsoft 365. It says: "We have detected unusual sign-in activity. Click here to approve the login if it was you." You didn't try to log in.

What happens if you click?

You will be logged into your account safely.

You might inadvertently grant permission to a malicious app via OAuth (Consent Phishing).

Microsoft will block the attacker.

Your password will be automatically reset.

reCAPTCHA field is required please complete!

Your score is

0%

Leave a Reply Cancel reply