Information Security & Cyber Security Awareness Program and Quiz(C) – Calsoft

Security

Information Security & Cyber Security Awareness Program and Quiz(C) - Calsoft

Information Security & Cyber Security Awareness Program and Quiz (C) - Calsoft

Please watch all the Security presentations and videos entirely, then complete the quiz using what you learned in the videos!

Please fill your correct Name and mail address which will be used for records and generating Cyber Security Awareness Program - Quiz (C) and sending confirmation email as well, so re-check and then submit Full Name and correct mail ID(@calsoftinc.com).

Thank you and all the best!

NameEmailEmployee ID

1 / 12

You get a text message with a link to track a courier package. The link looks unusual and asks for personal details. What should you do?

Enter your details to track the package

Ignore the message and delete it

Forward the link to friends for awareness

Call the number in the message directly

2 / 12

Scenario: You receive a WhatsApp message from a number claiming to be the CEO of your company. The profile picture matches the CEO. The message states: "I am in a critical meeting and need to send an urgent payment to a client immediately. I cannot use my corporate account right now. Can you transfer $5,000 from the company petty cash to this UPI ID? I will reimburse it later."

What is the correct course of action?

Transfer the money immediately to help the CEO.

Reply asking for the OTP to verify the transaction.

Do not transfer money. Report the number as spam and verify with the CEO through a known official channel (like office phone or email).

Forward the message to the HR department and ask them to handle the payment.

3 / 12

Scenario: You receive a video call on WhatsApp. The person on the call looks and sounds exactly like a police officer (CBI). They claim your Aadhaar was used to open a bank account for money laundering. They tell you that you are under "Digital Arrest" and must stay on the video call until the investigation is over, transferring money to an "escrow account" to prove innocence.

What should you do?

Stay on the call and transfer the money to avoid arrest.

Hang up immediately. Dial 112 or your local police station to verify. Real police do not conduct interrogations via WhatsApp video calls or "Digital Arrests."

Ask to see their ID badge closely through the camera.

Tell them you will call your lawyer and keep the video call running while doing so.

4 / 12

Scenario: You see an ad on social media: "AI-Based Trading App – 500% Returns Guaranteed. No Risk. Join our Telegram group."

What is this indicative of?

A legitimate high-yield investment program.

A Pig Butchering Scam (Sha Zhu Pan) or a fake investment scheme.

A new IPO opportunity.

A marketing mistake.

5 / 12

You receive a notification that your password was found in a data breach. What’s the best immediate action?

Wait until IT contacts you

Change the password immediately and enable MFA

Ignore it since breaches are common

Use the same password across accounts for convenience

6 / 12

An employee shares Personally Identifiable Information (PII) of customers with an external vendor without proper authorization. What is the best response?

Ignore it since the vendor is trusted

Report the incident to the Data Protection Officer/IT security

Save the data for future use

Forward the data to another external partner

7 / 12

Scenario: You are chatting with a friend on WhatsApp about work. You share a screenshot of your dashboard to show how busy you are. The screenshot contains a customer's name and partial phone number.

Is this a breach of PII?

No, it's just a screenshot for a friend.

Yes, sharing PII (Personally Identifiable Information) on personal messaging apps is a breach of privacy regulations.

Only if the friend shares it further.

No, because the phone number was partial.

8 / 12

Scenario: A notification pops up on your laptop: "Critical Security Update Available. Restart Required." You are in the middle of a report.

Why should you prioritize the update?

To get new features.

To fix vulnerabilities (Zero-days) that hackers are actively using to break into systems.

To make the laptop run slower.

It is not urgent; you can wait a month.

9 / 12

Your company requires employees to complete annual cybersecurity training. Why is this important?

It makes employees experts in coding

It replaces the need for firewalls

It ensures compliance and reduces human error

It eliminates phishing attacks completely

10 / 12

Scenario: You receive an email appearing to be from the Income Tax Department. It states you are eligible for a ₹50,000 tax refund and asks you to click a link to "Submit Bank Details for Refund Credit." The email address ends in `@incometax-refund-gov.com`.

Is this legitimate?

Yes, government departments use .gov domains.

No, legitimate government emails use specific official domains (usually ending in `.gov.in` or `.nic.in`) and never ask for bank details via email links.

Yes, because it has the department logo.

No, but you should click the link just to check if it looks real.

11 / 12

Scenario: You are leaving the company. As a goodbye, you decide to keep some of the code you wrote on a personal hard drive because "you wrote it" and it might be useful for your portfolio.

Is this allowed?

Yes, you own the code you wrote.

No, the code is Intellectual Property (IP) owned by the company. Taking it is theft.

Yes, as long as you don't share it.

Yes, if you delete it after 6 months.

12 / 12

A coworker accidentally shares sensitive data in a public Slack channel. What’s the best response?

Save the data for future use

Delete the message and notify IT/security

Ignore it since it was accidental

Forward the data to your manager

reCAPTCHA field is required please complete!

Your score is

0%

Leave a Reply Cancel reply