Quiz template · Corporate

Cyber security basics quiz

Twelve questions on phishing, passwords, updates and scams, based on public advice from the UK's NCSC and the US agency CISA.

Easy
12 questions
30 s each · about 9 min
Checked against 7 sources

Use this template Preview the questions

A short security awareness round for team meetings, onboarding days and training sessions. It covers the habits that stop most everyday attacks: spotting phishing, using strong and separate passwords, turning on extra sign-in checks and installing updates. Every answer follows public guidance from national cyber security agencies, so you can use it as a refresher without writing anything yourself.

How to run it

Run it at the start of security awareness training or a new starter induction, then go over the questions most people missed.
After each answer, ask if anyone has seen a message like this at work.
Right after question 3, tell the room exactly how your company wants phishing reported: a button, an email address or a team.

Questions and answers

1What is phishing?
- AA message that tries to trick you into opening harmful links or attachments
- BA tool that blocks viruses
- CA type of strong password
- DA software update
Reveal answer
A. A message that tries to trick you into opening harmful links or attachments
Phishing is when criminals try to get people to open harmful links, emails or attachments.
2Which of these is a common sign of a phishing email?
- AIt comes from a colleague you met last week
- BUrgent or emotional language that pushes you to act now
- CIt shows a company logo
- DIt arrives on a Monday
Reveal answer
B. Urgent or emotional language that pushes you to act now
Urgent or emotionally appealing language is a common red flag, along with requests for personal or financial details.
3What should you do with an email you think is phishing?
- AClick the link to check it
- BReply and ask if it is real
- CReport it and do not click anything in it
- DForward it to your whole team
Reveal answer
C. Report it and do not click anything in it
Resist the urge to click links or attachments, and report the phish to protect yourself and others.
4What does MFA stand for?
- AMain file access
- BManaged firewall application
- CMobile fraud alert
- DMultifactor authentication
Reveal answer
D. Multifactor authentication
Multifactor authentication adds a second check at sign-in. People who turn it on are much less likely to be hacked.
5Which way of making a password does the UK's National Cyber Security Centre suggest?
- AYour pet's name and birth year
- BOne word with symbols swapped in
- CThree random words combined
- DThe same strong password everywhere
Reveal answer
C. Three random words combined
Combining three random words makes a password long enough and strong enough, and easier to remember.
6Why should your email password be different from all your other passwords?
- AEmail can be used to reset your other passwords
- BIt makes email load faster
- CEmail providers require it by law
- DShort passwords work better for email
Reveal answer
A. Email can be used to reset your other passwords
If criminals get into your email, they can reset the passwords for your other accounts.
7What can a password manager do for you?
- AMake every password the same
- BCreate strong passwords and remember them
- CShare your passwords with colleagues
- DTurn off extra sign-in checks
Reveal answer
B. Create strong passwords and remember them
A password manager can create strong passwords for you and remember them, so you do not have to.