For everyone who uses email, messaging and public wifi at work: suspicious links, passwords, two-factor authentication, public wifi and reporting scams. 12 questions, about 10 minutes. Sources: NIST SP 800-63B · Reviewed 21/10/2026 · Training support, not a certification.
Frage 1 · Einfachauswahl · 20 s · 1 Pkt.
An email from "IT Support" says your mailbox is full and asks you to log in via a link. What should you do?
- Click quickly before your mailbox is closed
- Forward the link to colleagues
- Reply with your password
- Don't click; check with IT through a known channel
Frage 2 · Einfachauswahl · 20 s · 1 Pkt.
How can you check where a link really goes without clicking it?
- Hover over it and read the address that appears
- Click it once
- Look at the colour of the text
- Count the words in the email
Frage 3 · Wahr / Falsch · 20 s · 1 Pkt.
A message that uses your name and your manager's name must be genuine.
Frage 4 · Einfachauswahl · 20 s · 1 Pkt.
Which password is the strongest?
- Your pet's name
- 12345678
- A long, unique passphrase such as "purple-river-eats-7-clocks"
- Password123
Frage 5 · Einfachauswahl · 20 s · 1 Pkt.
What does two-factor authentication add?
- Faster logins
- A second proof of identity, such as a code from an app, on top of the password
- A second password identical to the first
- A backup of your files
Frage 6 · Mehrfachauswahl · 20 s · 1 Pkt.
Which are typical warning signs of phishing? (choose 2)
- An expected message from a colleague with no links
- A sender domain that is slightly misspelled
- Pressure to act immediately
- A newsletter you subscribed to, from its usual address
Frage 7 · Einfachauswahl · 20 s · 1 Pkt.
You are in a café on public wifi. What is the safer choice for accessing work systems?
- Turn off your firewall to connect faster
- Log in to everything as usual
- Use the company VPN or your phone's hotspot
- Share the wifi password with strangers
Frage 8 · Wahr / Falsch · 20 s · 1 Pkt.
Your bank will never ask you for your full password or one-time code by phone or email.
Frage 9 · Einfachauswahl · 20 s · 1 Pkt.
What is "smishing"?
- A secure email service
- Phishing carried out by text message
- An antivirus for smartphones
- A type of firewall
Frage 10 · Wahr / Falsch · 20 s · 1 Pkt.
If you clicked a phishing link by mistake, it's best to stay quiet to avoid embarrassment.
Frage 11 · Einfachauswahl · 20 s · 1 Pkt.
A supplier emails to say their bank details have changed. What do you do?
- Update the bank details right away
- Pay both accounts to be safe
- Reply to the same email to ask if it's true
- Call the supplier on a number you already have to confirm
Frage 12 · Einfachauswahl · 20 s · 1 Pkt.
Why should you keep software and apps updated?
- There is no security reason
- Updates slow down attackers' computers
- Updates only change the colours
- Updates fix security flaws that attackers could exploit