For everyone who uses email, messaging and public wifi at work: suspicious links, passwords, two-factor authentication, public wifi and reporting scams. 12 questions, about 10 minutes. Sources: NIST SP 800-63B · Reviewed 21/10/2026 · Training support, not a certification.
Question 1 · Single choice · 20s · 1 pt
An email from "IT Support" says your mailbox is full and asks you to log in via a link. What should you do?
- Click quickly before your mailbox is closed
- Forward the link to colleagues
- Reply with your password
- Don't click; check with IT through a known channel
Question 2 · Single choice · 20s · 1 pt
How can you check where a link really goes without clicking it?
- Hover over it and read the address that appears
- Click it once
- Look at the colour of the text
- Count the words in the email
Question 3 · True / False · 20s · 1 pt
A message that uses your name and your manager's name must be genuine.
Question 4 · Single choice · 20s · 1 pt
Which password is the strongest?
- Your pet's name
- 12345678
- A long, unique passphrase such as "purple-river-eats-7-clocks"
- Password123
Question 5 · Single choice · 20s · 1 pt
What does two-factor authentication add?
- Faster logins
- A second proof of identity, such as a code from an app, on top of the password
- A second password identical to the first
- A backup of your files
Question 6 · Multiple choice · 20s · 1 pt
Which are typical warning signs of phishing? (choose 2)
- An expected message from a colleague with no links
- A sender domain that is slightly misspelled
- Pressure to act immediately
- A newsletter you subscribed to, from its usual address
Question 7 · Single choice · 20s · 1 pt
You are in a café on public wifi. What is the safer choice for accessing work systems?
- Turn off your firewall to connect faster
- Log in to everything as usual
- Use the company VPN or your phone's hotspot
- Share the wifi password with strangers
Question 8 · True / False · 20s · 1 pt
Your bank will never ask you for your full password or one-time code by phone or email.
Question 9 · Single choice · 20s · 1 pt
What is "smishing"?
- A secure email service
- Phishing carried out by text message
- An antivirus for smartphones
- A type of firewall
Question 10 · True / False · 20s · 1 pt
If you clicked a phishing link by mistake, it's best to stay quiet to avoid embarrassment.
Question 11 · Single choice · 20s · 1 pt
A supplier emails to say their bank details have changed. What do you do?
- Update the bank details right away
- Pay both accounts to be safe
- Reply to the same email to ask if it's true
- Call the supplier on a number you already have to confirm
Question 12 · Single choice · 20s · 1 pt
Why should you keep software and apps updated?
- There is no security reason
- Updates slow down attackers' computers
- Updates only change the colours
- Updates fix security flaws that attackers could exploit