For everyone who uses email, messaging and public wifi at work: suspicious links, passwords, two-factor authentication, public wifi and reporting scams. 12 questions, about 10 minutes. Sources: NIST SP 800-63B · Reviewed 21/10/2026 · Training support, not a certification.
An email from "IT Support" says your mailbox is full and asks you to log in via a link. What should you do?
Click quickly before your mailbox is closed
Forward the link to colleagues
Reply with your password
Don't click; check with IT through a known channel
2 / 12 · 20s · 1 pt
How can you check where a link really goes without clicking it?
Hover over it and read the address that appears
Click it once
Look at the colour of the text
Count the words in the email
3 / 12 · 20s · 1 pt
A message that uses your name and your manager's name must be genuine.
True
False
4 / 12 · 20s · 1 pt
Which password is the strongest?
Your pet's name
12345678
A long, unique passphrase such as "purple-river-eats-7-clocks"
Password123
5 / 12 · 20s · 1 pt
What does two-factor authentication add?
Faster logins
A second proof of identity, such as a code from an app, on top of the password
A second password identical to the first
A backup of your files
6 / 12 · 20s · 1 pt
Which are typical warning signs of phishing? (choose 2)
An expected message from a colleague with no links
A sender domain that is slightly misspelled
Pressure to act immediately
A newsletter you subscribed to, from its usual address
7 / 12 · 20s · 1 pt
You are in a café on public wifi. What is the safer choice for accessing work systems?
Turn off your firewall to connect faster
Log in to everything as usual
Use the company VPN or your phone's hotspot
Share the wifi password with strangers
8 / 12 · 20s · 1 pt
Your bank will never ask you for your full password or one-time code by phone or email.
True
False
9 / 12 · 20s · 1 pt
What is "smishing"?
A secure email service
Phishing carried out by text message
An antivirus for smartphones
A type of firewall
10 / 12 · 20s · 1 pt
If you clicked a phishing link by mistake, it's best to stay quiet to avoid embarrassment.
True
False
11 / 12 · 20s · 1 pt
A supplier emails to say their bank details have changed. What do you do?
Update the bank details right away
Pay both accounts to be safe
Reply to the same email to ask if it's true
Call the supplier on a number you already have to confirm
12 / 12 · 20s · 1 pt
Why should you keep software and apps updated?
There is no security reason
Updates slow down attackers' computers
Updates only change the colours
Updates fix security flaws that attackers could exploit
How to use it
Copy the quiz into your free account, edit it if needed and run it live: players join from their phones with a code or a QR code, no app needed. The correct answers are not published here: you see them in your copy.