SANS ASLP SECURITY AWARENESS TRAINING
STUDY GUIDE
Which type of malware prevents you from accessing files stored on your computer? -
Answers :Ransomware
Which of the following is needed for a computer system or device to be vulnerable to
malware? - Answers :INCORRECT - An Internet connection
Joe is browsing the web and notices the light by his webcam is on. The website he is on
did not ask permission to access his webcam and he knows he did not turn it on. What
should Joe do? - Answers :Report the possible malware attack.
Which of the following provides the most protection against malware? - Answers
:Updates
What method would a cyber attacker use to infect a system with malware? - Answers
:Tricking a person into opening an infected file attached to a message.
Phishing is what type of attack? - Answers :Social engineering
Which of the following is the best way to create a strong password? - Answers :Use a
long and unique passphrase.
Which of the following is the best example of a strong and memorable password? -
Answers :honey-rain-vegetables-happy
Why it is important to add two-step verification to all accounts that offer it? - Answers :It
provides an extra layer of protection beyond just a password.
Which of the following is an example of two-step verification? - Answers :A one-time
code sent via text message to your mobile device.
What is the purpose of a password manager? - Answers :The secure storage and
retrieval of multiple passwords.
Felicia in Human Resources receives an urgent email from her boss stating that the
database containing all employees' tax information is inaccessible. She is asked to reply
with all employees' tax information to avoid paying substantial late fees. What should
she do? - Answers :Call her boss to confirm whether her boss sent the email requesting
employee tax information.
Cybercriminals are planning a targeted attack on an organization's groundbreaking
research data. Colin is an entry-level accounting employee at the organization. What is
, the most likely risk posed by Colin in this scenario? - Answers :Colin is used as a
stepping stone to gain initial access to the network.
How do targeted attacks differ from common opportunistic attacks? - Answers :Targeted
attackers research their victims in order to launch customized attacks.
What is the best way to keep our organization secure when using social networking
tools? - Answers :Do not post or share confidential information that could be used
against our organization.
Why is it important to use a strong, unique passphrase for each of your social
networking accounts? - Answers :If a cyber attacker compromises the password to one
of your accounts, your other accounts will still be secure.
Which of the following is the best way to keep sensitive data private when using social
networking? - Answers :If it's highly sensitive or private, simply don't post it.
You receive an email that appears to come from the help desk asking for your password
so a critical update can be installed on your computer. What should you do? - Answers
:You suspect the email may be a phishing attack, so you report it immediately.
You receive an email from your bank informing you that their privacy policy has been
updated and asking you to review it on their website. What is the safest way to visit your
bank's website? - Answers :Open your browser and click on a bookmark you saved
earlier for your bank's website.
Which of the following is the most likely indicator of a phishing attack? - Answers :An
urgent email claiming to be from a coworker, but was sent from a personal email
address, such as one from @gmail.com.
Rudy accidentally sent a sensitive work report to a friend named James instead one of
his co-workers, who is also named James. What should Rudy have done to prevent
this? - Answers :Double check the TO address before hitting the send button.
One of your friends sends you a message on a social networking site to tell you that
they're currently traveling abroad and were mugged. They're asking you to wire them
money, and they provide a link to their account. What should you do? - Answers :Call
your friend using a trusted phone number.
Why is it important to update your mobile device to have the latest versions of its
operating system and applications? - Answers :It provides access to new security
features and fixes for known vulnerabilities.
Why is it important to disable Wi-Fi and Bluetooth when you are not using them? -
Answers :Mobile devices can automatically connect to dangerous wireless networks.
STUDY GUIDE
Which type of malware prevents you from accessing files stored on your computer? -
Answers :Ransomware
Which of the following is needed for a computer system or device to be vulnerable to
malware? - Answers :INCORRECT - An Internet connection
Joe is browsing the web and notices the light by his webcam is on. The website he is on
did not ask permission to access his webcam and he knows he did not turn it on. What
should Joe do? - Answers :Report the possible malware attack.
Which of the following provides the most protection against malware? - Answers
:Updates
What method would a cyber attacker use to infect a system with malware? - Answers
:Tricking a person into opening an infected file attached to a message.
Phishing is what type of attack? - Answers :Social engineering
Which of the following is the best way to create a strong password? - Answers :Use a
long and unique passphrase.
Which of the following is the best example of a strong and memorable password? -
Answers :honey-rain-vegetables-happy
Why it is important to add two-step verification to all accounts that offer it? - Answers :It
provides an extra layer of protection beyond just a password.
Which of the following is an example of two-step verification? - Answers :A one-time
code sent via text message to your mobile device.
What is the purpose of a password manager? - Answers :The secure storage and
retrieval of multiple passwords.
Felicia in Human Resources receives an urgent email from her boss stating that the
database containing all employees' tax information is inaccessible. She is asked to reply
with all employees' tax information to avoid paying substantial late fees. What should
she do? - Answers :Call her boss to confirm whether her boss sent the email requesting
employee tax information.
Cybercriminals are planning a targeted attack on an organization's groundbreaking
research data. Colin is an entry-level accounting employee at the organization. What is
, the most likely risk posed by Colin in this scenario? - Answers :Colin is used as a
stepping stone to gain initial access to the network.
How do targeted attacks differ from common opportunistic attacks? - Answers :Targeted
attackers research their victims in order to launch customized attacks.
What is the best way to keep our organization secure when using social networking
tools? - Answers :Do not post or share confidential information that could be used
against our organization.
Why is it important to use a strong, unique passphrase for each of your social
networking accounts? - Answers :If a cyber attacker compromises the password to one
of your accounts, your other accounts will still be secure.
Which of the following is the best way to keep sensitive data private when using social
networking? - Answers :If it's highly sensitive or private, simply don't post it.
You receive an email that appears to come from the help desk asking for your password
so a critical update can be installed on your computer. What should you do? - Answers
:You suspect the email may be a phishing attack, so you report it immediately.
You receive an email from your bank informing you that their privacy policy has been
updated and asking you to review it on their website. What is the safest way to visit your
bank's website? - Answers :Open your browser and click on a bookmark you saved
earlier for your bank's website.
Which of the following is the most likely indicator of a phishing attack? - Answers :An
urgent email claiming to be from a coworker, but was sent from a personal email
address, such as one from @gmail.com.
Rudy accidentally sent a sensitive work report to a friend named James instead one of
his co-workers, who is also named James. What should Rudy have done to prevent
this? - Answers :Double check the TO address before hitting the send button.
One of your friends sends you a message on a social networking site to tell you that
they're currently traveling abroad and were mugged. They're asking you to wire them
money, and they provide a link to their account. What should you do? - Answers :Call
your friend using a trusted phone number.
Why is it important to update your mobile device to have the latest versions of its
operating system and applications? - Answers :It provides access to new security
features and fixes for known vulnerabilities.
Why is it important to disable Wi-Fi and Bluetooth when you are not using them? -
Answers :Mobile devices can automatically connect to dangerous wireless networks.
