SANS ASLP Security Awareness Training
Exam Study Guide 2026/2027 | Complete
Exam Preparation | Key Concepts,
Questions & Answers
Which type of malware prevents you from accessing files stored on your
computer? - correct answer-Ransomware
Which of the following is needed for a computer system or device to be
vulnerable to malware? - correct answer-An Operating system
Joe is browsing the web and notices the light by his webcam is on. The website he
is on did not ask permission to access his webcam and he knows he did not turn it
on. What should Joe do? - correct answer-Report the possible malware attack.
Which of the following provides the most protection against malware? - correct
answer-Updates
What method would a cyber attacker use to infect a system with malware? -
correct answer-Tricking a person into opening an infected file attached to a
message.
Phishing is what type of attack? - correct answer-Social engineering
, You receive an email that appears to come from the help desk asking for your
password so a critical update can be installed on your computer. What should you
do? - correct answer-You suspect the email may be a phishing attack, so you
report it immediately.
You receive an email from your bank informing you that their privacy policy has
been updated and asking you to review it on their website. What is the safest way
to visit your bank's website? - correct answer-Open your browser and click on a
bookmark you saved earlier for your bank's website.
Which of the following is the most likely indicator of a phishing attack? - correct
answer-An urgent email claiming to be from a coworker, but was sent from a
personal email address, such as one from @gmail.com.
Rudy accidentally sent a sensitive work report to a friend named James instead
one of his co-workers, who is also named James. What should Rudy have done to
prevent this? - correct answer-Double check the TO address before hitting the
send button.
Which of the following is the best way to create a strong password? - correct
answer-Use a long and unique passphrase.
Which of the following is the best example of a strong and memorable password?
- correct answer-Elphant-Blue-42 (something Like this)
Why it is important to add two-step verification to all accounts that offer it? -
correct answer-It provides an extra layer of protection beyond just a password.
Exam Study Guide 2026/2027 | Complete
Exam Preparation | Key Concepts,
Questions & Answers
Which type of malware prevents you from accessing files stored on your
computer? - correct answer-Ransomware
Which of the following is needed for a computer system or device to be
vulnerable to malware? - correct answer-An Operating system
Joe is browsing the web and notices the light by his webcam is on. The website he
is on did not ask permission to access his webcam and he knows he did not turn it
on. What should Joe do? - correct answer-Report the possible malware attack.
Which of the following provides the most protection against malware? - correct
answer-Updates
What method would a cyber attacker use to infect a system with malware? -
correct answer-Tricking a person into opening an infected file attached to a
message.
Phishing is what type of attack? - correct answer-Social engineering
, You receive an email that appears to come from the help desk asking for your
password so a critical update can be installed on your computer. What should you
do? - correct answer-You suspect the email may be a phishing attack, so you
report it immediately.
You receive an email from your bank informing you that their privacy policy has
been updated and asking you to review it on their website. What is the safest way
to visit your bank's website? - correct answer-Open your browser and click on a
bookmark you saved earlier for your bank's website.
Which of the following is the most likely indicator of a phishing attack? - correct
answer-An urgent email claiming to be from a coworker, but was sent from a
personal email address, such as one from @gmail.com.
Rudy accidentally sent a sensitive work report to a friend named James instead
one of his co-workers, who is also named James. What should Rudy have done to
prevent this? - correct answer-Double check the TO address before hitting the
send button.
Which of the following is the best way to create a strong password? - correct
answer-Use a long and unique passphrase.
Which of the following is the best example of a strong and memorable password?
- correct answer-Elphant-Blue-42 (something Like this)
Why it is important to add two-step verification to all accounts that offer it? -
correct answer-It provides an extra layer of protection beyond just a password.
