20 Security Awareness Quiz Questions and Answers

Question 1:
What is the best way to create a strong password?
A. Use your birthdate and favorite pet’s name.
B. Use a combination of uppercase letters, lowercase letters, numbers, and symbols.
C. Write it down on a piece of paper and keep it in your desk.
D. Reuse the same password for multiple accounts.
Correct Answer: B
Explanation: A strong password should include a mix of character types to make it harder for attackers to guess or crack.

Question 2:
Which of the following is a sign of a phishing email?
A. It comes from a known sender and includes personal details.
B. It has poor grammar, spelling errors, and urgent requests.
C. It provides helpful links to update your account.
D. It is sent during business hours from a legitimate domain.
Correct Answer: B
Explanation: Phishing emails often contain errors and create urgency to trick users into clicking malicious links.

Question 3:
What should you do if you suspect your computer has malware?
A. Ignore it and continue working.
B. Disconnect from the internet and run an antivirus scan.
C. Share files with colleagues to see if they have the same issue.
D. Reset your password immediately without scanning.
Correct Answer: B
Explanation: Disconnecting from the internet prevents further spread, and an antivirus scan can detect and remove malware.

Question 4:
Why is two-factor authentication (2FA) important?
A. It makes logging in faster.
B. It adds an extra layer of security beyond just a password.
C. It allows you to use the same password everywhere.
D. It eliminates the need for antivirus software.
Correct Answer: B
Explanation: 2FA requires a second form of verification, making it harder for attackers to access accounts even if passwords are compromised.

Question 5:
What is social engineering?
A. A method to engineer social media posts securely.
B. Manipulating individuals into divulging confidential information.
C. Building physical security systems like locks and alarms.
D. Updating software to fix security vulnerabilities.
Correct Answer: B
Explanation: Social engineering exploits human psychology to trick people into revealing sensitive data or performing actions.

Question 6:
How should you handle sensitive data on a public Wi-Fi network?
A. Use it without any additional precautions since it’s convenient.
B. Avoid transmitting sensitive data and use a VPN if necessary.
C. Share your login details with trusted friends on the network.
D. Disable your firewall to improve connection speed.
Correct Answer: B
Explanation: Public Wi-Fi is insecure, and a VPN encrypts data to protect it from interception by hackers.

Question 7:
What is the primary purpose of a firewall?
A. To speed up internet browsing.
B. To monitor and control incoming and outgoing network traffic.
C. To store files securely on your device.
D. To automatically update software.
Correct Answer: B
Explanation: Firewalls act as a barrier between your device and potential threats by filtering traffic based on security rules.

Question 8:
If you receive a suspicious phone call claiming to be from your bank, what should you do?
A. Provide your account details immediately to verify.
B. Hang up and call the bank using the number on their official website.
C. Share the caller’s information with friends for advice.
D. Ignore it and delete any related emails.
Correct Answer: B
Explanation: Verifying through official channels helps confirm legitimacy and prevents falling for scams.

Question 9:
What does “encryption” do to data?
A. It makes data easier to share publicly.
B. It converts data into a coded format that is unreadable without a key.
C. It deletes data permanently from your device.
D. It increases the file size for better storage.
Correct Answer: B
Explanation: Encryption protects data by making it inaccessible to unauthorized users, enhancing security during transmission or storage.

Question 10:
Why should you regularly update your software and operating system?
A. To free up disk space on your device.
B. To patch security vulnerabilities and improve performance.
C. To customize the user interface.
D. To reduce the need for antivirus programs.
Correct Answer: B
Explanation: Updates fix known security flaws that hackers could exploit, reducing the risk of attacks.

Question 11:
What is the safest way to dispose of an old hard drive containing sensitive information?
A. Throw it in the regular trash.
B. Format it and reuse it.
C. Use a data destruction method like shredding or degaussing.
D. Sell it online without wiping it.
Correct Answer: C
Explanation: Proper destruction ensures data cannot be recovered, preventing unauthorized access.

Question 12:
How can you identify a secure website?
A. It has a padlock icon and “https://” in the URL.
B. It loads quickly and has attractive graphics.
C. It asks for your phone number during login.
D. It is recommended by social media ads.
Correct Answer: A
Explanation: The padlock and “https://” indicate that the website uses SSL/TLS encryption to protect data transmission.

Question 13:
What should you do if you accidentally click on a malicious link?
A. Continue browsing as normal.
B. Disconnect from the internet, run a virus scan, and change passwords.
C. Forward the link to friends to warn them.
D. Restart your device without scanning.
Correct Answer: B
Explanation: Quick action like scanning and changing passwords limits damage from potential malware or data breaches.

Question 14:
Why is it risky to use public USB charging stations?
A. They can charge your device faster.
B. They may contain malware that transfers to your device.
C. They are always monitored by security personnel.
D. They improve battery life for future use.
Correct Answer: B
Explanation: Public USB ports can be tampered with to install malware or steal data through juice-jacking attacks.

Question 15:
What is the role of an incident response plan in an organization?
A. To plan company events securely.
B. To outline steps for handling security breaches effectively.
C. To create new passwords for employees.
D. To monitor employee social media activity.
Correct Answer: B
Explanation: An incident response plan provides a structured approach to detect, respond to, and recover from security incidents, minimizing impact.

Question 16:
How can you protect against shoulder surfing?
A. Work in a crowded area to blend in.
B. Use privacy screens or position your screen away from prying eyes.
C. Share your screen during meetings for collaboration.
D. Leave sensitive documents on your desk.
Correct Answer: B
Explanation: Privacy screens and positioning prevent others from viewing sensitive information on your screen.

Question 17:
What does “zero-trust” security mean?
A. Trusting everyone in the organization by default.
B. Verifying everything and everyone, assuming no inherent trust.
C. Allowing unlimited access to internal networks.
D. Relying solely on passwords for access.
Correct Answer: B
Explanation: Zero-trust requires continuous verification of users and devices, reducing risks from insider threats and external attacks.

Question 18:
Why should you avoid clicking on shortened URLs from unknown sources?
A. They might lead to legitimate websites faster.
B. They could redirect to malicious sites or phishing attempts.
C. They always contain advertising content.
D. They improve website loading times.
Correct Answer: B
Explanation: Shortened URLs hide the actual destination, which could be harmful, making it easier for attackers to deceive users.

Question 19:
What is the best practice for backing up important data?
A. Store backups on the same device as the original data.
B. Use the 3-2-1 rule: three copies, two different media, one offsite.
C. Only back up data once a year.
D. Share backups via email for easy access.
Correct Answer: B
Explanation: The 3-2-1 rule ensures data redundancy and protection against loss from hardware failure, theft, or disasters.

Question 20:
How should you report a security incident at work?
A. Discuss it informally with colleagues.
B. Follow the organization’s reporting procedure, such as contacting IT or security teams.
C. Wait to see if it resolves on its own.
D. Post about it on social media for advice.
Correct Answer: B
Explanation: Proper reporting through official channels allows for timely investigation and containment of potential threats.