Information Security Awaremess
Information Security Awaremess
sensitive invoice. I will be on vacation and unavailable - CEO. What do you do?
2 What type of attack can happen when an attacker leaves an USB stick lying for an employee to
plug in?
3 You receive an email from [email protected] asking you to send your full name, login username,
password, and date of birth for employee appraisal. What would you do?
4 DLP helps to: Protect bank's sensitive and confidential data from being shared outside bank’s
5 You login to your system using your password, read about strategic information related to a
merger, and financial forecasting. What type of data are these?
ANSWER: Secret
ANSWER: Smishing
ANSWER: Unauthorized
ANSWER: 1,2,3
ANSER: 2,3
12 You receive a suspicious email requesting urgent action. What should you do?
ANSWER: 1,2,
ANSWER: Inform IT helpdesk about the issue and ask them to help with the same
ANSWER: 1,2,3
16 A former colleague approaches you at work and requests access to your device for a few minutes
to fill a form that is required by the HR department. How do you respond?
ANSWER: Explain that this would be against the security policy and politely decline
17 _____ is a special form of attack using which hackers exploit – human psychology.
ANSWER:
Social Engineering
18 Jennifer receives an email claiming that her bank account information has been lost and that she
needs to click a link to update the bank’s database. However, she doesn’t recognize the bank,
because it is not one she does business with. What type of attack is she being targeted with?
ANSWER: Phishing
20 Your colleague has sent confidential information to unauthorized recipients. What does this
indicate?
21 Which of the following is true with regards to IT assets as per the policy?
ANSWER: Standarts
ANSWER:Email
25 Your friend is visiting you at work and wants to check his e-mail urgently. How do you respond?
ANSWER: Explain to your friend that you cannot give him access to company network as it is
against the security policy
26 What type of attack happens when an attacker simply walks in behind a person who has
legitimate access?
ANSWER:Tailgating
27 You see an unknown individual without a badge trying to enter restricted area. What should you
do?
ANSWER: Everyone's
29 Which of the following is a part of clear desk & clear screen policy?
ANSWER: End users do not send critical information outside the corporate network
31 If a user wants to share critical information outside of the organization for business purpose, how
should he send the information?
34 What should you do if you suspect you have received a phishing email?
ANSWER:1,2
38 Which action from list below can help restrict a malware attack?
ANSWER:2,3
39 You want to leave your workstation. What should you do before you leave?
ANSWER: Seclore
ANSWER: 1,3,4
42 An unknown person is spotted following closely behind an employee and entering the restricted
section of the building without an ID/badge. What type of attack is this?
ANSWER:1,2
ANSWER: 1,2,3
45 You are sitting in a café with your friend after work when your boss calls up, asking you to share
some confidential data urgently. How do you respond?
ANSWER: Ensure that you are in a private place and that you are not connected to a public
network before sending the information
48 You receive the following communication on email: Please clear payment of this critical and
sensitive invoice. I will be on vacation and unavailable - CEO. What do you do?
49 Individuals who need and use ICICI data as part of their assigned duties or in fulfilment of
assigned roles or functions within ICICI are called
ANSWER:Data Users
50 Which of the following are the characteristics of a strong password?
ANSWER: It is at least 8 characters long and It is significantly different from previous password
51 An electrician comes to your desk and asks you to step aside for a minute as he needs to check
whether all the sockets on your workstation are functional. What do you do?
ANSWER: Lock the device, files and cabinets, step aside but keep a watch on what he is doing
ANSWER: 1,2
ANSWER: 1,2
ANSWER: 1,2
56 In what way can a malware use your device to perform breach of security? Select the correct
options.
ANSWER: 2,3
ANSWER: Surrender all their official devices to their manager or local IT personnel (as per the policy)
to receive the required clearance
60 You should always be extra alert when you receive messages related to:
64 You receive a phone call from an unknown person asking for PII of a customer. What kind of
attack could this be?
ANSWER:Vishing attack
ANSWER: 1,3,4
70 "You see the message "" Your computer is infected with a virus. Please click on the below link to
remove it"". What should you do?"
ANSWER: Contact the Helpdesk/ISG Team
71 Raj is an employee of the bank and he is loyal and honest towards his work. One day he comes to
know that one of his colleague who is also his friend is involved in a suspicious activity, which can
lead to data breach. No one knows about this except Raj, what should he do now?
ANSWER:2,3,4
73 A confidential file needs to be forwarded to the finance department. Who all should be kept in
loop?
74 is public data?
ANSWER:Information explicitly approved by management for release to public