Crowdly

Asia-Pacific Economic Cooperation (APEC)

The United States(US)

The European Union (EU)

Which of these is considered sensitive data?

A public university press release

The University's public website URL

A spreadsheet of student exam numbers and grades

A published research paper

Multi-Factor Authentication (MFA) is important because it:

Makes your password longer

Adds a second layer of security beyond the password

Replaces your password entirely

Is only needed for banking websites

Multi-Factor Authentication (MFA) requires a combination of which two

factors?

Your username and your password.

A password and a secret question

Something you know and something you have (or are).

A PIN number and your date of birth.

What is a key best practice for using your institutional email account?

Never auto-forward it to a personal account due to weaker security.

Set up auto-forwarding to your personal Gmail for convenience.

Only check it when connected to the university's public WiFi.

Use it for all personal online shopping and subscriptions.

The safest way to share a large file containing student grades is:

Via the university's approved, encrypted cloud service with a password

As an email attachment

Via a personal Google Drive link

student information system if the website has a padlock icon.

It is safe to use public WiFi to access the university's

True

False

100%

What is the first thing you should do with a link in a suspicious email?

Hover over it to inspect the URL

Sending a mass email claiming your Netflix account has been

suspended.

Forward the email to a colleague

Click it to see where it goes

technique known as "baiting"?

Which of the following is an example of the social engineering

Sending a mass email claiming your Netflix account has been

suspended.

Leaving a malware-infected USB drive in a public place for someone to find and use.

Creating a fake story about a fraud investigation to get someone to reveal their password.

Posing as the head of the university in an email to the finance

department.

What is the defining characteristic of a "negligent" insider threat?

A well-meaning individual who accidentally causes a security breach.

A hacker who gains access by stealing an employee's credentials.

A student who protests the university's IT policies.

An employee who intentionally sells research data to a competitor.