Phishing Email Awareness Test
Your name:
1. You receive an email claiming "Your mailbox is full, click the link to log in and expand it." What is the safest action?
A. Click the link and enter your account and password
B. Forward it to colleagues and let them click to confirm
C. Do not click the link; verify through the official IT service channel
D. Reply to the email to ask for details
2. What is the primary goal of a phishing email?
A. Product promotion and advertising
B. Stealing credentials or sensitive data, or delivering malware
C. Testing the company network bandwidth
D. Sending holiday greetings
3. When verifying whether a sender is genuine, what should you check most carefully?
A. The sender display name
B. The company logo in the signature
C. The full domain of the actual sender address and its spelling
D. The font used in the message body
4. Without clicking, what is the purpose of hovering the mouse over a link in an email?
A. To load the page faster
B. To preview the real destination URL and check it matches the displayed text
C. To automatically scan the link for viruses
D. To automatically download the attachment
5. Which type of email attachment usually carries the highest risk?
A. Executables or scripts such as .exe, .js, .scr, .bat
B. Plain text .txt files
C. Image .png files
D. Audio .mp3 files
6. You receive an email from a senior executive demanding an urgent payment within 30 minutes and asking you to "tell no one." What should you do?
A. Make the payment immediately as instructed
B. Reply to the email to confirm
C. Verify directly with the person through an independent trusted channel such as a phone call
D. Forward it to Finance and ask them to execute at once
7. If you have already entered your credentials on a suspicious page, what should you do first?
A. Wait and observe whether anything unusual happens
B. Immediately change that password and any reused passwords, and report to the Information Security team
C. Delete the email and pretend nothing happened
D. Shut down the computer and take no further action
8. An Office document from an unknown source prompts you to "Enable Macros." What should you do?
A. Always enable macros so the content displays properly
B. Do not enable macros; first verify the source and whether macros are genuinely needed
C. Enable them first and run an antivirus scan afterwards
D. Nothing, macros only control formatting and carry no risk
9. Which of the following is most likely a spoofed （phishing） domain?
A. The official domain company.com
B. company.com.verify-login.xyz
C. The official mail domain mail.company.com
D. The intranet portal portal.company.com
10. What is the correct way to handle an email you suspect is phishing?
A. Delete it without reporting
B. Forward it to several colleagues so everyone can judge it together
C. Do not click, reply or download; report it to the Information Security team through the standard process
D. Reply and ask the sender to stop emailing you
11. Which of the following are common characteristics of phishing emails?
A. Creating urgency or fear and demanding action within a deadline
B. A sender domain that differs slightly from the official one
C. Luring you to click a link and enter your credentials
D. Unexpected archive files or executable attachments
E. Awkward wording, grammar mistakes or unusual formatting
12. Which of the following are common forms of phishing attacks?
A. Email phishing
B. SMS phishing （smishing）
C. Voice phishing （vishing）
D. QR code phishing （quishing）
E. Phishing via social or instant messaging apps
13. Which of the following are good habits for preventing phishing attacks?
A. Enabling multi-factor authentication （MFA） on important systems
B. Using different passwords for different systems
C. Typing official URLs manually or using bookmarks to reach business systems
D. Storing passwords in a shared document so colleagues can use them
E. Applying operating system and office software patches promptly
14. Which of the following should never be provided by replying to an email?
A. Account passwords
B. SMS verification codes or token codes
C. Publicly available product marketing material
D. Confirmation of a bank account change
E. Personal sensitive data such as ID card or bank card images
15. A colleague has clicked a phishing link and entered information. Which responses are appropriate?
A. Help them disconnect from the network immediately and change the affected passwords
B. Report to the Information Security team without delay
C. Preserve the original email so the security team can perform forensic analysis
D. Post about it in a public group chat and make fun of the colleague
E. Help check whether other colleagues received similar emails
16. As long as the displayed sender name is a familiar manager or colleague, it is safe to click the links and attachments in the email.
A. True
B. False
17. QR codes in emails or posters can also lead to phishing sites, so their source must be verified before scanning.
A. True
B. False
18. Because company computers have antivirus software installed, employees no longer need to worry about identifying phishing emails.
A. True
B. False
19. When a supplier emails a notice of a bank account change, payment may only be made after verifying with them through an independent channel such as the phone number in the contract.
A. True
B. False
20. If you accidentally click a link during a company phishing simulation, you may keep quiet about it to avoid being penalized.
A. True
B. False
关闭
更多问卷
复制此问卷