Quiz arcade
All the quiz cards in one place, flip to check.~6 min
Answer
Keeping information private, so only the people who are allowed to see it can.
Confidentiality is about preventing unauthorised disclosure. Before you share anything, ask who really needs to see it.
SourceAnswer
Authentication. It proves who you are; authorization then decides what you are allowed to do.
Authentication verifies identity; authorization governs permissions. They are two different steps.
SourceAnswer
Giving someone only the minimum access they need to do their job.
Less access means a smaller blast radius if there is a mistake or a compromise.
SourceAnswer
Prioritise what to address first.
Priority = Impact × Likelihood: how serious it is (Impact) × how likely it is (Likelihood). Scoring this way supports consistent prioritisation.
SourceAnswer
False.
Multi-factor authentication (MFA) is the extra login step beyond your password. Legitimate IT will never ask for your one-time code (OTP); sharing it lets an attacker take over your account.
SourceAnswer
There are several valid answers. Common red flags include: urgency or pressure, a suspicious or mismatched sender address, unexpected links or attachments, and requests for passwords or payment.
Phishing often uses urgency and spoofed sender domains to trick people. Spotting even one red flag is a reason to stop and check.
SourceAnswer
There are several valid steps. Do these: don't enter any details, report it to IT or security right away, then change that account's password and turn on multi-factor authentication (MFA).
Early reporting reduces harm and helps the team contain the problem faster.
SourceAnswer
Business email compromise (BEC): a fraudulent email request for a payment or for data.
BEC is a common social-engineering method that targets finance processes, often by faking a boss or a supplier.
SourceAnswer
Verify through a separate, trusted channel, for example call back on a known number, and follow the approval workflow.
Verifying through a separate, trusted channel greatly reduces the chance of being deceived.
SourceAnswer
Deny them, report it right away, and change your password.
Unexpected prompts can mean someone already has your password and is trying to log in as you.
SourceAnswer
AI output that sounds convincing but is actually wrong.
Large language models (LLMs) can state false things with total confidence, so check important facts against a real source.
SourceAnswer
It can be logged, stored, or reused in ways that leak sensitive information.
Unapproved tools may not meet your organisation's security and privacy requirements.
SourceAnswer
A crafted input that tries to make an AI system ignore its rules or reveal information.
AI systems can be manipulated through their inputs, so treat their output as untrusted until you check it.
SourceAnswer
False.
Deepfakes and hacked accounts can fake a familiar face or voice, so verify through a separate, trusted channel (for example, call back on a known number).
SourceAnswer
Using unapproved AI tools for work.
Unapproved tools can cause data leakage and compliance risk, because no one has vetted them.
SourceFound something unclear, outdated or improvable? Suggest an improvement