FREEASSESSMENTIntermediate · 5 questions

Investigate phishing beyond the message — scenario check

Answer every question, then review your score and the explanation behind each answer.

Practice, not certification. Results stay in this page and reset on reload. Nothing is sent to an account or payment service.

Question 1A real supplier mailbox requests a payment change. Which control still helps?

ATrusting sender familiarityBChecking spelling onlyCAccepting any message that passes DMARCDIndependent callback using established details

Question 2A victim approved an app rather than entering a password. What should responders inspect?

AOnly printed documentsBOnly a password-length scoreCApplication consent grants and accessible dataDOnly local wallpaper settings

Question 3Which evidence should be preserved?

AA guessed attacker nameBOriginal message and relevant timestampsCOnly a rewritten summary without originalsDA screenshot with the sender removed

Question 4What can DMARC not guarantee?

APrevention of every BEC requestBPolicy for certain domain-authentication failuresCDomain-alignment evaluationDA reporting mechanism when configured

Question 5What is the purpose of constructive phishing training?

AGuarantee every user detects every attackBPunish every uncertain reportCReplace technical controlsDBuild reliable reporting and verification habits

Keep building the skill.