KazaSec Phishing IQ Quiz

Question 1

What's the biggest red flag in this email?

Accepted Answer

All three of these, stacked together

Question 2

You need to log into your bank's website. Which of these URLs is most likely a fake, designed to steal your login?

Accepted Answer

https://yourbank.com.secure-verify-account.net/login

Question 3

Your finance team gets this email. What detail should make them stop and verify before acting?

Accepted Answer

The sender's domain (kazatech-solutions.com) doesn't match the recipient's real domain (kazatechsolutions.com)

Question 4

You get a phone call from someone claiming to be your company's IT department. They already know your name and department, and ask you to read out the one-time code that just texted to your phone "to verify your identity." What should you do?

Accepted Answer

Hang up and contact IT yourself using a number you already know is real, then ask if they called

Question 5

An email arrives and passes SPF and DKIM checks, the technical signals that confirm it really was sent from the domain it claims to be from. Does that guarantee the email is safe?

Accepted Answer

No, authentication only proves which domain sent it, not that the sender's account isn't compromised or that the content is safe

Question 6

What's the actual difference between "spear phishing" and ordinary, mass-sent phishing?

Accepted Answer

Spear phishing is personalized and researched to target one specific person or organization; generic phishing is sent broadly, hoping a small percentage bite

Question 7

You clicked a link in an email and entered your password before realizing the page wasn't real. What should you do first?

Accepted Answer

Change that password immediately, enable multi-factor authentication if it isn't already on, and report it to your IT/security team

Could you spot a phishing email before it cost you?

What's the biggest red flag in this email?

Could you spot a phishing email before it cost you?

What's the biggest red flag in this email?