Security Training — Phishing Awareness

Before you start

Full name

Department (optional)

The Video

The video plays inline — links to YouTube are blocked.

Quiz

1. When checking a sender's domain, what should you actually verify?

Whether the domain contains a subdomain that includes "advcontrolsys" somewhere in it The exact text right before ".com" (or the domain ending) Whether the domain starts with "advcontrolsys" even if extra words follow it

2.The moment a suspicious email arrives, what's the right move?

Reply to the sender directly to confirm whether the message is genuine Check the sender's exact domain and trust your gut if something feels off Judge it by how professional the formatting, signature, and logo look

3. What is the correct action when you receive a suspicious message or link?

Hover over the link to preview the destination, and click it if it appears to match Ignore it and delete it immediately without telling anyone Do not click any links, and report it through your official IT/security channel

4. According to the golden rule for emails asking you to verify information, what should you do?

Click the link in the email, but only enter your password if the page looks legitimate Call the phone number listed inside the email to confirm it's really them Always go directly to the official website or app yourself

5. What is "email spoofing"?

When an email fails to deliver because the recipient's inbox is full When someone forges the sender's address so a message looks like it's from someone you trust When an email is automatically flagged and moved to spam

6. If an attacker registers a look-alike domain, what's the reliable way to catch it?

Trust the email if it's addressed to you by name Trust it if the display name shows "IT Support" Carefully check the full sender address for subtle changes

7. You receive an email with subject "Password Change Notification". Why is this deceptive?

Because the button color and layout look slightly different Because passwords never expire in real corporate networks Because the email is sent from a lookalike domain

Result

–

Mandatory Phishing Awareness Training

Security Awareness Training: Phishing