12 questions to validate the fundamentals: why cybersecurity concerns everyone, the 5 threat families, the human factor and official resources.
Answer everything, then click Check: your score and explanations will appear.
0.1 · Recall
1. What proportion of successful cyberattacks exploits a human error?
According to the ANSSI, over 80% of successful attacks go through a human action: technology alone is never enough.
0.1 · Application
2. Karim handles “nothing sensitive”. Why is he still a target?
A compromised account traps colleagues in the victim's name: every account is a gateway to others.
0.1 · Arbitration
3. Up-to-date antivirus but password reused everywhere: what is the verdict?
Antivirus stops neither phishing nor reuse: each duplicate is an open door.
0.2 · Recall
4. Which family is the entry vector of most attacks?
Phishing opens the door to most attacks, including ransomware.
0.2 · Application
5. Karim receives a fake supplier invoice with an attachment. Which chain should he fear?
Threats combine into a chain: a single click is enough to unfold the whole attack.
0.2 · Application
6. A colleague sends a sensitive table to the wrong recipient. What is this?
Data leak includes sending errors and bad sharing, not only hacking.
0.3 · Recall
7. Which two signals must trigger verification?
Urgency and unusual character are the triggers: verify through another channel before acting.
0.3 · Application
8. A “director” demands by message an immediate confidential transfer. What to do?
Urgency + confidentiality + transfer = fraud until proven otherwise: verify through a separate channel.
0.3 · Arbitration
9. The caller knows your name, position and project. What to conclude?
True information feeds pretexting: knowing details never counts as proof of identity.
0.4 · Application
10. A colleague falls victim to an online scam. Where to direct them?
Cybermalveillance.gouv.fr: online diagnosis, reflex sheets, connection — for everyone.
0.4 · Application
11. Karim doubts a suspicious message in the office. Whom to call first?
The first reflex is internal: the contact isolates and handles; platforms come as backup.
0.4 · Arbitration
12. Two contradictory articles on passwords. Which source decides?
Up-to-date official references beat unsourced advice; beware of lookalike sites.
What's next?
Score ≥ 80%: move on to Level 1 — passwords, two-factor authentication, updates and workstation locking.
Score between 50% and 80%: revisit the failed section(s) (0.1 stakes, 0.2 threats, 0.3 human factor, 0.4 resources), reread the explanations above, then retake the test.
Score < 50%: reread the whole level 0 applying each 48h challenge (diagnosis, threat map, safeguard, resource box) before retrying.
And next? Install your “urgent + unusual = verification” safeguard and keep your official bookmarks: level 1 moves to the actions that protect.