Level 2 exam — Cybersecurity

Exam — fresh questions

12 original questions: recall (25%) + application (50%) + arbitration (25%) on recognizing attacks.
Answer everything, then click Check: your score and explanations will appear.

2.1 · Recall

1. What does an email's displayed sender name prove?

The sender's certain identity The message's exact sending time Nothing: only the full domain counts The safety of the contained link

The display name is free text; check the full domain and hovered link URLs.

2.1 · Application

2. Karim must log in to his bank after an alarming email. What does he do?

He clicks the email's link He replies to the email to check He forwards the email to his contacts He types the official address himself or uses his bookmarks

Never log in from a received link: use bookmarks or the typed address.

2.1 · Application

3. Karim clicked but entered nothing on the fake page. First reflex?

Enter nothing, close, report to IT and monitor the account Forward the link to the whole team Switch off his computer for good Enter his credentials anyway to check

Without entry, risk stays limited: close, report, monitor; with entry, password changed at once.

2.2 · Recall

4. Does a call's displayed number prove the caller's identity?

Yes, if the caller knows your name No: it can be spoofed, even the bank's Yes, always without exception Yes, when it's a bank number

Display spoofing shows the real number: it proves nothing, no more than known personal details.

2.2 · Application

5. An “advisor” pressures Karim to give his SMS code. What does he answer?

He stays on the line to negotiate He quickly approves the requested transaction He gives the code to stop the fraud He politely hangs up then calls back the official number himself

The controlled callback ends 100% of frauds without depending on judgment under pressure.

2.2 · Arbitration

6. Karim shared his SMS code with the fake advisor. What first?

Call the real bank at once on the official number to block Wait until tomorrow to see what happens Delete the SMS and say nothing Post the incident on social media

Speed = limited damage: bank (official number), stop if needed, passwords changed, evidence kept.

2.3 · Application

7. A received Office document asks to “enable macros”. What does Karim do?

He enables to read the content He refuses and reports (it triggers the malware) He forwards the file to his colleagues He opens it on his neighbor's workstation

Office blocks macros by default; “enable content” on a received document often launches the malware.

2.3 · Recall

8. Which setting helps spot a trapped double extension?

Zooming on the file icon Disabling the antivirus Showing file name extensions Changing the system font

Visible extensions unmask double extensions; without them, the trap stays invisible.

2.4 · Application

9. “CEO” email: urgent 25 000 € transfer, “tell no one”. Reflex?

Reply to the message to ask confirmation Execute alone and fast to obey Keep the secret and pay discreetly Treat as FOVI: dual approval + known-number callback

Urgency + secrecy + transfer = FOVI: verify via another channel, especially when the message forbids it.

2.4 · Arbitration

10. A “supplier” announces new bank details by email. What does Karim do?

He calls the supplier back on the HISTORIC number before any payment He deletes the bank details and pays nobody anymore He posts the bank details on a forum for advice He pays on the new bank details without checking

Any bank-details change is verified by callback on the already-known number, never the request's.

2.5 · Application

11. Which single reflex covers all manipulation attacks?

Never answer anyone Verify via a separate channel any urgent or unusual request Answer as fast as possible Delete everything without reading

Doubt by default + separate-channel verification (5-minute rule): level 2 condensed.

2.5 · Arbitration

12. Karim fears “looking paranoid” by checking. What to remember?

Keeping doubts to yourself is enough Checking once a year is plenty Serious professionals respect and require verification Better obey fast to please

Whoever is annoyed by a verification is precisely suspicious; and ten false alarms beat one fraud through.

What's next?

Score ≥ 80%: move to Level 3 — protecting workstation and data (backups, Wi-Fi/VPN, USB drives, encryption, remote work).
Score 60-79%: revisit the failed sections (2.1 phishing, 2.2 smishing/vishing, 2.3 attachments, 2.4 FOVI, 2.5 verification) and redo the 48h challenges.
Score < 60%: reread the whole level applying each checklist to real cases, then retake the test.
In any case: keep your one-sentence rule posted and your verification channels ready.