1. If you receive a spam email, what should be done?

a. Reply to it
Incorrect: Replying to spam mail will only signal that the address is active and would only result in more spam b. Don’t reply to it
Correct: Spam mails should never be replied to and should be marked as spam so that all future correspondence gets blocked. c. Forward them to friends or colleagues
Incorrect: Forwarding spam mail to friends or colleagues is unethical and will only cause their inbox to occupy unnecessary space. d. Forward them to your personal email address
Incorrect: Spam mail should never be sent to one’s own personal email address as it will only occupy unnecessary space.

2. Which of the options below DOES NOT point to proper management of emails?

e. Planning in some time to organize emails
Incorrect: - Planning and organizing points to proper management of emails. f. Archiving emails on a periodic basis
Incorrect: - Archiving on regular basis indicates proper management of emails g. Forwarding work related emails not pertaining to oneself, to the relevant person
Incorrect: - Forwarding work related emails to the relevant person when it does not pertain to you is ethical and points to proper management of emails h. Using your official organizational email ID to correspond to friends and relatives
Correct: - Your organizational email should never be used for friends and relatives as this is unethical and clear improper management. One should keep all communication professional.

3. Which of the below options should NOT BE done while responding or forwarding an email

i. Ensuring the recipient email address is typed correctly
Incorrect: - one should always ensure while responding or forwarding an email that the recipient email address is typed correctly j. Ensuring the correct subject is mentioned
Incorrect: - one should always ensure that the correct subject is mentioned (in the context of one’s email), especially when using reply/forward based on some previously received old email. k. Ensuring to select the “REPLY” and not “FORWARD” option while responding with an attachment
Incorrect: - one should always ensure while responding to an email with an attachment, to select the “reply” option and not the “forward” option l. Ensuring to send chain letters by email, inside and outside the organization.
Correct: - One should not send chain letters by email, neither inside or outside the organization. Depending on the size, chain letters can occupy vast network resources

4. While writing emails which of the below options is correct:-

m. Always use smileys, symbols and graphics
Incorrect: - Using smileys, symbols and graphics can seem childish and unprofessional n. Always use humor , irony and sarcasm
Incorrect: - Using humor, irony and sarcasm is unprofessional. All communications should be kept professional o. Send emails without using spell check
Incorrect: - One should always watch out for spelling and grammatical mistakes. Turning on automatic spell checker is equally important p. Keep emails brief, concise ,well organized and to the point
Correct: - Keeping professional communication in mind, an email should always be brief, concise, well organized and to the point.

5. After accessing the required internet website though the internet browser, one should:-

q. Leave the browser idle on the desktop
Incorrect: - Leaving the browser idle on the desktop will lead to consumption of network bandwidth as it continues to access information from the website. r. Leave the browser minimized on the desktop
Incorrect: - Leaving the browser minimized on the desktop will lead to consumption of network bandwidth as it continues to access information from the website s. Use the required internet website for personal usage
Incorrect: - We should not use the internet website for personal usage but limit internet access usage to work related websites t. Close all internet browsers immediately after use
Correct: - Closing all internet browsers immediately after use ensures minimum consumption of network bandwidth.

6. From the below options which is the correct information leakage preventive measure

u. Share your user credentials (user id, passwords) with anyone.
Incorrect: - One should never share their user credentials with anyone. Sharing causes information leakage v. Open and respond to unsolicited emails
Incorrect: - One should never open and respond to unsolicited emails, doing so will lead to information leakage w. Access any unsolicited website
Incorrect: - Accessing any unsolicited website can cause information leakage therefore one should always avoid it x. Making sure antivirus is installed on the computer and is being updated regularly
Correct: - Antivirus installation and updating will ensure your computer is not vulnerable to viruses and will not be easily susceptible to information leakage.

7. From the below options which Is NOT AN information leakage preventive measure

y. Always logout/lock your desktop before leaving your desk
Incorrect: - Logging out/locking out the desktop before leaving the desk is an information leakage preventive measure z. Keeping your desk clean
Incorrect: - Keeping your desk clean and not having any official documents lying scattered on the desk is an information leakage preventive measure {. Leaving printouts lying on the computer
Correct: - Leaving printouts lying on the printer is NOT AN information leakage preventive measure. One should never leave printouts lying on the printer and collect them immediately once given for printing. |. Understanding which information is ‘internal’, ’confidential’ and ‘Restricted’
Incorrect:- ensuring information does not get shared with unauthorized personnel by understanding which information is ‘internal’, ’confidential’ and ‘Restricted’ is an information leakage preventive measure.

8. From the below options which Is NOT AN information leakage preventive measure

}. Using shredder for destroying documents
Incorrect: - Using shredder for destroying documents is an information leakage preventive measure. ~. Reporting any malicious or suspicious activity immediately to senior management
Incorrect: - Reporting any malicious or suspicious activity immediately to senior management is an information leakage preventive measure. . Keeping your desk clean
Incorrect: - Keeping your desk clean and not having any official documents lying scattered on the desk is an information leakage preventive measure . Not wearing your ID badge at all times with in bank premises.
Correct: - Ensuring that one wears their ID badge at all times with in bank premises is an information leakage preventive measure. Anyone who does not should be asked to show his/her ID badge and if he/she does not have one, should be immediately escorted to the security personnel of the bank.

9. Which of the below options is correct for ISO 27001

. ISO 27001 ensures confidentiality of information is protected
Incorrect: - ISO 27001 not only ensures confidentiality but the availability and integrity of information is protected. . ISO 27001 ensures availability of information is protected
Incorrect: - ISO 27001 not only ensures availability but also the confidentiality and integrity of information is protected. . ISO27001 ensures integrity of information is protected
Incorrect: - ISO 27001 not only ensures integrity but also the confidentiality and availability of information is protected . ISO 27001 ensures confidentiality, availability and integrity of information are protected
Correct: - ISO27001 is an internationally accepted Information Security Standard which ensures confidentiality; availability and integrity of information are protected.

10. From the below options which IS NOT an information security responsibility:-

. Sending confidential information on public channels such as forums, blogs , public email and chat sites
Correct: - Sending confidential information on public channels such as forums, blogs, public email and chat sites IS NOT an information security responsibility. One should always avoid doing the same . Be vigilante in clicking any links that may redirect to potential phishing related sites
Incorrect: - vigilance in clicking any links that may redirect to potential phishing related sites is an information security responsibility . Never installing unapproved software on the system or laptop.
Incorrect: - Not installing unapproved software on the system or laptop is an information security responsibility . Adherence to the organizational policies , standards and guidelines on Information security
Incorrect: - Adherence to the organizational policies, standards and guidelines on Information security laptop is an information security responsibility.