Which Awareness Test Answers It?

About this interactive

The Awareness Testing lesson starts from a hard fact: some people pick up the training at once, some need telling, and some fall for the same trick again and again. It takes only one of them to let an attacker in, so testing finds those people so they can be re-educated. Quiz on the material: straight after training, check whether people understood what was taught. Fake phishing campaign: send simulated phishing emails and track who opens them, who clicks, who enters their details and who reports them. Password cracking test: run password cracking software against the stored password hashes. The video calls it the encrypted password database; passwords are normally stored as hashes, which the tool tries to guess. Anyone whose password falls is re-educated and asked to change it. USB drop test: leave drives loaded with harmless tracking software around the office and see who plugs one in. A quick test for each card: is the question about what people understood, how they treat email, how guessable their passwords are, or what they do with a drive they find?

What you'll learn

Choose the awareness test that answers a question about staff: a quiz on the material, a fake phishing campaign, a password cracking test or a USB drop test
Explain that each test finds the people most at risk so they can be re-educated

Aligned to

CompTIA Security+

5.6 Given a scenario, implement security awareness practices.

NIST 800-53

AT-2 Literacy Training and Awareness

Key terms

Phishing Simulation: A controlled exercise that sends fake phishing emails to employees to test and reinforce their ability to recognize and report phishing attempts.
USB Drop Test: A physical security test in which USB drives loaded with tracking or simulated malware are left in common areas to see if employees plug them into their devices.
Security Awareness Training: An ongoing program that educates employees about cybersecurity threats, safe practices, and organizational policies to reduce human-based risk. Effective training covers topics like phishing recognition, password hygiene, and social engineering.

Topics

Security Awareness Awareness Testing Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →