Drill #7

Question 1

Phishing Security Test (PST)

Answer 1

A simulated phishing attack to see how prone the organization’s employees are to click on phishing links.

Question 2

Phishing Reply Test (PRT)

Answer 2

A simulated phishing attack to see who will reply to a phishing email

Question 3

Social Media Phishing Test (SPT)

Answer 3

A simulated phishing attack to see which users are likely to fall for social media related phishing attacks.

Question 4

Automated Security Awareness Program (ASAP)

Answer 4

A tool for creating Security Awareness Programs.

Question 5

Breached Password Test (BPT)

Answer 5

A tool that checks to see if an organization’s users are currently using passwords that are in publicly available breaches

Question 6

Phish Alert Button (PAB)

Answer 6

An email plugin that gives employees the ability to report potential phishing emails.

Question 7

Email Exposure Check Pro (EEC Pro)

Answer 7

Identifies the at-risk users in an organization by searching business information available on the internet and hundreds of data breach databases.

Question 8

Domain Spoof Test (DST)

Answer 8

A test that checks a domain name—for example, knowBe4.com—to see if it can be spoofed.

Question 9

Mailserver Security Assessment (MSA)

Answer 9

Test to check the effectiveness of the email filtering rules.

Question 10

Ransomware Simulator (RanSim):

Answer 10

Simulates 13 ransomware infection scenarios to determine if a user’s workstation is vulnerable to infection.

Question 11

Second Chance

Answer 11

A tool that asks the user if they’re sure they want to follow the link in an email, giving them a second chance to evaluate the link.

Question 12

USB Drive Test

Answer 12

A tool that finds out how users react to unknown USB drives. The purpose is to see how many users will pick up the USB drive, plug them into their computer, and open files.

Question 13

Weak Password Test (WPT)

Answer 13

Checks an organization’s Active Directory for weak password threats.

Question 14

Password Exposure Test (PET)

Answer 14

a mix of a EEC and also checks the organization’s Active Directory to see exposed email users are using weak or compromised passwords that are part of a known data breach.

Question 15

Domain Doppelgänger (DD)

Answer 15

Stage 1: Domain Doppelgӓnger searches for all available and purchased domains that are visually similar to the organization’s domain, and therefore, fit the criteria of one of our Doppelgӓnger domain types.

Stage 2: The admin then tests their end users’ awareness of the dangers of look-alike domains.