Security Awareness Training Quiz
How the Scales are Structured
Who Usually Takes This Test?
See How You Compare
Below is a preview of how scores are typically distributed across each scale.
Example Questions From the Test
- Use a complex base password with a different number added for each site.
- Maintain a few strong passwords and assign them according to each account's importance.
- Change one memorable password regularly and use it across important accounts.
- Use a strong, unique password for every account, preferably generated and stored by an approved password manager.
- Connect it to a spare computer that does not contain sensitive files.
- Do not connect it; give it to security, IT, or another designated contact under your organization's procedure.
- Keep it until someone sends a message asking whether it was found.
- Ask nearby coworkers to connect it and identify its owner.
- Avoid the link and report the message through the organization's approved security channel.
- Open the link, but leave immediately if the page looks unusual.
- Reply to the sender and ask whether the warning is genuine.
- Forward the email to a colleague to see whether they received it too.
Security Awareness Training Quiz - Description and methodology of the test
Employees who want to make safer decisions at work can use this assessment to examine practical security judgment without specialist technical knowledge. The security awareness training quiz focuses on everyday situations involving passwords, suspicious messages, access, sensitive information, devices, and reporting. It is also a quiz for information security awareness, helping respondents recognize which habits feel clear and which may need deliberate practice.
What This Assessment Explores
Designed for people who handle workplace accounts, files, devices, and messages, the assessment examines judgment when urgency, familiarity, or convenience can push a person toward a risky action. Viewed as a security awareness quiz, it concerns applied habits, not specialist expertise, so the result reflects how well respondents recognize safer procedures in realistic situations.
The item themes include:
- Account protection covers unique credentials, password managers, and multifactor authentication.
- Phishing judgment covers suspicious links, look-alike domains, urgent requests, and attachments.
- Data and device security covers backups, updates, removable media, sharing, and network access.
- Physical and incident response covers unauthorized entry, ransomware, and escalation.
The result uses one Security Awareness Knowledge scale from 0-16: Foundation to strengthen (0-6), Developing knowledge (7-12), and Strong knowledge (13-16). These bands describe a snapshot of applied security knowledge, not personality or technical mastery.
Methodology and Evidence Base
Each item presents a workplace scenario with four response options and asks for the safest action. This selected-response format samples knowledge and judgment, not performance; its topics include passwords, phishing, access control, data handling, updates, backups, network protection, and incident reporting.
The result is one knowledge score with three descriptive bands rather than trait scores. Since the questionnaire does not specify how many points each option contributes, answers to workplace security awareness training questions are best used to identify topics for review, not to claim certification.
Its content is consistent with the cyber-hygiene focus discussed by Cain, Edwards, and Still (2018), and its human-behavior perspective can be compared with the HAIS-Q studies by Parsons and colleagues (2014, 2017). It is not presented as an adaptation or validated administration of HAIS-Q; those studies support the relevance of its themes, not this questionnaire's norms.
When reviewing questions and answers for information security awareness training, consider workplace policy, training history, and observed behavior. Memory, social desirability, self-awareness, and current context can shape responses, and published studies do not standardize this questionnaire.
- Cain, Ashley A., Morgan E. Edwards, and Jeremiah D. Still. “An exploratory study of cyber hygiene behaviors and knowledge.” Journal of Information Security and Applications 42 (2018): 36-45. 10.1016/j.jisa.2018.08.002
- Parsons, Kathryn, Agata McCormac, Marcus Butavicius, Malcolm Pattinson, and Cate Jerram. “Determining employee awareness using the Human Aspects of Information Security Questionnaire (HAIS-Q).” Computers & Security 42 (2014): 165-176. 10.1016/j.cose.2013.12.003
- Parsons, Kathryn, Dragana Calic, Malcolm Robert Pattinson, Marcus A. Butavicius, Agata McCormac, and Tara Zwaans. “The Human Aspects of Information Security Questionnaire (HAIS-Q): Two further validation studies.” Computers & Security 66 (2017): 40-51. 10.1016/j.cose.2017.01.004
Updated: