1. Why does banning AI tools outright tend to make an organisation's position worse?
2. What is the paste test?
3. You paste a script containing an API key into a chatbot to debug it. What should you do?
4. Why is forwarding an unverified factual claim from a model a security matter rather than merely a quality one?
5. Which of these are genuine strengths of AI on the defensive side? Select all that apply.
6. What is the decisive question to ask about an AI security product?
7. You suspect your device is compromised. Why should you disconnect it from the network rather than shut it down?
8. After a phishing compromise, why is changing the password insufficient on its own?
9. Money has been sent to a fraudulent account. What should happen first?
10. Why is a blame free reporting culture described as a security control rather than a matter of workplace pleasantness?