1. In the Arup deepfake fraud, what did the employee do before authorising the transfers?
2. What was the decisive structural flaw in that verification?
3. Which of these are the four fundamental moves an attacker uses to gain a foothold? Select all that apply.
4. Prompt injection manipulates an AI system into acting for an attacker. Which of the four moves does it most closely resemble?
5. Why did small organisations lose the protection of being uninteresting?
6. Why is "check for spelling and grammar mistakes" now considered harmful advice rather than merely outdated?
7. Which of the following became more valuable as a result of AI improving social engineering? Select all that apply.
8. What property do patching, passkeys, least privilege, backups and dual authorisation share?
9. A report states that deepfake fraud attempts rose by over 2,000 percent. What should you establish before drawing conclusions?
10. In an attack chain, what most determines whether one employee's click becomes a minor incident or a major breach?