KeyTrain's Key Training — Email Security — free practice exam
16 original practice questions aligned to official exam domains. Run a timed, domain-weighted quiz in your browser — no login required.
Exam domains
| Domain | Weight |
|---|---|
| Phishing | 25% |
| Spoofing | 25% |
| Malicious attachments | 25% |
| Business email compromise (BEC) | 25% |
Sample practice questions
- An attachment is a .html file claiming to be an invoice preview. Safest handling?
- An attacker registers a domain one character off from your vendor. Which control reduces payment fraud?
- DMARC aggregate reports show 12% of mail using your domain fails alignment from unknown IPs. Action?
- Email filter quarantined a PDF with embedded JavaScript. Why is this noteworthy?
- An executive receives a QR code poster 'for IT Wi-Fi' in the parking garage. Which category does this BEST fit?
- Finance receives wire instructions changing bank details via email right before quarter close. What verification is…
- An invoice attachment is a password-protected ZIP containing a .lnk file. What is the SAFEST handling step?
- Legal notices a forged CEO email approving acquisition NDA sharing. Besides legal, who must be engaged FIRST?
- Macro-enabled Excel arrives from an unknown vendor address. Which policy is BEST?
- Mail headers show SPF pass, DKIM fail, and DMARC none for a message impersonating the CEO. What improvement is MOST…
- Your phishing simulation click rate dropped to zero after blocking all external links. What risk remains?
- AP receives email changing ACH details for a top vendor; phone number in signature is new. Step?
- A user reports an email urging immediate payroll changes with a link to a look-alike domain. What should the SOC do…
- Users report a Teams message with a QR code linking to a fake O365 login. Best containment?
- Users see internal display names matching a VP but the SMTP address is external. Which user-facing control helps?
- A VoIP caller ID shows your company's main number. What technical control reduces this spoofing vector?