Digital Security Workshop – Final 5 Challenges (A11y + Scoring)

Challenge 1: Report a Phishy Email in Gmail

Review the email below and practice reporting it. Select Report phishing to reveal the “how to report” graphic.

From: “Humboldt IT Support” <support@secure-humboldt-help[.]com>
Subject: URGENT: Account flagged — verify within 24 hours
To: you@humboldt.edu

Dear user,

Your campus account was flagged for unusual activity. To avoid interruption, verify your account now by clicking the link below.

https://secure-humboldt-help[.]com/verify

If you do not verify in 24 hours, your account will be disabled.

— IT Support

Challenge 2: Identify the Suspicious Link

Which link below looks suspicious?

Select the suspicious link

https://humboldt.edu/login

https://secure-humboldt-help[.]com/verify

https://portal.humboldt.edu/dashboard

Challenge 3: Choose the Strongest Password

Which password is strongest?

Select the strongest password

sunflower123

BlueCarrot!72

River-Quartz19!Falcon

passwordPASSWORD

Challenge 4: Recognize Duo MFA Fatigue

You suddenly receive a flood of Duo push notifications late at night, but you didn’t try to log in. What should you do?

Choose the safest response to unexpected Duo pushes

Approve one of the requests to stop the notifications.

Deny the requests in Duo and report the activity to IT Security.

Change your password immediately but approve the next push to log in.

Challenge 5: Duo Security Choices

Choose the most secure way to approve login requests in Duo:

Select the best Duo option

Approve via SMS text message code

Use Duo “Call Me” to approve by phone

Use the Duo Mobile App