It's also a disingenious shit test which doesn't reflect well on team culture. Pass.

> it's very similar to anti-phishing training/tests

With the crucial difference that the candidate is someone external who never consented to or was informed of this activity.