Ah yes the famous phishing tests. They bypass every spam filter, and if your company is like mine, that uses a new external website every week for something, it's completely impossible to tell apart phishing from actual email.
Maybe your company isn't as bad as mine? If the test bypasses the spam filters and is correctly signed from an internal sender… what kind of idiot test is it?