Security Awareness Quiz - Now Closed - Your Results Will Not Be Counted

1. If a public Wi-Fi network (such as in an airport or café) requires a password to access, is it generally safe to use that network for sensitive activities such as online banking?

Yes, it is safe

No, it is not safe

Not sure

Even if a public Wi-Fi network requires a password, other users can potentially view the sensitive information a user sends across that Wi-Fi network.

Explanation

Even if a public Wi-Fi network requires a password, other users can potentially view the sensitive information a user sends across that Wi-Fi network.

2. Which of the following four passwords is the most secure?

Boat123

WTh!5Z

Into*48

123456

Not sure

This password contains the basic elements of a strong password recommended by experts. It contains a combination of letters, numbers and symbols; it includes both upper and lower case letters; and it does not contain any words from the dictionary.

Explanation

This password contains the basic elements of a strong password recommended by experts. It contains a combination of letters, numbers and symbols; it includes both upper and lower case letters; and it does not contain any words from the dictionary.

3. Criminals access someone's computer and encrypt the user's personal files and data. The user is unable to access this data unless they pay the criminals to decrypt the files. This practice is called …

Botnet

Ransomware

Driving

Spam

None of the above

Not sure

Driving is short for for “war driving,” which is a technique where hackers drive around an area looking for insecure Wi-Fi networks.

Explanation

Driving is short for for “war driving,” which is a technique where hackers drive around an area looking for insecure Wi-Fi networks.

4. 1. What does the "https://" at the beginning of a URL denote, as opposed to "https://" (without the "s")?

That the site has special high definition

That information entered into the site is encrypted

That the site is the newest version available

That the site is not accessible to certain computers

None of the above

Not sure

Encrypting information entered into a website makes it far more difficult for anyone other than the user and website owner to read the information. As of February 2017, around half of all internet traffic is now encrypted.

Explanation

Encrypting information entered into a website makes it far more difficult for anyone other than the user and website owner to read the information. As of February 2017, around half of all internet traffic is now encrypted.

5. "Private browsing" is a feature in many internet browsers that lets users access web pages without any information (like browsing history) being stored by the browser. Can internet service providers see the online activities of their subscribers when those subscribers are using private browsing?

YES

NO

Not Sure

Private browsing prevents a user’s internet browser from storing certain kinds of files on his or her device. However, internet service providers can still see all of the details of the user's web traffic.

Explanation

Private browsing prevents a user’s internet browser from storing certain kinds of files on his or her device. However, internet service providers can still see all of the details of the user's web traffic.

6. Which of the following is an example of a "phishing" attack?

All of the above

Not Sure

Phishing attacks attempt to get a user to click on a malicious link or file by impersonating a trusted source the user is familiar with. All three of the choices listed are examples of a phishing attack.

Explanation

Phishing attacks attempt to get a user to click on a malicious link or file by impersonating a trusted source the user is familiar with. All three of the choices listed are examples of a phishing attack.

7. A group of computers that is networked together and used by hackers to steal information is called a …

Botnet

Rootkit

DDoS

Operating system

Not sure

A rootkit is a type of malicious software designed to gain unauthorized access to a computer system. DDoS stands for Distributed Denial of Service, it is an attack where large amounts of requests are sent to a web server in order to overwhelm the server and shut it down.

Explanation

A rootkit is a type of malicious software designed to gain unauthorized access to a computer system. DDoS stands for Distributed Denial of Service, it is an attack where large amounts of requests are sent to a web server in order to overwhelm the server and shut it down.

8. Some websites and online services use a security process called two-step authentication. Which of the following images is an example of two-step authentication?

Option 1

Option 2

Option 3

Option 4

This is the only example of two-step authentication listed – true two-step authentication requires the user to enter a one-time code each time they log in to their account, in addition to their regular username and password. While the other answers may require users to perform two separate operations to gain access to a site, they are not examples of two-step authentication.

Explanation

This is the only example of two-step authentication listed – true two-step authentication requires the user to enter a one-time code each time they log in to their account, in addition to their regular username and password. While the other answers may require users to perform two separate operations to gain access to a site, they are not examples of two-step authentication.

9. Turning off the GPS function of your smartphone prevents any tracking of your phone's location.

True

False

Not sure

In addition to GPS, smartphones can also be tracked using the cellphone towers or Wi-Fi networks that the phone is connected to.

Explanation

In addition to GPS, smartphones can also be tracked using the cellphone towers or Wi-Fi networks that the phone is connected to.

10. What kind of cybersecurity risks can be minimized by using a Virtual Private Network (VPN)?

Use of insecure Wi-Fi networks

Key-logging

De-anonymization by network operators

Phishing attacks

Not sure

A Virtual Private Network (VPN) allows users to create an encrypted connection between their devices and the internet, making it much harder for anyone other than the user to see their activity

Explanation

A Virtual Private Network (VPN) allows users to create an encrypted connection between their devices and the internet, making it much harder for anyone other than the user to see their activity