Cyber Security Quiz
Questions: 16 · 10 minutes
1. Which backup approach provides the most useful protection if ransomware encrypts files on the main device?
Maintain tested, versioned backups, including a copy isolated from the main device
Keep one backup continuously connected and overwrite it every hour
Copy important files into another folder on the same drive
Rely on the device's recycle bin to retain encrypted originals
2. Which statement correctly distinguishes malware from a computer virus?
Malware is the broad category; a virus is a type that infects files or programs and spreads when they run
A virus steals passwords, while malware can only damage hardware
Malware affects computers, while viruses affect only phones
A virus is always visible to the user, while other malware is always hidden
3. An employee receives an urgent email that appears to come from the chief executive and requests payment to a new bank account. The writing is polished and contains no attachment. What threat should still be considered?
A brute-force attack against the employee's device password
Ransomware delivered through an infected document
A denial-of-service attack against the bank
Business email compromise or executive impersonation
4. What does HTTPS most reliably indicate when it appears in a website address?
The website's claims and products have been independently verified
The connection is encrypted, but the site itself could still be deceptive
The organization operating the site has never suffered a breach
The site cannot contain malware or deceptive forms
5. What is the main security benefit of multi-factor authentication?
It automatically detects and removes malware from the device
It prevents the service provider from experiencing a data breach
A stolen password alone is less likely to be enough to access the account
It makes password reuse across different services harmless
6. An unexpected spreadsheet from a supplier says you must enable macros to view an overdue invoice. What is the best next step?
Enable the macros if the sender's display name matches the supplier
Open the file on a personal device instead of a work device
Do not enable them; verify the request through a separate trusted channel and report the message if appropriate
Reply to the message and ask the sender to confirm that the macros are safe
7. A caller claiming to be from technical support asks you to install remote-access software so they can fix an infection you have not noticed. Which tactic is most central to this approach?
Social engineering
Network load balancing
Password hashing
Data compression
8. You receive a message claiming that your email account will be closed unless you sign in through its link immediately. What is the best response?
Open the link but leave if the page asks for financial information
Forward the message to a colleague to see whether the link works for them
Reply to the sender and ask whether the warning is genuine
Avoid the link and verify the claim through the provider's official site or app
9. What is phishing primarily designed to do?
Overload a network with more traffic than it can process
Trick people into revealing information or taking a harmful action
Find software flaws by systematically testing source code
Encrypt legitimate web traffic between a browser and server
10. Attackers try email-and-password pairs leaked from one service on several other services. What is this attack called?
Port forwarding
DNS caching
Credential stuffing
Fileless encryption
11. A company's files suddenly become unreadable, and a message demands payment for a decryption key. Which threat best matches this situation?
A distributed denial-of-service attack
Ransomware
Credential stuffing
Adware
12. You receive a genuine alert that an unfamiliar device has signed in to your email account. What is the most complete immediate response?
Delete the alert and wait to see whether any messages disappear
Reply to the alert email with your current password for verification
Change the password but leave existing sessions active to avoid losing work
Use a trusted device to change the password, revoke unfamiliar sessions, enable or review multi-factor authentication, and follow the provider's recovery steps
13. A phone reports that a security update is available from its built-in update service. Why is installing it promptly important?
Updates make phishing messages impossible to deliver
Updates guarantee that stored files cannot be stolen
Updates prevent every third-party app from collecting data
Updates can fix vulnerabilities that attackers may exploit
14. You need to access a sensitive account while away from home, but only an unfamiliar open Wi-Fi network is available. What is the safest practical choice?
Use your cellular connection or a trusted personal hotspot instead
Join the network after asking another nearby user whether it is genuine
Use the open network as long as the website displays a padlock
Connect normally, then tell the device to forget the network afterward
15. A staff member needs temporary access to one project folder but not to payroll or customer records. Which security principle supports granting only that limited access?
Defense through obscurity
Open access by default
Least privilege
Single sign-on
16. What is the strongest practical way to maintain different, hard-to-guess passwords for many accounts?
Reuse one long password only on accounts that seem unimportant
Generate and store unique passwords with a reputable password manager
Store all passwords in an unencrypted document on the desktop
Add the website's name to the end of the same base password