Delete data Modify data Steal data Lock and ransom your computer
Which type of malware requires human interaction to spread?
Virus
What is a Trojan?
Malware that disguises itself as a legitimate file to trick users
How does a worm differ from a virus?
It can self-replicate without human interaction
What is one common way that malware is transmitted?
Through the Internet Via email attachments Using USB drives
What can be done to prevent malware infections?
Use antivirus software Be cautious with downloads Avoid clicking on suspicious links
What is the typical purpose of malware?
To cause harm or steal information
How can you minimise the risk of malware from removable media?
Scan with antivirus before use Only use media from trusted sources
What action should you take if you suspect your computer has malware?
Run an antivirus scan Disconnect from the internet Consult a professional
What does a Trojan often pretend to be?
A useful or legitimate file
Why should you keep your operating system and software updated?
To patch security vulnerabilities that could be exploited by malware
What is the primary difference between viruses and worms?
Viruses need human action to spread, worms do not
What should you do with emails from unknown senders with attachments?
Delete them without opening
What is Phishing?
A cyber attack that uses deceptive emails to trick people into providing personal information
What is often the goal of a phishing attack?
To trick someone into clicking a link or downloading an attachment that seems legitimate
How can phishing emails appear to users?
As if they are from a trusted entity like a bank or a well-known company
What should you do if you receive a phishing email?
Do not click any links or attachments and report it
What might a phishing email ask you to do?
Provide personal information Click a link to reset a password Download an attachment
What are common signs of a phishing email?
Poor spelling or grammar Unexpected email address Urgent call to action
Why is urgency a tactic often used in phishing emails?
To pressure the recipient into acting quickly without thinking
What is a good practice to protect yourself from phishing?
Be skeptical of emails asking for sensitive information
What should you check if you suspect an email might be a phishing attempt?
The sender's email address The URL of any included links
What should you do with email attachments from unknown senders?
Avoid opening them as they may contain malware
What type of personal information are phishers most interested in obtaining?
Passwords Bank account details
Which term describes information that relates to an identified or identifiable individual, such as a full name, home address or bank details?
Personal data
Which term describes scrambling a message so that anyone who intercepts it cannot understand it?
Encryption
What is a Caesar cipher?
A cipher where each letter is shifted a fixed number of places along the alphabet
What is the name for the number of places that a Caesar cipher alphabet has been shifted?
Key
What is meant by decryption?
Turning an encrypted message back into a readable message using the key
Where is data most likely to be intercepted?
While it is being sent over WiFi or the internet
What is meant by data interception?
Reading data while it travels between the sender and the receiver
Which of these is an example of personal data?
A person's date of birth and bank card details
Why is data interception difficult to detect?
The data is not changed and still reaches the receiver
A student sends a password over free cafe WiFi. Why could this password be intercepted?
The cafe's network traffic can be redirected through an attacker's device
A message is intercepted, but it was encrypted before it was sent. What does encryption achieve?
The attacker cannot understand the message they intercepted
A Caesar cipher shifts each letter 3 places forward. What does the word CAT become?
FDW
A message is encrypted by shifting each letter 5 places forward. What is the plain text of YMNX?
THIS
Why is a Caesar cipher easy for an attacker to break?
There are only 25 possible shifts to try
Which of these is a reason that criminals want to collect personal data?
To steal an identity or blackmail someone
A student encrypts a message with a Caesar cipher using a shift of 7 places. The receiver tries to decrypt it using a shift of 4 places. What will the receiver see?
A message that does not make sense
A Caesar cipher shifts each letter 5 places forward. What does the word ZAP become?
EFU
What is meant by two-factor authentication?
Using two different factor types, such as a password and a code sent to a phone
What is meant by a strong password?
A long password that uses uppercase, lowercase, numbers and symbols
What is meant by credentials?
The login details, such as a username and password, for an account
Which details can brute force software be used to guess?
Usernames, passwords and PINs
What is a brute force attack?
Automated software guessing passwords by trial and error
Which of these passwords would a brute force attack guess most quickly?
123456
Roughly how fast can brute force software try passwords?
Thousands or millions of guesses each second
An account shows thousands of failed login attempts in one minute. What does this most likely mean?
A brute force attack is being attempted
Which password change would best protect an account from a brute force attack?
Making it longer and mixing letters, numbers and symbols
Why does every extra character make a password harder for brute force software to crack?
It multiplies the number of possible combinations
How does limiting the number of login attempts help protect an account?
The account locks or delays after a set number of wrong tries
Why might an attacker carry out a brute force attack on a company website?
To steal personal information from the company's accounts
Brute force software tries password123 before it tries random combinations of characters. Why?
It tries likely passwords and common patterns first
An attacker tries the same common password against thousands of different usernames on a website. What is happening?
The same password is being tried against many accounts
Why is a person guessing a password by hand at a keyboard not a serious threat?
They cannot make guesses fast enough to find the password
Why does adding numbers and symbols as well as letters make a password harder to guess?
There are more choices for every character in it
Why does two-factor authentication protect an account even if the password is guessed?
The account cannot be opened without the second factor
What is hacking?
Gaining unauthorised access to a computer
What does unauthorised access in the context of hacking mean?
Accessing a computer by circumventing usual security
Is hacking against the law?
Yes, accessing a computer without permission is illegal
What is often the aim of a hacker when accessing a computer?
Gaining access to information
How can hacking be carried out?
Remotely In person
What is a common misconception about what hacking looks like?
That it looks like running complex code
What is typically weak point in computer security?
Passwords
What are some ways to reduce the risk of being hacked?
Using strong, unique passwords and Two-Factor Authentication
What does Two-Factor Authentication involve?
An additional security step besides the password
What should you do to keep your computer secure?
Keep your computer and apps up-to-date
Which term describes the practice of protecting systems, devices, networks and programs from digital attacks, theft or damage?
Cyber security
What is meant by 'cyber attack'?
A deliberate attempt to break into, damage or disrupt a system or network
What is the name for the motive where an attacker makes money, for example by stealing bank details or demanding a ransom?
Financial gain
What is meant by 'penetration tester'?
Someone who is paid, with permission, to break into a company's systems to find weaknesses
What is meant by 'data and information theft'?
Stealing data such as usernames, passwords and addresses so it can be sold on
What is the name for the motive where an attacker targets a particular person or organisation, for example out of revenge?
Personal attack
What is meant by 'disrupting a business'?
Stopping a company's systems or website from working
When analysing a real cyber attack, which of these questions should you always ask?
Who was impacted by the attack
Which of these does cyber security aim to stop?
Attackers changing personal information
Which of these is an example of a cyber attack?
Someone breaks into a network and deletes files
Which statement about cyber attacks is correct?
The number of cyber attacks is increasing
An attacker breaks into a company system just to prove to others that it can be done. What is the most likely motive?
Fun or challenge
An attacker moves money out of a company bank account. What is the main motive?
Financial gain
Which of these best describes the work of a cyber security professional?
Finding weaknesses and responding to attacks
Why is it useful for an organisation to know why attackers carry out cyber attacks?
It helps them understand the risks they face
Why is cyber security important for a student's own laptop at home?
Personal devices can be attacked or have data stolen
Why is the number of cyber attacks increasing?
More of our work and daily life happens online
We use cookies to enhance your experience. You can manage your preferences or learn more in our Cookie Policy.