October - NSCAM Quiz 1

What are the password requirements at the City of Fontana?

• 10 characters long, include an emoji, upper case and lower case letter

• 10 characters long, include upper case, lower case, number and special character

• 10 characters long, include upper case and lower case

• 10 characters long, and be the name of family member along with a number

Which of the following are strong password practices? (Choose all that apply.)

• Passwords should contain a mixture of upper and lower case letters, numbers, and special characters.

• Passwords should have personal meaning to you (e.g. a relative’s birthday) so that you can remember them more easily.

• You should immediately change your password in the case of a known data breach.

• You should store your passwords on paper or in a text document, giving you a backup in the event that you forget them.

Passwords often have complex requirements, and most online citizens will need to remember numerous different passwords to access their internet services. What is a way to help you keep track of all these different passwords?

• Use a password manager. These are apps, devices, or cloud services that store your passwords in an encrypted vault that can only be unlocked with a single master password.

• Use a notepad. There are far too many passwords to remember today. You have passwords at work and for personal online services you use. A notepad is a sure way to secure your passwords that you will never lose.

• Use a “password pattern.” This is simply a pattern (recognizable only to you) that you can use to help remember your passwords.

You receive a call from someone in IT requesting your password. Do you give it to them?

• Absolutely. They are IT and they can always reset it anyway.

• Absolutely, I never question anyone in IT and I really like everyone over there.

• No, there is no reason why IT would need my password.

• No, who do they think they are.

Automatically updating your machine poses a significant security concern, as it could install unwanted programs/features that disrupt your network or harm your computer.

• True. They are not necessary and are only made available by companies so that they can keep tabs on me. If I do regular updates I am going to put my computer at harm.

• False. Although updates can occasionally cause problems, they also contain vital patches to help protect your machine against attackers. Keep your machine up-to-date and install new patches as soon as possible. Don’t click, “Remind me later,” twelve times.

Although they operate similarly to computers, most mobile devices (cell phones, tablets, etc.) are not full computers and do not require software, such as anti-virus, to be secure.

• True. Mobile devices are small and do not keep anything stored on the device. Everything is up in some cloud that I keep hearing about so it is always safe and secure.

• False. Almost all consumer devices, especially cell phones and tablets, are simply miniature computers. They contain important data (contacts, financial information, calendars) and require protection like any other device.

Internet of things (IoT) devices are naturally susceptible to cyber attacks. Given this, IoT devices that automatically connect to open WiFi are a good idea.

• True. It is super convenient and does not pose a security threat to you or your home.

• False. Default settings, although convenient, are not set to the highest security standards, WiFi included. It is always a good idea to lock down your devices at home.

Which of the following devices could potentially be exploited by an attacker?

• 
• 
• 
• 
• 

What is the method of access control by which users must present multiple, separate pieces of identification, such as a password and keycard, in order to access a system?

• Multi-Factor Authentication (MFA). MFA greatly increases the security of access control. Even if a password is learned or an ID is stolen, it will not be enough to compromise a system. Many online services allow MFA options, such as requiring a one-time login code as well as a password.

• Trust-Me Authentication. Computer systems trust you because you keep using the computer and have been around for a while. The computer remembers everything about you and does not have a need to keep asking for passwords.

• One-Factor Authentication (OFA). This question is false and there is only one method of accessing a computer and that is with a very long password which is completely annoying.

What are the 3 types of Multi-Factor Authentication?

• Something You Know – includes passwords, PINs, combinations, code words, or secret handshakes. Anything that you can remember and then type, say, do, perform, or otherwise recall when needed falls into this category.

• Something You Have – includes all items that are physical objects, such as keys, smart phones, smart cards, USB drives, and token devices. (A token device produces a time-based PIN or can compute a response from a challenge number issued by the server.).

• Something You Are – includes any part of the human body that can be offered for verification, such as fingerprints, palm scanning, facial recognition, retina scans, iris scans, and voice verification.

• Something You Were – like in a previous job, a play you might have been in or a rank you held.