Virtual Learning Quiz: ED 2-D & Cybersecurity

What is the main purpose of Education Law 2-D?

• To provide funding for virtual learning programs

• To protect student, teacher, and principal data privacy

• To regulate online teaching hours

• To require schools to use only state-approved software

According to Ed Law 2-D, schools must ensure third-party vendors comply with what framework?

• Children's Online Privacy Protection Act (COPPA)

• Family Educational Rights and Privacy Act (FERPA)

• National Institute of Standards and Technology (NIST) Cybersecurity Framework

• All of the above

What is a key requirement for schools under Ed Law 2-D?

• Providing parents with access to student data policies

• Conducting annual cybersecurity training for staff

• Using multi-factor authentication for all online accounts

• Encrypting student data before sharing it

What is an example of personally identifiable information (PII) protected under Ed Law 2-D?

• A student’s homework assignments

• A teacher’s lesson plan

• A student’s name, birthdate, and school ID number

• A school’s public website address

What is the best cybersecurity practice when using passwords in an educational setting?

• Writing them down on a sticky note

• Using the same password for multiple accounts

• Creating strong, unique passwords and enabling multi-factor authentication

• Sharing them with colleagues for easy access

If a school experiences a data breach, what must be done according to NYS regulations?

• Ignore it unless personal data is stolen

• Notify affected individuals and report it to the NYS Education Department

• Change passwords and move on

• Delete all digital records to prevent further leaks

Which of the following is an example of a phishing attempt?

• A student submitting an assignment via email

• An email from IT requesting you confirm your password by clicking a link

• A district-wide announcement from administration

• A reminder email about an upcoming professional development meeting

What is the safest way to store and share student data?

• Using a personal USB drive

• Uploading it to a cloud service without encryption

• Sharing via district-approved secure platforms

• Emailing files to a personal email account for later access

What should you do if you suspect a cyber attack on school systems?

• Restart your computer and ignore it

• Report it to IT or administration immediately

• Continue using the system until further notice

• Delete all your emails to prevent hacking

What is an example of a cyber hygiene best practice?

• Clicking on all email links to test if they are real

• Logging out of shared devices after use

• Disabling software updates to avoid disruptions

• Using the same password for multiple school accounts