CyberSmarts: 10-Minute Cybersecurity Challenge

What’s considered the strongest password?

• Your pet’s name and birth year

• Password123

• A 16-character mix of letters, numbers, and symbols

• Your favorite sports team

Answer explanation

A 16-character mix of letters, numbers, and symbols is considered the strongest password because it combines complexity and length, making it harder to guess or crack compared to simple or common passwords.

How often should you change important passwords (like email or finance)?

• Every Month

• Every 180 days or when compromised

• Once a year

• Never

Answer explanation

Changing important passwords every 180 days or when compromised helps protect against unauthorized access. Regular updates reduce the risk of breaches, while 'never' or infrequent changes can leave accounts vulnerable.

Which of these should never be used for multi-factor authentication?

• Authenticator app

• Email link

• Text message

• Fingerprint

Answer explanation

Email links can be intercepted or spoofed, making them less secure for multi-factor authentication. In contrast, authenticator apps, text messages, and fingerprints provide stronger security measures.

If you suspect your password has been stolen, what should you do first?

• Wait and see what happens

• Delete your account

• Change it immediately and report to IT

• Post about it online

Answer explanation

If you suspect your password has been stolen, the first step is to change it immediately to prevent unauthorized access. Reporting to IT ensures they can take further action to secure your account.

Adversaries made the websites look very real, can you spot the real one?

• 
• 

How many indicators on the fake webpage were you able to find?

• 1

• 2

• 3

• 4

• 5

Answer explanation

You were able to find 3 indicators on the fake webpage, which is the correct answer. This indicates that there were multiple signs of the webpage being fake, confirming the choice of 3.

Before posting a school event photo, what should you check?

• Nothing - just Post

• The lighting and filter

• That your friends have seen it

• If students are identifiable and media releases are approved

Answer explanation

Before posting a school event photo, it's crucial to check if students are identifiable and that media releases are approved. This ensures privacy and compliance with school policies.

Why shouldn’t you share details like your travel schedule publicly?

• It’s boring

• It invites phishing or physical security risks

• It violates your social media contract

• It’s against social media etiquette

Answer explanation

Sharing your travel schedule publicly can expose you to phishing attacks or physical security risks, as it reveals when you will be away from home, making you a target for theft or scams.

Which is a good rule of thumb for professional social media use?

• “If it’s funny, it’s fine.”

• "If you wouldn’t say it at a board meeting, don’t post it.”

• “If it’s about your own kids, it doesn’t matter.”

• “If no one complains, it’s okay.”

Answer explanation

The best rule of thumb for professional social media use is "If you wouldn’t say it at a board meeting, don’t post it." This emphasizes maintaining professionalism and appropriateness in online communications.

Which of these is a common sign of a phishing email?

• Urgent tone

• Message from a known contact

• Professional tone

• Links

Answer explanation

A common sign of a phishing email is an urgent tone, as attackers often create a sense of panic to prompt quick action. This contrasts with messages from known contacts or a professional tone, which are less indicative of phishing.