NEW
Font size
WorksheetsEnd of Y9 cyber security big quiz
Total questions: 58
Worksheet time: 29mins
A phishing email is one which:
requests a payment for goods you have not received
offers you products in which you may have no interest
encourages you to click on a link to a fraudulent website
contains abusive and threatening language
If you receive an email from a well-known company, but its name is misspelt in the sender’s address, you should:
click on the link in the email to check if it’s genuine
reply, pointing out the error
report it as a possible phishing scam
forward the email to a friend to check
A fraudulent email which is trying to obtain your username and password for a particular site will typically:
have a link to a webpage that isn’t the correct web address
address you by name
offer large sums of money
appear to come from a friend
You can tell whether a link in an email will take you to a genuine website, for example belonging to a bank, without risk, by:
Hovering over the link without clicking
highlighting the link
replying to the email
clicking on the link
Hacking is illegal under:
The Data Protection Act or GDPR
The Computer Misuse Act
Copyright Law
Health and Safety regulations
You receive a desperate plea for help from a friend who says they are stuck overseas and all their money has been stolen. You met the friend yesterday and they said nothing about going abroad. You should:
reply to the email
delete the email
send some money
forward the email to a friend
Gaining unauthorised access to someone else’s computer files is known as:
copyright infringement
hacking
virus attack
data theft
You can protect yourself against spam or fraudulent emails by:
using a spam filter
never clicking on links that you are suspicious of
being aware of different types of fraudulent email
reporting suspicious emails to the authorities
Under the Computer Misuse Act, it is illegal to:
Viewing someone else's files without permission.
Modifying data on someone else's computer without permission.
Installing software on another person's computer.
Sending an email without the recipient's consent.
Hackers:
usually break computer hardware
never steal personal data
sometimes steal passwords so they can access your online accounts
can only steal one password at a time
You can protect your files from unauthorised access by:
only allowing your friends and family to know your passwords
making frequent backups
choosing a strong password and changing it regularly
never using computers in a public place such as a library
A computer virus is a small program which:
will destroy your computer hardware
you may unintentionally transmit to other computers
can only be transmitted via email
cannot be removed from your computer
‘Malware’ is:
software that doesn’t work properly
unwanted software installed without consent
a type of computer virus
a program that speeds up your computer
Which of these is a sign of malware on your computer?
You receive a fraudulent email
Your browser alerts you it has blocked a pop-up window
Your homepage has changed unexpectedly
Your browser prompts you to install a new toolbar
A computer virus may:
overwrite your files and corrupt your data
steal important information from your computer
use a lot of memory and slow down your computer
display unwanted advertisements
Which of the following is true?
It is always easy to spot when your computer has a virus
Viruses cannot be spread via email
Viruses can completely destroy all the data on your computer
Anti-virus software will always prevent a virus from attacking your computer
Which of the following is a sign of a possible malware attack?
A new toolbar appears on your browser
You see a lot of pop-up adverts even when you’re offline
Your hard disk is working overtime but you’re not doing anything
Your computer runs very slowly
To avoid your computer being infected by malware, you should never:
download music or software from illegal sites
open emails from people you don’t know
open email attachments
share files from untrusted sources
When choosing a password you should:
use something easy to remember like your pet’s name
use a combination of letters, numbers and special characters which create a long password
save all your passwords in a file on your computer in case you forget one
use the same password for all your accounts
You can be confident your passwords are completely secure if:
they are at least 8 characters long
you change them regularly
you use different passwords for all your online accounts
you use a password manager
Which of the following is a “strong” password for someone named Justin Smith?
JustinSmith
Justin123456
boatcatplate#3
ASDFGHpoiuy
An organisation such as a school holds personal data about you. The organisation:
must not ever show you the data
must delete the data as soon as you leave
must keep your data secure
must share the data with other schools
Which of the following is “personal data” which may be held about someone on the computer system of a supermarket?
Their address
The amount they spent last year at the supermarket
Their loyalty card number
Their shopping preferences
The law which specifies the rules about collecting and holding personal data is called:
the Criminal Misuse Act
the Data Protection Act
the Personal Data Act
the Health and Safety Act
Which of the following data is considered to be ‘personal data’ when held by a school:
the school’s email address
the number of pupils in the school
the year that a particular pupil joined the school
the school's telephone number
One method to reduce the risk of ID theft is:
to shred documents with personal information on them
to keep digital photos of passports
to scan copies of bank statements
to share your personal information online
Organisations holding personal data are allowed to:
sell the data to other organisations
keep the data for ever
give the data to other organisations as long as a fee isn’t charged
use the data for marketing purposes
When you enter personal details on social networking sites you should never:
enter home addresses of your friends
upload photographs of yourself that you would not want everyone to see
enter your home address
share your location with strangers
What is a DDoS attack?
A type of malware that encrypts files
An attempt to make an online service unavailable by overwhelming it with traffic from multiple sources
A technique used to steal personal information by impersonating a trusted entity
A method of gaining unauthorized access to a computer system
What is SQL injection?
A technique used to bypass authentication by exploiting vulnerabilities in web applications
A type of malware that spreads through databases
A method of encrypting data stored in a database
A technique used to protect against denial-of-service attacks
What is ransomware?
A type of malware that encrypts a victim’s files and demands a ransom for their recovery
A technique used to steal credit card information
A method of gaining unauthorized access to a computer system
A technique used to bypass authentication
What is a keylogger?
Software or hardware that records every keystroke made by a user
A technique used to bypass authentication by exploiting vulnerabilities in web applications
A method of encrypting data stored in a database
A type of attack that floods a network with traffic to make it unavailable
What is a firewall?
A network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules
A type of malware that encrypts a victim’s files and demands a ransom for their recovery
A technique used to steal credit card information
A method of gaining unauthorized access to a computer system
What is a VPN (Virtual Private Network)?
A technology that creates a secure, encrypted connection over a less secure network
Software that scans for and removes malware
A type of firewall that protects against web-based attacks
A security tool that analyses network traffic for malicious activity
What is two-factor authentication (2FA)?
A security process that requires users to provide two different authentication factors to verify their identity
A technique used to steal passwords from web browsers
A method of encrypting data transmitted over a network
A type of attack that floods a network with traffic to make it unavailable
What is a security patch?
A software update that fixes vulnerabilities and improves security
A type of malware that targets network devices
A method of encrypting data stored in a database
A tool used to monitor network traffic
What is social engineering?
The manipulation of people into performing actions or divulging confidential information
A technique used to bypass authentication by exploiting vulnerabilities in web applications
A method of encrypting data stored in a database
A type of attack that floods a network with traffic to make it unavailable
What is a brute-force attack?
An attack that attempts to guess passwords by trying every possible combination
Software that scans for and removes malware
A type of firewall that protects against web-based attacks
A security tool that analyses network traffic for malicious activity
What is data encryption?
The process of encoding data so that it is unreadable without a decryption key
A type of malware that targets network devices
A method of gaining unauthorized access to a computer system
A technique used to bypass firewalls
What is a security audit?
A systematic evaluation of an organization’s security policies, procedures, and infrastructure
A technique used to bypass authentication by exploiting vulnerabilities in web applications
A method of encrypting data stored in a database
A type of attack that floods a network with traffic to make it unavailable
What is a security policy?
A set of rules and guidelines that define an organisation’s approach to security
A technique used to steal passwords from web browsers
A method of encrypting data transmitted over a network
A type of attack that floods a network with traffic to make it unavailable
When using a computer, why is it important to have your own login details rather than sharing with friends?
To make the computer run faster.
To keep your files private and secure.
To make the screen look different.
To use more electricity.
In a company, why might different employees have different levels of access to computer systems?
To make some employees feel more important.
To ensure that people can only access the information they need for their job.
To make the computers more difficult to use.
To save money on computer equipment.
Imagine a school project where different students are responsible for different parts. How is this similar to how access levels work in a business?
Everyone has to do everything.
Each person only focuses on their assigned tasks.
Nobody does anything.
It makes things more confusing.
At a workplace with security doors that require a pass, what's the risk if someone follows an employee through without using their own pass?
It makes the door open more quickly.
It could allow someone unauthorised to enter the building.
It saves time for the employee.
It makes the building more welcoming.
What's a common method used to prevent tailgating at secure entrances?
Using brightly coloured doors.
Installing turnstiles or access control gates.
Offering free snacks in the lobby.
Encouraging employees to hold the door open for everyone.
If you notice someone following closely behind another person to enter a secure area without using their own access card, what should you do?
Ignore it to avoid being rude.
Assume they have permission to be there.
Report it to a security officer or responsible adult.
Ask them for their access card.
In cybersecurity, what does "blagging" generally involve?
Hacking into a computer system.
Deceiving someone to obtain information or access.
Sending spam emails.
Hiding computer files.
Which of the following is an example of blagging?
Downloading a virus from the internet.
Someone pretending to be from a company's IT support to get a password.
Your computer running slowly.
Receiving promotional emails from a shop.
What's an important way to protect yourself from blagging attempts?
Share your passwords with everyone.
Only share your passwords with close friends.
Be cautious and verify the identity of anyone requesting your personal information.
Write your password on a piece of paper.
What does "shouldering" refer to in a security context?
Pushing someone out of the way.
Looking over someone's shoulder to see their PIN or password.
Sharing your computer screen with someone.
Using a computer with someone else.
Where are you most likely to encounter someone attempting to "shoulder" your password or PIN?
In your bedroom at home.
At a cash machine (ATM) or when paying with a card in a shop.
In a school library.
At a sports centre.
What's a good way to prevent someone from "shouldering" your PIN or password?
Type your password very loudly.
Use your hand to shield the keypad when you enter your PIN or password.
Tell people your PIN or password.
Type your PIN or password very slowly.
Why is it important to update your anti-virus software regularly?
To make your computer run more quickly.
To protect your computer from new viruses and malware.
To change the appearance of your computer screen.
To make your computer quieter.
What's a potential consequence of not keeping your anti-virus software up to date?
Your internet connection will become faster.
Your computer will be more vulnerable to viruses and other malware.
Your computer's screen will become brighter.
Your computer's battery life will improve.
How often should anti-virus software be updated?
Once per year.
Once per month.
Automatically, as soon as updates are available.
Only when you suspect your computer has a virus.
Why are some anti-virus programs unable to detect brand-new viruses?
They rely on recognising known viruses.
They only work on older computers.
They only work on mobile phones.
They need to be physically plugged in.
What's the best way to ensure your anti-virus software is kept up to date?
Wait for someone else to update it for you.
Disable automatic updates to save data.
Enable automatic updates in the anti-virus software's settings.
Only update it when your computer becomes slow.
