wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

Password Security and Cybersecurity Concepts Worksheet

Total questions: 40

Worksheet time: 20mins

Name
Class
Date
1.

Which password is most vulnerable to brute-force attacks?

a)
A simple password like '123456' or 'password'
b)
A long password with mixed case like 'ThisIsAVeryLongPassword123'
c)
A password with special characters like 'P@ssw0rd!'
d)
A complex password like 'XyZ!9@#qwe'
2.

Which hashing algorithm is considered secure for password storage?

a)

MD5

b)

SHA-1

c)

SHA-256

d)

Base64

3.

Which attack uses precomputed hashes to crack passwords?

a)

Brute-force

b)

Dictionary

c)

Rainbow table

d)

Phishing

4.

The length of a strong password should be at least:

a)

4 characters

b)

6 characters

c)

8 or more characters

d)

5 characters

5.

Which tool is commonly used for password cracking?

a)

Wireshark

b)

John the Ripper

c)

FileZilla

d)

WinRAR

6.

What does a “dictionary attack” use to guess passwords?

a)

Random numbers

b)

Common words and phrases

c)

User’s photo

d)

IP address

7.

What does salting do to passwords?

a)

Shortens passwords

b)

Adds random data before hashing

c)

Removes encryption

d)

Deletes old passwords

8.

The strength of a password increases with:

a)

Use of patterns

b)

Shorter length

c)

Variety of character types

d)

Common words

9.

What is a keylogger?

a)

A program that records keystrokes to steal passwords

b)

A password manager

c)

Antivirus software

d)

A data encryptor

10.

Which password policy rule is most effective?

a)

Minimum 8 characters and complexity requirement

b)

Password must be user’s name

c)

Same password for all users

d)

Change once a year

11.

“Pa$$w0rd” is not considered secure anymore because:

a)

it is commonly used and easily guessed by attackers.

b)

it uses special characters and numbers.

c)

it is too long to remember.

d)

it is a randomly generated password.

12.

Why is 'password123' a weak password?

a)

It contains special characters

b)

It's a common variation attackers know

c)

It's too long

d)

It's case-sensitive

13.

Which password type is most vulnerable to dictionary attacks?

a)

Random symbols and numbers

b)

Common words like “apple” or “welcome”

c)

Alphanumeric passwords

d)

Encrypted passwords

14.

Rishi is creating a password for his hospital HR portal which contains staff data. He prefers something complex and readable. Which is stronger?

a)

Rish@HR2025

b)

H0sp1t@L_r7X9

c)

CareTeam#12

d)

Heal@567

15.

Which of the following is the strongest password?

a)

D$k8@rT9

b)

H@ppy#2024

c)

Xy!R@#M8

16.

What does “password complexity” mean?

a)

Use of uppercase, lowercase, numbers, and symbols

b)

Short and easy words

c)

User’s birth year

d)

Sequential numbers

17.

Which one is a weak password example?

a)

iloveindia

b)

I@Love!My#India2025

c)

InD!#Nation#99

d)

M!nD#SeCuRe!

18.

What is the best way to create a memorable yet strong password?

a)

Use a passphrase with symbols

b)

Repeat one password everywhere

c)

Use your name and birthday

d)

Save it on your desktop

19.

Which password is an example of a strong passphrase?

a)

I@Eat#Rice@Morning

b)

mypassword

c)

admin123

d)

987654

20.

What is “password aging”?

a)

The time limit after which password must be changed

b)

Password getting shorter

c)

Password becoming encrypted

d)

Password expiration disabled

21.

What is the danger of saving passwords in browsers?

a)

Hackers can extract them if the system is compromised

b)

They load faster

c)

They become invisible

d)

They get stronger

22.

Which password shows poor entropy?

a)

Random@Tiger#2025

b)

111111

c)

Xy!#2L@9Z

d)

My$Strong_Pass

23.

Which of these passwords could resist a dictionary attack?

a)
  1. G00dP@ssW0rd#88

b)
  1. Th3s1s@MCA2025!

c)
  1. Lp#9Xz@Tc7Qv$

d)
  1. S3cur3Login@2025

24.

Password strength can be measured using:

a)

Entropy calculation

b)

File size

c)

Color pattern

d)

Internet speed

25.

Which of the following passwords shows high entropy?

a)

R9#kP@!vL#x2Tq

b)

Apple2020

c)

Vishnu

d)

Hello123

26.

Which password is easy to guess by pattern?

a)

abcdefg

b)

F@st#C@r_99

c)

N!ght#Sky@2025

d)

T3ch@_2025

27.

Suresh’s company requires password changes every 60 days. To keep it simple, he changes “Secure@123” to “Secure@124”, then “Secure@125”. What’s the unintended consequence?

a)
Improved security through frequent changes.
b)
Increased vulnerability to password guessing attacks.
c)
Increased complexity in password management.
d)
Enhanced user experience with simple passwords.
28.

Rahul is signing up for a digital wallet that supports crypto transactions. He wants a password that’s not only secure but also future-proof against evolving attack techniques. Which one should he go with?

a)
  1. RahulCrypto123

b)
  1. R@hul#BTC

c)
  1. 7Qv!Lp#Xz9$@

d)
  1. CryptoRahul@2025

29.

What type of password is Password123?

a)
  1. Dictionary-based password

b)
  1. Random string

c)
  1. Passphrase

d)
  1. Biometric token

30.

Which of the following passwords is the most resistant to brute-force and pattern-based attacks?

a)
  1. T!m3$@2025

b)
  1. P@ssw0rd!Xz9

c)
  1. 9x!L@Pz#7Qv$

d)
  1. G00dP@ssW0rd#88

31.

Which password is least likely to be guessed using a rule-based cracking tool?

a)
  1. R@inB0w#2025

b)
  1. S3cur3P@ss!

c)
  1. 7Qv#Lp!Xz@Tc9

d)
  1. P@ssW0rd#88

32.

Which password is least likely to be found in leaked datasets?

a)
  1. P@ssword123!

b)
  1. MCA@SecureLogin

c)
  1. Xz9@Tc#7Lp!Qv$

d)
  1. S3cur3P@ss!88

33.

Which password is least likely to follow any recognizable structure?

a)
  1. Tc#9Lp@Xz7Qv$

b)
  1. Th3s1s@MCA2025

c)
  1. SecureLogin@88

d)
  1. C0d3@Final#88

34.

Your organization uses Microsoft 365 with password complexity requirements: minimum 12 characters, must include uppercase, lowercase, numbers, and symbols. MFA is enabled. Which password is most appropriate?

a)

Compan1es$2024Welcome!

b)

P@ssw0rd!Company#2024

c)

M!cr0s0ft365Email$

d)

7mK$9nL&2pQx4RvZ

35.

You're encrypting a 7-Zip archive containing legal documents that must be retained for 10 years. The password will be stored in a secure vault and shared with 3 executives. Which password balances security and recoverability?

a)

Correct-Horse-Battery-Staple-2024-Legal-Archive

b)

LegalDocs@Archive$Backup#2024

c)

7Z!pArc#Leg@l$Doc2024

d)

J8$mK2#nP9&qR5@xT3!vW7

36.

You're generating a password for an API service account that will process credit card payments. The password will be stored in a secure vault and rotated quarterly. Which password is most suitable?

a)

PaymentAPI$Gateway#2024

b)

API@K3y$Paym3nt!Secur3

c)

K2$mN9#pQ7@xR4!vT6&wU8

d)

Str!pe@PayPal#API$2024

37.

You're encrypting a USB drive that will store digital forensic evidence for a legal case. The password must be shared with law enforcement and documented in case files. The drive will be accessed infrequently over 3 years. Which password is most appropriate?

a)

F0rens!c$Ev!dence@Case2024

b)

Evidence-Granite-Phoenix-Sterling-5729

c)

USB@Encryp+!on$Legal#2024

d)

L3g@l$C@se#Ev!denc3!2024

38.

A production database password "Pr0duct!0n$MySQL#2024" was compromised. Which replacement is most appropriate?

a)

Pr0duct!0n$MySQL#2025!

b)

MySQL$D@t@b@se!Secure#2024

c)

9tL$4mK@8pN&3qR!7vS#2wX

d)

Secur3$D@t@b@se$MySQL!2024

39.

Your password policy requires: 16+ characters, no dictionary words, must include 3 of 4 character types. Which passwords are COMPLIANT?

A) Jupiter-Saturn-Mars-Venus-8402
B) xR7$mK9@nL3&pQ6!vT2#wU8$
C) Tr0ng$P@ssw0rd!Secur3#Syst3m
D) 8tK$6mN@3pL&9vQ!2xR#7wS!zY5

a)

A & B

b)

B & D

c)

C & A

d)

None of the above

40.

After a data breach, you discover three passwords were exposed:

  • Email: MyEm@!l$P@ssw0rd!2024

  • Banking: 9xM$7nK@3pL&8qR!2vT#6wU

  • Forum: F0rum$N!ckn@me#Test!24

Which new password strategy is BEST for your banking account replacement?

a)

MyB@nk!ng$P@ssw0rd#2025!

b)

7tL$8mK@2pN&9qR!3vS#6wX

c)

B@nk$Acc0unt!Secur3#2024

d)

F!n@nc!@l$S3rv!ce$N3w!