NEW
Font size
WorksheetsPassword Security and Cybersecurity Concepts Worksheet
Total questions: 40
Worksheet time: 20mins
Which password is most vulnerable to brute-force attacks?
Which hashing algorithm is considered secure for password storage?
MD5
SHA-1
SHA-256
Base64
Which attack uses precomputed hashes to crack passwords?
Brute-force
Dictionary
Rainbow table
Phishing
The length of a strong password should be at least:
4 characters
6 characters
8 or more characters
5 characters
Which tool is commonly used for password cracking?
Wireshark
John the Ripper
FileZilla
WinRAR
What does a “dictionary attack” use to guess passwords?
Random numbers
Common words and phrases
User’s photo
IP address
What does salting do to passwords?
Shortens passwords
Adds random data before hashing
Removes encryption
Deletes old passwords
The strength of a password increases with:
Use of patterns
Shorter length
Variety of character types
Common words
What is a keylogger?
A program that records keystrokes to steal passwords
A password manager
Antivirus software
A data encryptor
Which password policy rule is most effective?
Minimum 8 characters and complexity requirement
Password must be user’s name
Same password for all users
Change once a year
“Pa$$w0rd” is not considered secure anymore because:
it is commonly used and easily guessed by attackers.
it uses special characters and numbers.
it is too long to remember.
it is a randomly generated password.
Why is 'password123' a weak password?
It contains special characters
It's a common variation attackers know
It's too long
It's case-sensitive
Which password type is most vulnerable to dictionary attacks?
Random symbols and numbers
Common words like “apple” or “welcome”
Alphanumeric passwords
Encrypted passwords
Rishi is creating a password for his hospital HR portal which contains staff data. He prefers something complex and readable. Which is stronger?
Rish@HR2025
H0sp1t@L_r7X9
CareTeam#12
Heal@567
Which of the following is the strongest password?
D$k8@rT9
H@ppy#2024
Xy!R@#M8
What does “password complexity” mean?
Use of uppercase, lowercase, numbers, and symbols
Short and easy words
User’s birth year
Sequential numbers
Which one is a weak password example?
iloveindia
I@Love!My#India2025
InD!#Nation#99
M!nD#SeCuRe!
What is the best way to create a memorable yet strong password?
Use a passphrase with symbols
Repeat one password everywhere
Use your name and birthday
Save it on your desktop
Which password is an example of a strong passphrase?
I@Eat#Rice@Morning
mypassword
admin123
987654
What is “password aging”?
The time limit after which password must be changed
Password getting shorter
Password becoming encrypted
Password expiration disabled
What is the danger of saving passwords in browsers?
Hackers can extract them if the system is compromised
They load faster
They become invisible
They get stronger
Which password shows poor entropy?
Random@Tiger#2025
111111
Xy!#2L@9Z
My$Strong_Pass
Which of these passwords could resist a dictionary attack?
G00dP@ssW0rd#88
Th3s1s@MCA2025!
Lp#9Xz@Tc7Qv$
S3cur3Login@2025
Password strength can be measured using:
Entropy calculation
File size
Color pattern
Internet speed
Which of the following passwords shows high entropy?
R9#kP@!vL#x2Tq
Apple2020
Vishnu
Hello123
Which password is easy to guess by pattern?
abcdefg
F@st#C@r_99
N!ght#Sky@2025
T3ch@_2025
Suresh’s company requires password changes every 60 days. To keep it simple, he changes “Secure@123” to “Secure@124”, then “Secure@125”. What’s the unintended consequence?
Rahul is signing up for a digital wallet that supports crypto transactions. He wants a password that’s not only secure but also future-proof against evolving attack techniques. Which one should he go with?
RahulCrypto123
R@hul#BTC
7Qv!Lp#Xz9$@
CryptoRahul@2025
What type of password is Password123?
Dictionary-based password
Random string
Passphrase
Biometric token
Which of the following passwords is the most resistant to brute-force and pattern-based attacks?
T!m3$@2025
P@ssw0rd!Xz9
9x!L@Pz#7Qv$
G00dP@ssW0rd#88
Which password is least likely to be guessed using a rule-based cracking tool?
R@inB0w#2025
S3cur3P@ss!
7Qv#Lp!Xz@Tc9
P@ssW0rd#88
Which password is least likely to be found in leaked datasets?
P@ssword123!
MCA@SecureLogin
Xz9@Tc#7Lp!Qv$
S3cur3P@ss!88
Which password is least likely to follow any recognizable structure?
Tc#9Lp@Xz7Qv$
Th3s1s@MCA2025
SecureLogin@88
C0d3@Final#88
Your organization uses Microsoft 365 with password complexity requirements: minimum 12 characters, must include uppercase, lowercase, numbers, and symbols. MFA is enabled. Which password is most appropriate?
Compan1es$2024Welcome!
P@ssw0rd!Company#2024
M!cr0s0ft365Email$
7mK$9nL&2pQx4RvZ
You're encrypting a 7-Zip archive containing legal documents that must be retained for 10 years. The password will be stored in a secure vault and shared with 3 executives. Which password balances security and recoverability?
Correct-Horse-Battery-Staple-2024-Legal-Archive
LegalDocs@Archive$Backup#2024
7Z!pArc#Leg@l$Doc2024
J8$mK2#nP9&qR5@xT3!vW7
You're generating a password for an API service account that will process credit card payments. The password will be stored in a secure vault and rotated quarterly. Which password is most suitable?
PaymentAPI$Gateway#2024
API@K3y$Paym3nt!Secur3
K2$mN9#pQ7@xR4!vT6&wU8
Str!pe@PayPal#API$2024
You're encrypting a USB drive that will store digital forensic evidence for a legal case. The password must be shared with law enforcement and documented in case files. The drive will be accessed infrequently over 3 years. Which password is most appropriate?
F0rens!c$Ev!dence@Case2024
Evidence-Granite-Phoenix-Sterling-5729
USB@Encryp+!on$Legal#2024
L3g@l$C@se#Ev!denc3!2024
A production database password "Pr0duct!0n$MySQL#2024" was compromised. Which replacement is most appropriate?
Pr0duct!0n$MySQL#2025!
MySQL$D@t@b@se!Secure#2024
9tL$4mK@8pN&3qR!7vS#2wX
Secur3$D@t@b@se$MySQL!2024
Your password policy requires: 16+ characters, no dictionary words, must include 3 of 4 character types. Which passwords are COMPLIANT?
A) Jupiter-Saturn-Mars-Venus-8402
B) xR7$mK9@nL3&pQ6!vT2#wU8$
C) Tr0ng$P@ssw0rd!Secur3#Syst3m
D) 8tK$6mN@3pL&9vQ!2xR#7wS!zY5
A & B
B & D
C & A
None of the above
After a data breach, you discover three passwords were exposed:
Email: MyEm@!l$P@ssw0rd!2024
Banking: 9xM$7nK@3pL&8qR!2vT#6wU
Forum: F0rum$N!ckn@me#Test!24
Which new password strategy is BEST for your banking account replacement?
MyB@nk!ng$P@ssw0rd#2025!
7tL$8mK@2pN&9qR!3vS#6wX
B@nk$Acc0unt!Secur3#2024
F!n@nc!@l$S3rv!ce$N3w!
