Font size
WorksheetsCybersecurity Assessment - Year 9 Classes
Total questions: 100
Worksheet time: 50mins
Which of the following best describes cyberbullying?
Sending funny memes to friends
Repeatedly using digital media to harass or intimidate someone
Creating a social media profile
Ignoring messages online
Which platform can be used for cyberbullying?
Social media
Online gaming
Messaging apps
All of the above
What should you do if someone is bullying you online?
Retaliate
Ignore and delete the messages
Save evidence and report it
Share it with friends
Cyberbullying can lead to:
Improved confidence
Emotional distress
Better social skills
None of the above
Which of the following is NOT cyberbullying?
Spreading rumours online
Posting embarrassing photos without consent
Constructive criticism in a private message
Sending threatening emails
What is "flaming"?
Sending friendly emojis
Posting offensive messages online to provoke anger
Sharing passwords
Complimenting online friends
Cyberbullies often target:
Teachers
Vulnerable individuals
Large companies
Hackers
What is one way to help stop cyberbullying?
Forward the message
Stay silent
Report the user to the platform
Join in to fit in
A person who stands up for victims online is called a:
Troll
Bystander
Upstander
Hacker
Which of these can be considered cyberbullying?
Tagging friends in memes
Impersonating someone to harm their reputation
Liking a friend’s photo
Playing an online game
The best way to respond to cyberbullying is to:
Respond with insults
Block and report
Ignore and delete without reporting
Quit using the internet
Schools should:
Ignore online issues
Educate students on online safety
Punish victims
Ban all internet use
Sharing private photos of someone without permission is called:
Hacking
Catfishing
Image-based abuse
Malware
Cyberbullying laws exist in many countries to:
Encourage free speech
Protect victims and punish offenders
Support hackers
Ban social media
Which of the following might be a sign someone is being cyberbullied?
Spending more time online
Avoiding devices
Feeling happier
Gaining confidence
Which is the safest password?
123456
Password
P@55w0rD!2025
Your name
You should never share your password with:
Parents
Friends
Yourself
Trusted websites
What is two-factor authentication (2FA)?
Using two accounts
Using a password plus a second verification method
Logging in twice
None of the above
Which of these is a secure website?
http://example.com
https://example.com
ftp://example.com
example.txt
If you receive a suspicious email link, you should:
Click to see what it is
Delete or report it
Reply asking for details
Forward it to friends
What is phishing?
A sport
Tricking users into revealing personal information
Virus protection
Encrypting data
Why should you log out from shared devices?
To save battery
To prevent unauthorized access
To delete your history
To restart the device
What information should you avoid posting publicly online?
Favourite food
Full name, address, and phone number
Favourite movie
Hobbies
The padlock symbol in a browser means:
The site is encrypted and secure
The site is dangerous
The site is slow
It’s a paid website
Public Wi‑Fi can be risky because:
It is slow
Hackers can intercept data
It costs money
It blocks games
What is a VPN used for?
Playing games
Streaming
Securing online connections
Increasing bandwidth
Why should you update software regularly?
For new emojis
For security patches
To use more storage
To make the device slower
Backing up data helps:
Prevent viruses
Recover lost files
Delete malware
Speed up your computer
Which of the following is a strong security practice?
Same password everywhere
Password manager use
Posting passwords online
Saving passwords on sticky notes
What should you do before downloading apps?
Check reviews and permissions
Download randomly
Ask friends
Ignore permissions
A phishing email often includes:
Urgent requests
Misspelled words
Fake links
All of the above
If your account is hacked, first:
Delete the app
Change your password
Post about it
Ignore
Cookies on websites are used to:
Track and store user preferences
Clean viruses
Hack users
Speed up Wi‑Fi
Why is oversharing on social media risky?
It makes accounts boring
It can reveal sensitive personal information
It helps SEO
It boosts popularity
The best way to protect your digital identity is:
Share less and use privacy settings
Use the same password
Disable antivirus
Post everything public
A secure password should include:
Only letters
Personal info
A mix of symbols, numbers, and letters
A single word
Which of the following should you avoid clicking?
Trusted site links
Pop-up ads claiming you won a prize
Your bank’s secure page
School website
Cyber hygiene means:
Cleaning your keyboard
Safe online habits
Formatting your PC
Installing games
A good digital citizen:
Spreads false info
Acts responsibly online
Hacks friends
Ignores rules
A strong password should contain:
Your favourite colour
Your name and surname
Your pet names
Three random words
What is malware?
Malicious software
Email tool
Antivirus
System update
A virus differs from a worm because:
Worms need user action
Viruses spread automatically
Worms self-replicate without user action
They are the same
Ransomware:
Demands payment to unlock data
Speeds up your computer
Is an antivirus
Sends spam
Trojan horse malware:
Disguises itself as legitimate software
Replicates automatically
Encrypts data
Is harmless
Spyware:
Tracks user activity secretly
Boosts speed
Cleans viruses
Helps security
Adware:
Displays unwanted ads
Is a password manager
Encrypts data
Monitors health
Rootkits are dangerous because:
They garden
Hide deep in the system
Help antivirus
Slow down browsers
A botnet is:
A group of infected computers
A new software
A security tool
An antivirus
Keyloggers are used to:
Track keystrokes
Fix keyboards
Encrypt data
Manage passwords
One way malware spreads is through:
Attachments and links
Fresh installs
Backups
Updates
Antivirus software helps:
Protect against malware
Create viruses
Delete passwords
Hack networks
Which malware locks your files until you pay?
Trojan
Worm
Ransomware
Adware
A computer worm:
Needs user action to spread
Can spread by itself
Is a password
Only affects phones
A botnet attack can cause:
DDoS (Distributed Denial of Service)
Faster speed
Extra security
None of these
Signs of malware infection include:
Slow performance
Pop-ups
Crashes
All of the above
Which file type is most risky to open from unknown sources?
.exe
.txt
.jpg
Mobile malware can:
Steal contacts and data
Protect privacy
Speed up the phone
Remove ads
One way to prevent malware infection is:
Avoid unknown downloads
Disable antivirus
Ignore updates
Click random ads
Which malware gives an attacker remote control?
RAT (Remote Access Trojan)
Worm
Spyware
Rootkit
Scareware is:
Software that uses fear to trick users
Antivirus
A browser
A firewall
Polymorphic malware:
Changes its code to evade detection
Is harmless
Fixes itself
Needs manual update
Logic bomb:
Activates under specific conditions
Runs constantly
Is harmless
Cleans memory
Fileless malware:
Doesn’t use files, hides in memory
Needs a USB
Uses images
Infects only PDFs
A Trojan downloader:
Installs additional malware
Deletes viruses
Secures data
Blocks ads
Best defence against ransomware:
Backups
Pay ransom
Disconnect antivirus
Ignore it
Phishing emails often install:
Malware
Firewalls
Updates
Antivirus
Social engineering relies on:
Human psychology
Hardware vulnerabilities
Network speed
File compression
The most common goal of social engineering is
Entertainment
Data theft
Hardware upgrade
Faster network
Pretexting means
Creating a fake story to get information
Sending spam
Encrypting files
Selling products
Baiting involves
Offering something enticing to trick users
Encrypting data
Using antivirus
Data backup
Tailgating in cybersecurity means
Following someone into a secure area
Driving close to another car
Watching sports
Installing updates
Phishing is a form of
Social engineering
Malware
Hardware attack
Encryption
Vishing uses
Voice calls to trick victims
Video chats
Emails
Games
Smishing uses
SMS/text messages
Social media
Phone calls
Radio
A spear phishing attack targets
Random users
Specific individuals
Computers only
Websites
Dumpster diving means
Searching through trash for information
Swimming
Using VPN
Encrypting data
Shoulder surfing is
Watching someone enter sensitive info
Hacking software
Standing behind someone
Installing updates
Which is a defence against social engineering
Awareness training
Ignoring all security
Sharing passwords
Accepting all calls
An example of pretexting
Impersonating IT staff to get credentials
Using antivirus
Updating passwords
Checking spam
CEO fraud is also known as
Business Email Compromise (BEC)
Malware
Keylogging
DDoS
Which of these uses fear or urgency
Phishing
Scareware
Both A and B
None
Social engineering attacks are successful mainly because
Humans can be manipulated
Computers are weak
Passwords are short
Firewalls fail
Piggybacking differs from tailgating because
It requires permission from the authorized person
It’s illegal
It uses malware
None
Whaling targets
High-level executives
Regular users
Teenagers
Hackers
Quid pro quo attack involves
Offering a service in exchange for information
Encrypting files
Asking for donations
Selling goods
Best prevention against phishing
Verify sender and links
Click everything
Ignore all emails
Disable antivirus
Why do hackers use social engineering
It’s easier to trick people than hack systems
It’s more fun
It’s illegal
It’s slower
The weakest link in cybersecurity is often
Humans
Firewalls
Hardware
Software
Which technique mimics trusted websites
Pharming
Encryption
Authentication
Logging
Shoulder surfing can be prevented by
Using privacy screens
Turning off lights
Hiding phones
Speaking loudly
An attacker posing as tech support is using
Pretexting
Malware
Worm
Encryption
A social engineer’s main tool is
Persuasion
Malware
Firewall
VPN
What should you do if you suspect social engineering
Report it to security or IT
Respond to confirm
Ignore
Share info
Which attack tricks employees into transferring money
CEO fraud
Worm
Spyware
Keylogger
The best way to defend against social engineering is
Education and awareness
More passwords
No internet
Software updates only
The final step in any social engineering defence strategy is
Report suspicious behaviour immediately
Ignore everything
Turn off devices
Share details online
Which of the following is the safest way to create a password?
Use your birthdate
Use your username
Use a mix of letters, numbers, and symbols
Use only lowercase letters
What should you do if you suspect your device has malware?
Ignore the warning
Uninstall all apps
Run a trusted antivirus scan
Share your device password online
Which action helps protect you from phishing attacks?
Clicking on unknown links
Verifying sender information before responding
Replying to all emails
Sharing personal details in public forums
Phishing is best described as:
Improving internet speed
Installing security updates
Cleaning up computer files
Sending emails to trick users into giving personal information
