Cybersecurity Basics: Protect Yourself and Understand the Threats Quiz

Quiz: Passwords and Authentication

Pass mark: 70%. You can retry as many times as you need.

1 Why is a passphrase such as four random unrelated words generally stronger than a short "complex" password like "P@ssw0rd!"? Single answer Because dictionary words are impossible for attack tools to try Because websites refuse passwords that contain symbols Because its length multiplies the number of combinations, and it avoids the predictable patterns of short complex passwords

2 Which habits are recommended for passwords today? (several answers) Multiple answers possible Using a different password for each account Changing every password every month by adding the new month or year Changing a password promptly if a service reports a breach Using a password manager to remember most of them

3 What is a sensible answer to "Isn't a password manager a single point of failure?" Single answer No, because the provider can always reset your master passphrase for you Yes, so it is better to reuse the same password everywhere Yes, but the risk is small when the vault is protected by a long master passphrase and two-step verification, and the alternatives are worse No, because a manager never stores anything of value

4 A caller says they are from your bank's fraud department and asks you to read out the six-digit code you have just received by text message. What should you do? Single answer Read it out, since the caller already knows your name Read half of it to be cautious Hang up and call your bank on its official number; never share the code Send it by email instead, as it is more secure

5 Which statements about passkeys and security keys (FIDO2) are correct? (several answers) Multiple answers possible The website stores only a public key, so a breach does not expose a usable secret They are tied to the real website address, which makes phishing very difficult They make it unnecessary to protect your devices with a passcode The private key is sent to the website each time you sign in