Cybersecurity Basics: Protect Yourself and Understand the Threats Final quiz

Final Quiz: Cybersecurity Basics

Pass mark: 75%. You can retry as many times as you need.

1 Which feature most reliably points to a phishing or scam message, even when it is well written? Single answer Spelling mistakes, which are always present in scams Urgency and pressure to act through a link or an unusual payment The presence of a company logo A message that arrives outside office hours

2 Which actions limit the damage of ransomware? (several answers) Multiple answers possible Keeping regular backups, including a copy that is not permanently connected Paying the ransom quickly, since it guarantees file recovery Installing updates and avoiding unknown attachments Leaving the backup drive plugged into the computer at all times

3 Why is your main email account considered one of your most critical accounts? Single answer Because it contains the most photographs Because it can be used to reset the passwords of many other accounts Because email is the only account attackers are interested in

4 Which passphrase approach is recommended? (several answers) Multiple answers possible Four to six random unrelated words, unique to the account Your pet's name followed by the current year A very long passphrase for the password manager, used nowhere else The same strong passphrase on all your accounts, so you never forget it

5 Which second factor is the most resistant to phishing? Single answer A code received by text message A push notification asking you to approve A code from an authenticator app A hardware security key or passkey

6 You receive repeated approval requests for sign-ins you did not attempt. What does it mean, and what should you do? Single answer Approve one to stop them, as the system is probably faulty Someone probably knows your password: deny them all and change the password immediately Ignore them; they will stop on their own Disable two-step verification to avoid the notifications

7 Which statement best describes why updates are important? Single answer They fix known security flaws that attackers try to exploit They are only useful for the operating system, not for browsers or routers They are mainly meant to add advertising

8 What does the 3-2-1 backup rule recommend? (several answers) Multiple answers possible Three copies of your data Two different types of storage One copy kept off-site One single copy synchronized to three devices

9 A flashlight app asks for access to your contacts, microphone and always-on location. What is the best reaction? Single answer Allow everything, since all apps need them Allow only the microphone, since that is the least risky one Deny the permissions and consider replacing the app Allow them but disable your screen lock

10 You open the address https://login.example.com.account-check.example and see a padlock. What can you conclude? Single answer The site belongs to example.com, because that name appears in the address The padlock proves that the organization is legitimate The real domain is account-check.example, which is suspicious despite the padlock The padlock means the site cannot contain malware

11 Which statements about VPNs are correct? (several answers) Multiple answers possible It protects your traffic from other users of an untrusted Wi-Fi network It makes you anonymous and stops all tracking You must trust the VPN provider, which can see your traffic It stops you from falling for phishing pages

12 Which habits reduce your digital footprint? (several answers) Multiple answers possible Setting profiles to private and limiting who can find you Accepting every friend request to expand your network Deleting accounts you no longer use Posting holiday photos after you are back rather than in real time

13 You asked a service to delete your personal data under the GDPR and received no answer after more than a month. What can you do? Single answer Nothing, since requests are optional for companies Send a reminder and, if there is still no answer, complain to your data protection authority Pay a service that offers to delete your data Send a copy of your passport again each week

14 Which statements about cookie banners are correct in the EU? (several answers) Multiple answers possible Non-essential cookies require your consent Pre-ticked boxes are valid consent Refusing should be as easy as accepting Strictly necessary cookies, such as a shopping cart, do not require consent

15 A teenager tells you that someone online is pressuring them. What is the most effective first response? Single answer Confiscate every device for several months as a lesson Stay calm, thank them for telling you, keep evidence and then block and report Reply to the person yourself to confront them, using the teenager's account

16 At work you notice that your colleague uses a personal cloud account to share customer files because the company tool is slow. What is the most appropriate response? Single answer Copy the same workaround to save time Ignore it, since it is not your responsibility Suggest using the approved tool and raise the speed problem with IT or the security contact Send the files to your own personal email instead

17 Which practices follow the principle of least privilege? (several answers) Multiple answers possible Using a standard account for daily work Sharing your login with a teammate who needs a file Asking for removal of access to a project that has ended Browsing the web with an administrator account for convenience

18 You think you clicked a phishing link on your work laptop and entered your password. What is the best action? Single answer Do nothing unless something visibly goes wrong Report immediately to the security contact and follow their instructions Delete the email and hope that nobody notices Change the password on the same laptop and say nothing

19 Your personal email account has been hacked. Which steps are part of a good response? (several answers) Multiple answers possible Change the password from a clean device and sign out of all sessions Check for forwarding rules, recovery details and connected apps added by the attacker Pay a stranger who offers to recover the account for an advance fee Warn your contacts through another channel

20 You were a victim of an online scam and lost money. Which is the most useful set of next steps? Single answer Delete all messages and say nothing, so that you can forget about it Contact the bank, preserve evidence, file a complaint and use official support resources Send more money to the scammer to be able to recover the first payment Post your banking details online to find help