1. Question 1 of 30

   Multi-factor authentication is considered more secure than a password alone mainly because it:

   A Eliminates the need for any password whatsoever B Is only used for low-security, non-sensitive accounts C Automatically guarantees a system can never be hacked D Requires an attacker to bypass multiple independent verification methods
2. Question 2 of 30

   Encryption, a key concept in cybersecurity, is best described as the process of:

   A Permanently deleting data beyond recovery B Compressing data to reduce its overall file size C Backing up data to a secondary physical location D Converting data into a coded form to prevent unauthorized access
3. Question 3 of 30

   One warning sign commonly associated with phishing emails is:

   A Perfectly matching the sender's usual writing style with no errors B Arriving from a long-trusted, verified contact with no unusual requests C Urgent language pressuring immediate action, combined with suspicious links D Containing no links or attachments whatsoever
4. Question 4 of 30

   The padlock icon often shown in a web browser's address bar typically indicates that the website:

   A Uses an encrypted (HTTPS) connection B Is completely free of any malware C Is officially endorsed by the user's government D Has been visited before by the user
5. Question 5 of 30

   When using a shared or public computer, it is recommended to:

   A Log out of all accounts and avoid saving passwords after use B Save all passwords for convenience on future visits C Leave all personal accounts open for the next user D Disable the computer's security software temporarily
6. Question 6 of 30

   A password manager is a tool designed primarily to:

   A Automatically share a user's passwords with online advertisers B Permanently delete old passwords with no way to recover them C Replace the need for antivirus software D Securely store and generate strong, unique passwords for different accounts
7. Question 7 of 30

   Using the same password across multiple online accounts is considered a poor security practice mainly because:

   A It makes passwords easier for the user to remember, with no real downside B A single data breach could compromise all of those accounts C It automatically strengthens the password's complexity D Websites generally require it for proper login functionality
8. Question 8 of 30

   A strong password is generally recommended to include a combination of:

   A Uppercase and lowercase letters, numbers, and special characters B Only lowercase letters C Only numbers, with no letters at all D Only the user's own name and birthdate
9. Question 9 of 30

   A VPN can enhance online privacy primarily by:

   A Permanently blocking all internet access B Encrypting internet traffic and masking the user's IP address C Automatically deleting a user's browsing history after each session D Replacing the need for strong passwords
10. Question 10 of 30

    Oversharing personal information on social media, such as travel plans or home addresses, can increase the risk of:

    A Physical security threats and identity theft B Improved online privacy protection C Guaranteed protection from all forms of cybercrime D Faster internet connection speeds
11. Question 11 of 30

    Cyberbullying refers to the use of digital platforms to:

    A Report technical issues to a software company B Share educational content constructively C Harass, intimidate, or harm another person D Promote a legitimate business or product
12. Question 12 of 30

    Before clicking a link in an unexpected email, a recommended safety practice is to:

    A Immediately click it to see where it leads B Forward it to as many contacts as possible first C Reply to the sender confirming personal details D Hover over the link to preview its actual destination URL
13. Question 13 of 30

    Before entering payment details on an online shopping website, it is advisable to check that the site:

    A Has the lowest possible prices among all competitors B Requires no account registration whatsoever C Uses a secure, encrypted (HTTPS) connection and appears legitimate D Has been online for less than one month
14. Question 14 of 30

    Downloading software only from official or trusted sources helps reduce the risk of:

    A Installing malware disguised as legitimate software B Using too much data storage on a device C Needing to update the software in the future D Losing access to the device's warranty
15. Question 15 of 30

    Two-factor authentication (2FA) enhances account security by requiring:

    A Two separate email addresses for a single account B A password to be entered twice during each login attempt C A second, independent form of verification in addition to a password D No password at all, only a username
16. Question 16 of 30

    A CAPTCHA, commonly seen on websites, is primarily used to:

    A Permanently block all website visitors B Verify that a user is a human, rather than an automated bot C Encrypt a website's entire content D Automatically log a user out after each session
17. Question 17 of 30

    A 'strong' password is generally considered more secure partly because it is:

    A Easier for other people to memorize and share B Difficult for attackers to guess through brute-force or dictionary attacks C Shorter and simpler to type quickly D Based on commonly used words found in a dictionary
18. Question 18 of 30

    Reviewing and adjusting privacy settings on social media accounts is recommended primarily to:

    A Permanently prevent the account from ever being hacked B Increase the number of followers automatically C Guarantee faster loading times for the platform D Control who can view and access your personal information and posts
19. Question 19 of 30

    Keeping a device's operating system and apps updated is an important security practice mainly because updates often:

    A Patch known security vulnerabilities B Permanently slow down the device's performance C Remove all previously installed applications D Disable the device's internet connectivity
20. Question 20 of 30

    Phishing emails often try to trick recipients into:

    A Permanently deleting their email account B Clicking malicious links or revealing sensitive personal information C Installing legitimate, verified antivirus software D Updating their operating system through official channels
21. Question 21 of 30

    A security question (such as 'What is your mother's maiden name?') used for account recovery should ideally have an answer that is:

    A Publicly available on the user's social media profile B Not easily discoverable through public information or social media C Identical to the account's main password D Shared openly with friends and family for convenience
22. Question 22 of 30

    Biometric authentication methods, such as fingerprint or facial recognition, verify identity based on:

    A Unique physical or behavioral characteristics of an individual B A traditional typed password or PIN C A physical security token issued by a company D The user's current geographic location only
23. Question 23 of 30

    A data breach refers to an incident in which:

    A A company voluntarily publishes its own public information B A user intentionally deletes their own personal data C Unauthorized individuals gain access to confidential or sensitive data D A computer's hardware experiences a complete physical failure
24. Question 24 of 30

    Online scams, such as fraudulent lottery or prize notifications, typically aim to:

    A Provide users with legitimate free prizes with no conditions B Improve a user's cybersecurity awareness directly C Offer verified investment advice from registered professionals D Deceive victims into providing money or personal information
25. Question 25 of 30

    Online safety education for children and new internet users typically emphasizes the importance of:

    A Sharing home addresses to make new online friends B Not sharing personal information with strangers online C Accepting all friend or connection requests immediately D Downloading any application without checking its source
26. Question 26 of 30

    Regularly reviewing bank and credit card statements is a recommended cybersecurity practice primarily to:

    A Permanently prevent any future cyberattacks B Increase the account's overall credit limit C Quickly detect any unauthorized or fraudulent transactions D Replace the need for strong account passwords
27. Question 27 of 30

    Enabling automatic software updates is generally recommended because it helps ensure:

    A The device never requires an internet connection again B All personal data is automatically backed up externally C Security patches are applied promptly, without relying on manual action D The software's interface design remains unchanged indefinitely
28. Question 28 of 30

    Social engineering, a common tactic in cyberattacks, primarily relies on:

    A Manipulating or deceiving people into revealing confidential information B Exploiting purely technical software vulnerabilities only C Physically damaging computer hardware D Disrupting electrical power supplies directly
29. Question 29 of 30

    Using public Wi-Fi networks for sensitive activities like online banking is generally considered risky mainly because:

    A Public Wi-Fi is always completely free of any security risk B Public Wi-Fi networks block all online banking access automatically C Such networks guarantee significantly faster internet speeds D Such networks are often less secure, making data interception more likely
30. Question 30 of 30

    Identity theft refers to the act of someone:

    A Legally changing their own name through official channels B Unlawfully using another person's personal information, often for financial gain C Creating a new social media account under their own real name D Sharing their own personal photos publicly online

You can practise as a guest, but sign in to save your score and track your progress.