IC3 - Digital Literacy Online Safety and Security 2 — Questions and Answers
Question 1: What is two-factor authentication (2FA) and why is it recommended?
- Using two different passwords for the same account
- Requiring two different forms of verification to prove your identity when logging in (Correct answer)
- Logging into two devices simultaneously
- Having two administrators for one account
Correct answer: Requiring two different forms of verification to prove your identity when logging in
Two-factor authentication requires a second verification method beyond your password, such as a text code or authenticator app, significantly reducing unauthorized access risk.
Two-factor authentication adds a second layer of security beyond a password. The three authentication factors are: something you know (password), something you have (phone, security key), and something you are (fingerprint). Common implementations include SMS codes, authenticator apps, and hardware security keys.
Question 2: What is ransomware and how can you protect against it?
- Software that speeds up your computer for a fee
- Malware that encrypts files and demands payment for the decryption key (Correct answer)
- A tool for recovering lost passwords
- An antivirus program
Correct answer: Malware that encrypts files and demands payment for the decryption key
Ransomware encrypts a victim's files or locks their system, then demands payment for the decryption key.
Ransomware encrypts files on infected systems, making them inaccessible until a ransom is paid. Infection vectors include phishing emails, compromised websites, and exploiting software vulnerabilities. The most critical defense is maintaining regular offline backups.
Question 3: What is a VPN and when should you use one?
- A type of antivirus software
- A Virtual Private Network that encrypts your internet connection and masks your IP address (Correct answer)
- A video calling platform
- A virus protection notification
Correct answer: A Virtual Private Network that encrypts your internet connection and masks your IP address
A VPN creates an encrypted tunnel for your internet traffic, hiding your IP address and protecting your data, especially important on public Wi-Fi networks.
A VPN creates an encrypted tunnel between your device and a VPN server, protecting data in transit and masking your IP address. Key use cases include protecting data on public Wi-Fi, accessing work resources remotely, and maintaining privacy from ISPs.
Question 4: What are cookies in web browsing and what privacy concerns do they raise?
- Small programs that speed up your computer
- Small data files stored by websites to remember user preferences, sessions, and track browsing behavior (Correct answer)
- Viruses downloaded from websites
- Advertisements displayed on web pages
Correct answer: Small data files stored by websites to remember user preferences, sessions, and track browsing behavior
Browser cookies are small text files stored on your device by websites to maintain sessions, remember preferences, and track browsing behavior across sites.
HTTP cookies include session cookies (maintain login state), persistent cookies (remember preferences), and third-party cookies (tracking across websites for advertising). Privacy concerns arise primarily from third-party tracking cookies. Regulations like GDPR now require consent.
Question 5: What should you do if you suspect your online account has been compromised?
- Wait to see if the situation resolves itself
- Immediately change your password, enable 2FA, review account activity, and notify the service provider (Correct answer)
- Delete the account and create a new one using the same password
- Post about it on social media to warn others
Correct answer: Immediately change your password, enable 2FA, review account activity, and notify the service provider
If you suspect account compromise, immediately change your password, enable 2FA, review recent account activity, and contact the service provider.
Steps include: change your password immediately, enable two-factor authentication, review recent account activity, check and update recovery email and phone, revoke access for unrecognized apps, notify the service provider, and change passwords on accounts where you reused the compromised password.
Question 6: What is social engineering in cybersecurity?
- Building social media websites
- Manipulating people psychologically to divulge confidential information or perform security-compromising actions (Correct answer)
- Engineering social networks for better connectivity
- Programming chatbots for social media
Correct answer: Manipulating people psychologically to divulge confidential information or perform security-compromising actions
Social engineering exploits human psychology rather than technical vulnerabilities, using techniques like impersonation, urgency, or trust to trick people into revealing information.
Social engineering manipulates human behavior to bypass security. Common techniques include phishing, pretexting, baiting, tailgating, quid pro quo, and vishing. Defenses include security awareness training, verification procedures, and organizational policies requiring multi-person approval for sensitive actions.
IC3 - Digital Literacy Online Safety and Security 2
What is two-factor authentication (2FA) and why is it recommended?