Malware that encrypts a victim's files and demands payment for the decryption key — Ransomware encrypts files on the victim's device or network, then the attacker demands a ransom — often in cryptocurrency — before providing the key to restore access.

← All Quizzes Technology

Cybersecurity Awareness Quiz

Q: What is a phishing attack?

A fraudulent attempt to steal sensitive information by impersonating a trusted source — Phishing involves criminals posing as legitimate organisations — such as banks or HMRC — via email or fake websites to trick victims into handing over passwords or financial details.

Q: Which UK government agency should you report a phishing email to?

The National Cyber Security Centre (NCSC) via report@phishing.gov.uk — The NCSC runs the Suspicious Email Reporting Service (SERS); forwarding suspicious emails to report@phishing.gov.uk has resulted in hundreds of thousands of malicious sites being taken down.

Q: What does a VPN primarily do?

Encrypts your internet traffic and masks your IP address — A Virtual Private Network routes your traffic through an encrypted tunnel, hiding your IP address and making it much harder for third parties to intercept or monitor your online activity.

Q: Which of the following is the strongest password?

xQ7#mK2@pL9$wR4! — A long, random mix of uppercase, lowercase, numbers, and special characters is computationally the hardest to crack, even though a long memorable passphrase can also be strong in practice.

Q: What is two-factor authentication (2FA)?

A security layer requiring a second proof of identity beyond just a password — 2FA significantly reduces the risk of account compromise because an attacker needs both your password and your second factor — such as a one-time code sent to your phone — to gain access.

Q: Under UK law, which regulation governs how organisations must protect your personal data?

The UK General Data Protection Regulation (UK GDPR) — The UK GDPR (retained post-Brexit) obliges organisations to handle personal data lawfully, securely, and transparently, with the ICO acting as the supervisory authority.

Q: What does HTTPS in a web address indicate?

The connection between your browser and the site is encrypted — HTTPS uses TLS encryption to protect data in transit between your browser and the web server, preventing eavesdropping — though it does not guarantee the site itself is trustworthy.

Q: Which of the following is NOT a sign of a phishing email?

A personalised greeting using your full name and correct account details — Phishing emails typically use generic greetings, urgency, misspelt domains, and grammatical errors; a correctly personalised greeting with accurate account details is more consistent with a legitimate message.

Q: What is a 'brute force' attack?

Systematically trying every possible password combination until the correct one is found — Brute force attacks use automated tools to try millions of password combinations per second, which is why long, complex passwords and account lockout policies are essential defences.

Phishing, VPNs, password strength — could you spot a threat?

12 questions · ~6 mins ·

Question 1 of 12

1. What is a phishing attack?

2. Which UK government agency should you report a phishing email to?

3. What does a VPN primarily do?

4. Which of the following is the strongest password?

5. What is two-factor authentication (2FA)?

6. Under UK law, which regulation governs how organisations must protect your personal data?

7. What is ransomware?

8. What does HTTPS in a web address indicate?

9. Which of the following is NOT a sign of a phishing email?

10. What is a 'brute force' attack?

11. What does the term 'zero-day vulnerability' mean?

12. Which practice best protects you when using public Wi-Fi in a UK coffee shop?

Cybersecurity Awareness Quiz

Great effort!