CPT C11 Security & Privacy

Which of the following are strong password practices?

• Using at least 12 characters, including numbers and symbols

• Writing passwords on a sticky note and keeping it near the computer

• Using the same password for multiple account

• Changing passwords regularly

Which of the following are effective measures to prevent phishing attacks?

• Verifying the sender before clicking on email links

• Using two-factor authentication (2FA)

• Downloading attachments from unknown sources

• Be wary of urgent emails asking for personal details

Which of the following are methods to ensure data privacy?

• Encrypting sensitive files

• Enabling firewall protection

• Sharing passwords with trusted friends

• Using Virtual Private Networks (VPNs) on public Wi-Fi

Match each preventive measure with the most appropriate security threat.

• Enable two-factor authentication (2FA)

• Malware

• Use encryption and VPN

• Unauthorized access

• Check email sources before clicking link

• Data interception

• Use an up-to-date antivirus

• Phishing

Match the function to the security feature.

• Stores and encrypts login credentials

• Password Manager

• Detects and removes malware

• Antivirus Software

• Converts data into unreadable format

• Encryption

• Prevents unauthorized network access

• Firewall

The process of converting plain text into an unreadable format to protect sensitive information is called _____________.

To prevent unauthorized access to a system, users should enable _________________, which requires an additional verification step beyond a password.

A _____________ is a network security system that monitors and controls incoming and outgoing traffic based on predetermined security rules.

Which of the following are characteristics of spyware?

• It secretly collects user information without consent

• It displays unwanted advertisements on web pages

• It is a type of ransomware that locks files

• It can track keystrokes and browsing habits

How does pharming attack a user’s security?

• It steals personal information using malicious software

• It redirects users to a fake website without their knowledge

• It modifies the Domain Name System (DNS) settings to mislead users

• It sends fraudulent emails asking for sensitive data