CSCU - Certified Secure Computer User Safe Internet Browsing Questions and Answers 1 — Questions and Answers
Question 1: When you visit a website, it stores a small text file on your computer to remember your preferences, login status, and items in your shopping cart. What is this file called, and what is a primary security risk associated with it?
- Cache; it can slow down your browser if it gets too large.
- Plugin; it can be exploited by attackers if not updated.
- Cookie; it can be hijacked to impersonate you and gain unauthorized access to your accounts. (Correct answer)
- Digital Certificate; an expired certificate can cause browser errors.
Correct answer: Cookie; it can be hijacked to impersonate you and gain unauthorized access to your accounts.
This file is a cookie. While cookies are essential for a personalized web experience, they can pose a security risk. If a session cookie is stolen (hijacked), an attacker can use it to impersonate a legitimate user and gain unauthorized access to their accounts and personal information without needing a password.
Question 2: A user wants to research a sensitive topic on a shared family computer without saving the browsing history, search queries, or cookies on the device itself. Which browser feature should they use, and what is a key limitation of this feature?
- A Virtual Private Network (VPN); it does not protect against malware.
- Private Browsing (or Incognito Mode); it does not hide your IP address from your ISP or the websites you visit. (Correct answer)
- The browser's 'Clear History' function; it must be done manually after every session.
- An Ad-blocker extension; it does not prevent websites from tracking your location.
Correct answer: Private Browsing (or Incognito Mode); it does not hide your IP address from your ISP or the websites you visit.
Private Browsing (or Incognito Mode) creates a temporary session that does not save browsing history, cookies, or form data on the local device. However, it is not truly anonymous. Your Internet Service Provider (ISP), school, or employer can still see your online activity, and the websites you visit can still identify your IP address.
Question 3: Which of the following is the MOST critical visual indicator that a website encrypts the data transmitted between your browser and the server, protecting it from eavesdroppers?
- The website's professional design and lack of spelling errors.
- A privacy policy link in the website's footer.
- The presence of 'https://' and a padlock icon in the browser's address bar. (Correct answer)
- The website loading quickly and efficiently.
Correct answer: The presence of 'https://' and a padlock icon in the browser's address bar.
The 'https://' in the URL and the corresponding padlock icon are the standard indicators that a website is using HTTPS (Hypertext Transfer Protocol Secure). This protocol encrypts the data in transit, making it unreadable to anyone who might intercept it, which is crucial for protecting sensitive information like passwords and credit card numbers.
Question 4: A user is considering installing a new browser extension that offers to organize their tabs. During installation, it requests permission to 'Read and change all your data on the websites you visit.' Why should this be a cause for concern?
- The extension will likely cause the browser to crash frequently.
- This permission level is excessive and could be abused to steal login credentials, monitor activity, or inject malicious scripts. (Correct answer)
- It will prevent other, more important extensions from working correctly.
- Such permissions will dramatically slow down the user's internet connection speed.
Correct answer: This permission level is excessive and could be abused to steal login credentials, monitor activity, or inject malicious scripts.
Requesting excessive permissions is a major security red flag for browser extensions. An extension with the ability to read and change all data on websites can potentially capture sensitive information like passwords and financial details, track all browsing activity, or inject malicious code into legitimate websites without the user's knowledge.
Question 5: You receive an email with a link to what appears to be your bank's website. Which of the following is the BEST technique to verify the link's legitimacy before clicking?
- Clicking the link to see if the website has a padlock icon.
- Hovering the mouse cursor over the link to see the actual destination URL in the browser's status bar.
- Checking if the email contains the bank's official logo. (Correct answer)
- Replying to the email to ask if the link is legitimate.
Correct answer: Checking if the email contains the bank's official logo.
Phishing attacks often use hyperlinks where the displayed text looks legitimate, but the underlying URL points to a malicious site. By hovering the mouse over the link without clicking, you can preview the actual destination URL in the bottom corner of the browser window. This allows you to check for misspellings or entirely different domains before navigating to a potentially dangerous site.
Question 6: A user clears their browser's cache. What is the primary function of this action?
- To log out of all currently active web sessions.
- To remove all saved passwords from the browser's autofill.
- To delete stored website files like images and scripts from the computer, which can resolve display issues and free up space. (Correct answer)
- To permanently erase all records of visited websites from their Internet Service Provider.
Correct answer: To delete stored website files like images and scripts from the computer, which can resolve display issues and free up space.
The browser cache is a temporary storage area on your computer for website files (like images, HTML, and CSS) that have been downloaded. Its purpose is to make websites load faster on subsequent visits. Clearing the cache removes these temporary files, which can help troubleshoot website loading or formatting problems and reclaim disk space.
When you visit a website, it stores a small text file on your computer to remember your preferences, login status, and items in your shopping cart.
What is this file called, and what is a primary security risk associated with it?