IC3 - Digital Literacy Certification Digital Literacy Online Safety and Security 1 — Questions and Answers
Question 1: Which of the following best describes a phishing attack?
- A virus that encrypts your files and demands payment
- A fraudulent attempt to obtain sensitive information by disguising as a trustworthy entity (Correct answer)
- Software that monitors your keystrokes without your knowledge
- An unauthorized person physically accessing your computer
Correct answer: A fraudulent attempt to obtain sensitive information by disguising as a trustworthy entity
Phishing attacks use deceptive emails, messages, or websites that impersonate legitimate organizations to trick users into revealing passwords, credit card numbers, or other sensitive data.
Question 2: What does HTTPS indicate about a website?
- The website is owned by a government organization
- The website loads faster than standard HTTP sites
- Communication between your browser and the website is encrypted (Correct answer)
- The website has been verified as completely free of malware
Correct answer: Communication between your browser and the website is encrypted
HTTPS (HyperText Transfer Protocol Secure) uses SSL/TLS encryption to protect data transmitted between your browser and the web server, preventing eavesdropping and tampering.
Question 3: What is the safest practice when creating passwords for multiple online accounts?
- Use one strong password for all accounts so you never forget it
- Use a unique, complex password for each account, ideally managed with a password manager (Correct answer)
- Include your name and birthdate so you can easily remember them
- Keep passwords short but mix uppercase and lowercase letters
Correct answer: Use a unique, complex password for each account, ideally managed with a password manager
Using a unique password for each account ensures that if one account is compromised, attackers cannot access your other accounts. A password manager securely stores and generates strong, unique passwords.
Question 4: What is malware?
- A type of hardware component that slows down your computer
- Any software intentionally designed to cause damage or unauthorized access to systems (Correct answer)
- An outdated operating system that is no longer supported
- A browser extension that blocks advertisements
Correct answer: Any software intentionally designed to cause damage or unauthorized access to systems
Malware (malicious software) is a broad term covering any software designed to harm, exploit, or gain unauthorized access to computer systems, including viruses, trojans, spyware, and ransomware.
Question 5: Why is it important to keep your operating system and software updated?
- Updates improve the visual appearance of the software interface
- Updates remove features that slow down your computer
- Updates patch security vulnerabilities that attackers could otherwise exploit (Correct answer)
- Updates are required by law in most countries
Correct answer: Updates patch security vulnerabilities that attackers could otherwise exploit
Software updates frequently include security patches that fix known vulnerabilities. Unpatched systems are common targets for cyberattacks because the weaknesses are publicly known and easily exploited.
Question 6: What is social engineering in the context of cybersecurity?
- Using social media platforms to market products to targeted audiences
- Manipulating people psychologically to divulge confidential information or perform actions (Correct answer)
- Building secure software by involving large teams of developers
- Tracking user behavior across social networks to build advertising profiles
Correct answer: Manipulating people psychologically to divulge confidential information or perform actions
Social engineering exploits human psychology rather than technical vulnerabilities. Attackers use tactics like impersonation, urgency, or fear to trick individuals into revealing passwords, granting access, or transferring funds.
IC3 - Digital Literacy Certification Digital Literacy Online Safety and Security 1
Which of the following best describes a phishing attack?