A student opens an infected email attachment. The program then attaches copies of itself to the student's documents and spreads when those files are shared. What type of malware is it?

A laptop has not downloaded any files, but it begins sending copies of one malicious program to other computers across the school network by itself. What type of malware is this?

A free game installer appears legitimate, but after it is installed it secretly opens a remote-control connection for an attacker. What type of malware most likely entered with the installer?

After installing a browser extension, Maya sees frequent pop-up ads and her browser redirects to advertising pages. Which malware category best fits this behavior?

A hidden program records the websites a user visits and sends the information to another party without permission. What type of malware is this?

A student's files are replaced with unreadable versions, and a message demands payment for a key to restore them. What type of malware is involved?

A security scan finds a program that changes settings to let attackers enter a computer later, even after the original attack is removed. What is this malicious access method called?

A browser warning says a downloaded program is known malware. Which action best reduces the chance of infection?

An email says, "From: [email protected]. Your order is on hold. Sign in now using the link below." What is the clearest phishing giveaway?

A text message says, "School IT: Your account closes in 10 minutes. Reply with your password to keep it." Which detail is the strongest warning sign?

A message claims to be from a bank and links to "http://secure-bank-login.example." Before using the link, what is the safest next step?

An email from a teacher's familiar name requests gift-card codes immediately, but the sender address is unfamiliar. What social-engineering tactic is being used?

A caller says, "I am from technical support. Give me the code your authenticator app just displayed so I can fix your account." What should the student do?

A fake login page uses the school mascot and colors, but its address is "student-portal-login.example" instead of the district's normal domain. What should a student verify first?

An email says, "You won a tablet! Pay a $5 shipping fee within one hour." Which feature most strongly suggests a scam?

A student receives a direct message from a classmate's account asking for a loan, but the wording is unlike the classmate's usual messages. What is the best way to check the request?

Which password is strongest against guessing attacks?

A website requires a password and a code generated by an app on the user's phone. Which authentication factors are combined?

A fingerprint scanner unlocks a phone after the user enters a PIN. What factor does the fingerprint add?

A student uses the same password for a game site and an email account. The game site's password list is stolen. Why does password reuse increase risk?

What is the main purpose of a password manager?

A website sends a login approval prompt to a phone. A student did not try to sign in but receives the prompt. What should the student do?

A library computer stays signed in to an account after a student leaves. Which action would have prevented this problem?

A site stores passwords as salted hashes rather than readable text. What does hashing help protect if the stored password database is exposed?

Encrypt the word MOON with a Caesar cipher that shifts every letter four places forward through the alphabet.

Decrypt "KHOOR" using a Caesar cipher that shifted each original letter three places forward.

A student encrypts a file using one secret key, and the recipient uses that same secret key to decrypt it. What kind of encryption is this?

A website shares one key openly so anyone can encrypt a message to it. Only the website's separate secret key can decrypt the message. What kind of encryption is this?

What does HTTPS add to communication between a browser and a website?

A service stores a hash of each password. Can the service use that hash as if it were the user's password to log in to another site?

In an encrypted chat, what does an encryption key do?

A student copies a confidential message into a public post after decrypting it. What did encryption protect before the student posted it?

A student posts a photo publicly, then deletes it an hour later. Classmates had already saved copies. What does deleting the post guarantee?

A video platform records that a user watched several cooking videos. What kind of digital footprint is this viewing history?

A student tags a friend in a public photo. Which person can contribute to the tagged friend's digital footprint?

A student comments on a public news article using a screen name. Why can this still be part of a digital footprint?

A student wants fewer people to find an old public profile. Which change most directly reduces future public visibility?

A location-sharing app adds a photo's location to a public post. What information might the post reveal?

A school acceptable-use policy says accounts must be used only by their assigned user. A student gives a friend their login to submit an assignment. How does the policy apply?

During a class discussion board, a student disagrees with a classmate's idea. Which reply best follows netiquette?

Classroom rules allow students to use online sources for research. A student copies a paragraph from a website into a report without naming where it came from. What responsible-use step did the student skip?

A student is allowed to print one final draft but sends 40 unrelated pages to the school printer. Which acceptable-use concern applies?

A group-chat member receives repeated insulting messages. Which response best follows a school's reporting procedure that asks students to preserve evidence?

A photo is licensed Creative Commons BY-NC. A student wants to include it, with credit, in a company-paid advertisement. Is that allowed by the license?

A diagram is licensed Creative Commons BY. A student wants to place it in a nonprofit club presentation. What does the BY condition require?

A student wants to remix a song licensed Creative Commons BY-ND for a video project. Which license condition creates the problem?

A poster is licensed Creative Commons BY-SA. A student adapts it and shares the adaptation online. What must the student do about the adaptation's license?

A student finds an image online with no license statement and wants to place it in a public video. What is the safest copyright-aware choice?

A student quotes two sentences from an article in a research presentation and identifies the author and source. Why is the citation important?

A music creator's website states, "All rights reserved." A student wants to copy the full song into a game video. What does that statement mean for the student?