Phishing is best described as what?

A message impersonating a trusted sender in order to obtain information

Software that encrypts files and demands payment

A flaw left in a website's code

An attempt to overload a server with traffic

Two-factor authentication adds what to a password?

A second and different kind of proof of identity

A longer minimum password length

An automatic monthly password change

What does end-to-end encryption mean for a messaging service?

Only the sender and the recipient can read the messages

Messages are deleted once they have been read

Messages travel faster between devices

The service keeps a searchable copy for the user

A "data breach" refers to what?

Information held by an organisation being exposed or stolen

A network outage lasting several hours

A site redesign that loses its older pages

Ransomware does what to a victim's files?

Encrypts them and demands payment for the key

Copies them into a public archive

Compresses them to free up space

Why is a long password generally stronger than a short, complicated one?

Each extra character multiplies the number of possible combinations

Long passwords are harder to mistype

Sites store long passwords more securely

A password manager helps chiefly by making what possible?

A different strong password for every single account

One password that is safe to use everywhere

Passwords short enough to memorise

Skipping authentication on trusted sites

What does a VPN actually do to your traffic?

Routes it through an encrypted tunnel to a server elsewhere

Removes viruses from files as they download

Increases the speed of the connection

Deletes advertising cookies automatically

Software updates matter for security because they usually do what?

Close flaws that attackers already know about

Make programs load more quickly

Reset preferences to safe defaults

What is a cookie in a web browser?

A small file a site stores so it can recognise a returning visitor

A cached copy of a whole web page

A program that runs when the browser opens

A record of the user's typing speed

How is this quiz scored?

Every correct answer adds to your score, and there is no penalty for a wrong one. Your result is shown at the end with a full review of each question.

Do I need an account to play?

No. Every quiz is free and playable without signing in. An account is optional and only used to save your progress across devices.

Are explanations included?

Yes. Every question is followed by a short explanation of why the correct answer is right, so the quiz is useful whether you score well or not.

The Internet Medium ⚡ 10 Questions ⏱️ ~7 Mins +100 XP

How Online Security Works

Q: Can I retake this quiz?

Yes. You can replay any quiz as many times as you like, and the questions and answer options are reshuffled each time.

Most online security advice is repeated without explanation. Here is what the advice is actually protecting against.

Start Quiz

Questions

~7m

Duration

Medium

Difficulty

+100

Max XP

About this topic

Almost every widely publicised security failure comes down to one of three things: a person was persuaded to hand something over, a password was reused, or a known flaw was left unpatched. The technical attacks that make better headlines are rarer and usually aimed at organisations rather than individuals. That is why the standard advice is so boring and so effective. These questions cover what each piece of that advice is for. Why a second factor matters more than a complicated password, what end-to-end encryption does and does not hide, why an update is urgent the day it is published. None of it requires any technical background, and all of it is easier to follow once the reason is visible.

Questions & answers

How Online Security Works: all 10 questions and answers

Every question in this quiz is listed below with its correct answer and the reasoning behind it. Play first if you would rather not see the answers — or read through as a study sheet.

Play it instead

Show all answers and explanationsHide answers

1Phishing is best described as what?
- A Software that encrypts files and demands payment
- B A flaw left in a website's code
- C An attempt to overload a server with traffic
- D A message impersonating a trusted sender in order to obtain information Correct
Answer: D. A message impersonating a trusted sender in order to obtain information

Why: The bait is almost always urgency: an account about to close, a payment that failed. Versions aimed at one named individual are called spear phishing.
2Two-factor authentication adds what to a password?
- A An automatic monthly password change
- B A log of every login attempt
- C A second and different kind of proof of identity Correct
- D A longer minimum password length
Answer: C. A second and different kind of proof of identity

Why: The second factor is usually a code from a phone or a physical key. It matters because a stolen password on its own then gets an attacker nowhere.
3What does end-to-end encryption mean for a messaging service?
- A The service keeps a searchable copy for the user
- B Only the sender and the recipient can read the messages Correct
- C Messages are deleted once they have been read
- D Messages travel faster between devices
Answer: B. Only the sender and the recipient can read the messages

Why: The keys stay on the devices, so the company relaying the message cannot decrypt it. Metadata such as who messaged whom and when is often still visible to the provider.
4A "data breach" refers to what?
- A Information held by an organisation being exposed or stolen Correct
- B A network outage lasting several hours
- C A site redesign that loses its older pages
- D A card payment being declined
Answer: A. Information held by an organisation being exposed or stolen

Why: Reused passwords are what makes one breach spread, because stolen pairs get tried automatically elsewhere. That technique has a name of its own, credential stuffing.
5Ransomware does what to a victim's files?
- A Copies them into a public archive
- B Compresses them to free up space
- C Replaces them with advertising
- D Encrypts them and demands payment for the key Correct
Answer: D. Encrypts them and demands payment for the key

Why: Offline backups are the most reliable defence, since paying buys no guarantee of a working key. Attackers increasingly threaten to publish the data as well as withhold it.
6Why is a long password generally stronger than a short, complicated one?
- A Sites store long passwords more securely
- B Short passwords expire sooner
- C Each extra character multiplies the number of possible combinations Correct
- D Long passwords are harder to mistype
Answer: C. Each extra character multiplies the number of possible combinations

Why: A string of several unrelated words can beat a short one crammed with symbols. Official guidance moved towards length and away from forced symbol rules during the 2010s.
7A password manager helps chiefly by making what possible?
- A Skipping authentication on trusted sites
- B A different strong password for every single account Correct
- C One password that is safe to use everywhere
- D Passwords short enough to memorise
Answer: B. A different strong password for every single account

Why: The user remembers one master password and the software handles everything else. Most will also flag a stored password that has turned up in a known breach.
8What does a VPN actually do to your traffic?
- A Routes it through an encrypted tunnel to a server elsewhere Correct
- B Removes viruses from files as they download
- C Increases the speed of the connection
- D Deletes advertising cookies automatically
Answer: A. Routes it through an encrypted tunnel to a server elsewhere

Why: It hides your traffic from the local network and your address from the sites you visit. It does not make you anonymous, because the operator of the VPN can see the same traffic.
9Software updates matter for security because they usually do what?
- A Make programs load more quickly
- B Free up storage space
- C Reset preferences to safe defaults
- D Close flaws that attackers already know about Correct
Answer: D. Close flaws that attackers already know about

Why: Details of a patched flaw often become public alongside the fix. That tells attackers exactly what to look for on machines that have not updated yet.
10What is a cookie in a web browser?
- A A program that runs when the browser opens
- B A record of the user's typing speed
- C A small file a site stores so it can recognise a returning visitor Correct
- D A cached copy of a whole web page
Answer: C. A small file a site stores so it can recognise a returning visitor

Why: First-party cookies are what keep you logged in; third-party ones were long used to follow people between sites. Consent banners exist because of laws written around that second use.

Read alongside this quiz

What happens when you load a page

Between typing an address and seeing a page, a dozen systems cooperate in under a second. A walk through the sequence.

6 min read

Frequently Asked Questions

How is scoring calculated for this quiz?

Each correct answer awards 10 XP. There is zero point penalty for incorrect guesses, encouraging learning through exploration.

Can I retake this quiz?

Yes! You can retake any quiz as many times as you like, or use the Practice Mistakes mode at the end to review questions you missed.

Are explanations provided for every question?

Absolutely. As soon as you select an option, QuizKite displays a detailed explanation card explaining why the answer is correct.

QuizKite Quality Guarantee

Every quiz on QuizKite is researched, written and fact-checked by hand against reliable references, with an explanation for each answer. Read our full Editorial Policy to learn more about our content standards.

Keep going