How the Network Works
Addresses, protocols and the terms people mix up.
What does HTTP stand for?
Most online security advice is repeated without explanation. Here is what the advice is actually protecting against.
Almost every widely publicised security failure comes down to one of three things: a person was persuaded to hand something over, a password was reused, or a known flaw was left unpatched. The technical attacks that make better headlines are rarer and usually aimed at organisations rather than individuals. That is why the standard advice is so boring and so effective. These questions cover what each piece of that advice is for. Why a second factor matters more than a complicated password, what end-to-end encryption does and does not hide, why an update is urgent the day it is published. None of it requires any technical background, and all of it is easier to follow once the reason is visible.
Every question in this quiz is listed below with its correct answer and the reasoning behind it. Play first if you would rather not see the answers — or read through as a study sheet.
Play it insteadAnswer: D. A message impersonating a trusted sender in order to obtain information
Why: The bait is almost always urgency: an account about to close, a payment that failed. Versions aimed at one named individual are called spear phishing.
Answer: C. A second and different kind of proof of identity
Why: The second factor is usually a code from a phone or a physical key. It matters because a stolen password on its own then gets an attacker nowhere.
Answer: B. Only the sender and the recipient can read the messages
Why: The keys stay on the devices, so the company relaying the message cannot decrypt it. Metadata such as who messaged whom and when is often still visible to the provider.
Answer: A. Information held by an organisation being exposed or stolen
Why: Reused passwords are what makes one breach spread, because stolen pairs get tried automatically elsewhere. That technique has a name of its own, credential stuffing.
Answer: D. Encrypts them and demands payment for the key
Why: Offline backups are the most reliable defence, since paying buys no guarantee of a working key. Attackers increasingly threaten to publish the data as well as withhold it.
Answer: C. Each extra character multiplies the number of possible combinations
Why: A string of several unrelated words can beat a short one crammed with symbols. Official guidance moved towards length and away from forced symbol rules during the 2010s.
Answer: B. A different strong password for every single account
Why: The user remembers one master password and the software handles everything else. Most will also flag a stored password that has turned up in a known breach.
Answer: A. Routes it through an encrypted tunnel to a server elsewhere
Why: It hides your traffic from the local network and your address from the sites you visit. It does not make you anonymous, because the operator of the VPN can see the same traffic.
Answer: D. Close flaws that attackers already know about
Why: Details of a patched flaw often become public alongside the fix. That tells attackers exactly what to look for on machines that have not updated yet.
Answer: C. A small file a site stores so it can recognise a returning visitor
Why: First-party cookies are what keep you logged in; third-party ones were long used to follow people between sites. Consent banners exist because of laws written around that second use.
How Online Security Works has 10 questions and takes about 7 minutes to finish. It is rated Medium and sits in our The Internet category.
Each of the 10 correct answers adds 10 XP, up to 100 XP for a clean run. Wrong answers cost you nothing, and your full question-by-question review is shown at the end.
Yes. All 10 questions carry a written explanation of why the correct answer is right, so the quiz works as a study sheet as well as a test.
Yes, as often as you like. The questions and the answer options are reshuffled on each run, and you can use Practice Mistakes afterwards to retry only the ones you missed. No account is needed to play.
Every quiz on QuizKite is researched, written and fact-checked by hand against reliable references, with an explanation for each answer. Read our full Editorial Policy to learn more about our content standards.
Addresses, protocols and the terms people mix up.
What does HTTP stand for?
Packets, CERN, HTML and the browser that turned a physics tool into a mass medium.
Packet switching, the idea underneath the internet, works by doing what?
The breakthroughs that rewired daily life — and the people behind them.
Who is credited with introducing the movable-type printing press to Europe around 1440?
The engineering principles behind structures and machines.
Reinforced concrete combines concrete with which material?
The vocabulary of AI and robotics, kept precise.
What does AI stand for?
Processors, memory, storage and what each part actually does.
What does the CPU do?