Technology Technology ● Easy

Cybersecurity Basics quiz

This 10-question cybersecurity basics quiz checks your understanding of phishing, password reuse, multifactor authentication, HTTPS, software updates, ransomware, public Wi-Fi, and password managers. Each answer explains what the protection does and, just as importantly, what it cannot guarantee. Use it as a compact knowledge check before reviewing the linked CISA and NIST guidance for the topics you miss.

Start the quiz
Questions
10
Time
12 min
Difficulty
● Easy
A layered glass security doorway protected by keypad and biometric authentication beside a suspicious message
Technology · Easy
TestYourChoice original artwork
Quick info

Before you start

Best for

Anyone wanting to stay safer online

Format

10 explanation-backed questions in about 12 minutes.

What you'll cover

A small map of the test

  1. 1Phishing, ransomware, and common threats
  2. 2Passwords, reuse, and password managers
  3. 3Two-factor authentication and HTTPS
  4. 4Updates, public Wi-Fi, and safe habits
Audience

Who this quiz is for

  • Anyone wanting to stay safer online
  • Beginners checking their grasp of everyday security basics
Key concepts

Ideas this quiz checks

Phishing

A scam that tricks you into revealing credentials or data by impersonating a trusted sender.

Two-factor authentication (2FA)

A second login step beyond your password, so a stolen password alone is not enough.

Ransomware

Malware that encrypts your files and demands payment to restore access.

Password manager

A tool that generates and stores strong, unique passwords so you do not have to remember them.

After the quiz

Recommended next steps

  • Take the Cybersecurity Incident choice test to see how you would respond to a breach
  • Try the Web Development Fundamentals Quiz to understand the web you are securing
  • Read AWS Without the Panic for a calm introduction to cloud basics
References

Sources and further reading

Important note

Educational disclaimer

This quiz is general cybersecurity education and is not a substitute for professional security advice for your specific situation.

Sample questions

Try a few questions first

3 of the 10 questions, with the correct answer and the reasoning behind it. The rest are in the quiz, each explained as you answer.

  1. What is phishing?

    • A technique for testing network speed
    • A method for encrypting data during transmission
    • A cyberattack that uses deceptive emails or websites to trick users into revealing sensitive informationCorrect
    • A type of malware that monitors keyboard input

    Why: Phishing is a social-engineering attack in which someone impersonates a trusted person or organization through email, messages, calls, or websites to obtain information or prompt a harmful action. Warning signs can include unusual urgency, a mismatched sender or domain, and unexpected requests for credentials or payment, but polished messages can lack obvious errors.

  2. Why is reusing the same password across multiple accounts dangerous?

    • It makes passwords easier to guess through brute force
    • It makes it harder for password managers to function correctly
    • It violates most websites' terms of service
    • If one account is breached, attackers can use that password to access all your other accountsCorrect

    Why: Password reuse enables credential-stuffing attacks. After credentials are exposed, attackers can automatically try the same username and password on other services. A unique password for each account limits that reuse pathway; a password manager can generate and store those passwords. Unique passwords reduce this risk but do not prevent phishing, malware, or every form of account compromise.

  3. What does two-factor authentication (2FA) add to the login process?

    • A second password that must be entered after the first
    • An automatic security scan of your device before granting access
    • A requirement to log in from two different devices
    • A second verification step requiring something you have or are, in addition to your passwordCorrect

    Why: Two-factor authentication combines evidence from two different factor types: something you know, have, or are. It makes a stolen password alone insufficient for that login flow, but it is not an absolute guarantee: attackers may phish some one-time codes or exploit account-recovery and session weaknesses. NIST identifies cryptographic authenticators such as properly configured WebAuthn security keys as phishing-resistant; manually entered codes are not.

    Source National Institute of Standards and Technology (NIST)

Related quizzes
More Technology quizzes
Technology ● Easy

Your Account May Be Hacked — What Do You Do First?

8 q 6 min