Internet and Cyber Security: 17 MCQs with answers

All 17 multiple-choice questions from this kit, free and with no sign-up.

Warm-up · 6 questions

Q1. Which of the following best defines a cyber threat?

Beginner
A A slow laptop caused by too many open apps
B A power cut that shuts down a computer
C A malicious act causing theft, damage, or unauthorized access
D A hardware failure inside a monitor
Show the answer

C · A malicious act causing theft, damage, or unauthorized access

A cyber threat is a potential danger or malicious act that causes disruption through theft, damage, or unauthorized access. Accidental problems like power cuts or hardware failure are not cyber threats because they lack harmful intention.

Q2. A message claims your bank account will be closed unless you click a link and verify your password. Which cyber threat is this?

Beginner
A Phishing
B Cyberbullying
C Ransomware
D Data leakage
Show the answer

A · Phishing

Phishing is when criminals masquerade as trusted institutions such as banks to ask for personal information like passwords and OTPs. The urgency in the message is a classic phishing tactic.

Q3. Which malware encrypts all files on a computer and demands money to return them?

Beginner
A Trojan horse
B Spyware
C Ransomware
D Virus
Show the answer

C · Ransomware

Ransomware is the specific malware that encrypts all files and demands a ransom payment to restore them. Other malware may spy or disrupt, but ransomware holds data hostage.

Q4. Which of these is a psychological effect of cyberbullying?

Beginner
A Headaches
B Anxiety
C Depression
D Low self-esteem
Show the answer

D · Low self-esteem

Low self-esteem, isolation and withdrawal, and harmful habits are listed as psychological effects. Headaches are physical, depression is emotional, and anxiety is mental.

Q5. Which of the following is NOT one of the three core objectives of cybersecurity?

Beginner
A Integrity
B Anonymity
C Confidentiality
D Availability
Show the answer

B · Anonymity

The three core objectives are confidentiality, integrity, and availability. Anonymity is not one of them — cybersecurity is about protecting data, not hiding identity.

Q6. Cybersecurity has three core objectives: confidentiality, integrity, and availability.

Beginner
A True
B False
Show the answer

A · True

Cybersecurity has three core objectives: confidentiality, integrity, and availability.

Building up · 6 questions

Q7. A student downloads a free game from an unknown site and their device starts running slowly. What is the most likely cause?

Intermediate
A The game is too large for the device
B The device's password was leaked
C Malware entered through the downloaded file
D The device was cyberbullied
Show the answer

C · Malware entered through the downloaded file

Malware commonly enters through free games, unauthorized software, or fake apps. Slowing down a device is a listed effect of malware such as viruses and spyware.

Q8. Why does using the same password on every website make a data leak more dangerous?

Intermediate
A It makes each password easier to remember
B It slows down the websites you use
C One hacked platform lets a hacker control all other accounts
D It encrypts your files automatically
Show the answer

C · One hacked platform lets a hacker control all other accounts

If you reuse one password everywhere, a hack on just one platform can allow a hacker to take control of all your other accounts. This is why password reuse turns a small breach into a total takeover.

Q9. A company wants to ensure that no unauthorized person has altered its records. Which cybersecurity objective is it protecting?

Intermediate
A Anonymity
B Availability
C Confidentiality
D Integrity
Show the answer

D · Integrity

Integrity ensures that data is accurate and reliable and that no unauthorized person has altered it, using methods such as data verification. Confidentiality is about who can see data, and availability is about access when needed.

Q10. Which pair correctly matches a cyberbullying effect to its category?

Intermediate
A Shame — Physical effect
B Isolation — Emotional effect
C Loss of concentration — Mental effect
D Stomach aches — Mental effect
Show the answer

C · Loss of concentration — Mental effect

Loss of concentration is listed under mental effects, along with anxiety, self-harm, and suicidal thoughts. Stomach aches are physical, shame is emotional, and isolation is psychological.

Q11. A hacker locks all the files on a hospital computer and demands payment. Which cybersecurity objective is most directly broken?

Intermediate
A None, because the files still exist
B Confidentiality, because files were read
C Availability, because authorized users cannot reach the files
D Integrity, because files were altered
Show the answer

C · Availability, because authorized users cannot reach the files

Ransomware encrypts files so authorized users cannot reach them, which breaks availability. The files still exist, but access is blocked — that is an availability failure.

Q12. Which of these is a human or organizational cause of data leaks rather than a technical one?

Intermediate
A Malware attacks
B Unprotected network
C Inadequate encryption
D Insider threats
Show the answer

D · Insider threats

Insider threats come from people within an organization, making them a human cause. Inadequate encryption, unprotected networks, and malware attacks are technical causes.

Topper level · 5 questions

Q13. A phishing email delivers malware, which steals a user's credentials, which are then exposed in a breach. What does this chain best illustrate?

Advanced
A That cyber threats are unrelated and should be studied separately
B That antivirus software alone is enough protection
C That cyber threats chain together, so defence must be layered
D That strong passwords prevent all cyber attacks
Show the answer

C · That cyber threats chain together, so defence must be layered

The source stresses that phishing, malware, and data leaks chain together, which is why defence must be layered. Strong passwords alone will not stop ransomware, and antivirus alone will not stop a convincing fake login page.

Q14. A school wants to protect student records so only authorized staff can view them. Which control best matches this need?

Advanced
A Regular backups and system maintenance
B Firewalls only
C Strong passwords and encryption
D Data verification methods
Show the answer

C · Strong passwords and encryption

Restricting who can view sensitive information is a confidentiality goal, achieved through strong passwords and encryption. Backups serve availability, and data verification serves integrity.

Q15. Assertion (A): A power cut that shuts down a computer is not a cyber threat. Reason (R): A cyber threat requires harmful intention, not just accidental disruption.

Advanced
A Both A and R are true, and R correctly explains A.
B A is false but R is true.
C A is true but R is false.
D Both A and R are true, but R does not explain A.
Show the answer

A · Both A and R are true, and R correctly explains A.

A cyber threat is defined as a malicious act with harmful intention. A power cut is accidental and lacks that intention, so it is not a cyber threat — and that is exactly why R explains A.

Q16. Consider these statements about ransomware: I. It encrypts all files on a computer. II. It demands a ransom to return the files. III. It is a form of phishing. Which combination is correct?

Advanced
A I and II only
B II and III only
C I and III only
D I, II, and III
Show the answer

A · I and II only

Ransomware encrypts files and demands a ransom, so I and II are correct. It is a type of malware, not phishing — phishing is deception to steal information, a separate threat form.

Q17. A company experiences a data breach after an employee falls for a phishing attack, leading to the exposure of sensitive information. In evaluating this situation, which of the following actions would best mitigate future risks associated with password reuse across multiple platforms?

Advanced
A Provide training on recognizing phishing attempts without addressing password management.
B Increase the complexity requirements for passwords to include special characters and numbers.
C Mandate the use of unique passwords for each service and implement a password manager for all employees.
D Implement a company-wide policy requiring all employees to change their passwords every month.
Show the answer

C · Mandate the use of unique passwords for each service and implement a password manager for all employees.

Mandating the use of unique passwords for each service and implementing a password manager effectively addresses the issue of password reuse, which is a critical vulnerability in the event of a data breach. This approach ensures that even if one password is compromised, it does not lead to a total account takeover acro…

Make your own

Your notes can be a kit like these

Every kit here was made from real study material. Point Veda at a chapter, a PDF, a photo or a link and get notes, flashcards, practice MCQs, games and a scored test — free, in 42 languages.

  • Chapter notes
  • Flashcards
  • Practice MCQs
  • Scored tests
  • Exam prep

Get Veda free See what students get

Free to start · No ads · Works in 42 languages