Online Safety & Security

A strong password should:

• ABe your own name and date of birth
• BMix upper/lower case, numbers and symbols, and be long✓
• CBe something straightforward like 'password123' or 'letmein'
• DBe the same on every site

Answer: Strong passwords are long, hard to guess and different for every account. The NCSC advises that length matters most, and recommends joining three random words.

You get an email saying 'Your account is locked — click here to verify your password.' This is most likely:

• AA backup reminder
• BA software update
• CA genuine, safe email
• DA phishing scam✓

Answer: Unexpected urgent emails asking you to click a link and enter your password are usually phishing.

Two-factor authentication (2FA) improves security by:

• AMaking the sign-in process faster for you
• BSharing your password with a friend you trust in case you forget it
• CRequiring a second step (e.g. a code) as well as your password✓
• DReplacing your password with a security question about your pet

Answer: 2FA adds a second check (such as a phone code), so a stolen password alone isn't enough.

What is malware?

• AA type of spreadsheet program used for accounts
• BA backup tool that copies files (e.g. to the cloud)
• CHarmful software designed to damage or steal✓
• DSoftware that speeds up or cleans your PC

Answer: Malware (viruses, spyware, ransomware) is malicious software that can harm a device or data.

Why should you keep software and your operating system up to date?

• AUpdates are needed to keep the warranty valid
• BUpdating slows or freezes the computer
• CUpdates often fix security weaknesses✓
• DUpdates clear space on the hard drive (C: drive)

Answer: Updates patch security vulnerabilities, helping protect against attacks.

What does 'https' in a web address, usually shown with a padlock or site-information icon, indicate?

• AThe site is government/council run
• BThe connection to the site is encrypted/secure✓
• CThe content has been fact-checked
• DThe website is free to use

Answer: 'https' shows the connection is encrypted, protecting data you send. Browsers change how they display the indicator, so check the address itself. Encryption does not guarantee the site is trustworthy.

You should NOT share which of these online?

• AYour bank details with strangers✓
• BA link to a public news article you liked
• CToday's weather forecast
• DYour favourite colour

Answer: Never share sensitive personal/financial details (bank details, PINs, passwords) with strangers.

Personal data about customers must be handled in line with:

• AThe company's own logo, colours and fonts
• BData protection law (e.g. UK GDPR)✓
• CThe company's marketing plan for the year
• DThe office dress code policy

Answer: Personal data must be kept securely and used lawfully under data protection law (UK GDPR).

Connecting to free public Wi-Fi to do online banking is risky because:

• AOthers may be able to intercept your data✓
• BPublic Wi-Fi uses a lot of your battery
• CThe connection is too fast or too slow
• DOnline banking is banned on Wi-Fi

Answer: Public Wi-Fi can be insecure; sensitive tasks like banking are safer on a trusted network or mobile data.