Match each attack to its defence

Computing · Computer Systems · ages 15-16

Name ______________________ Date ____________

Which example uses social engineering?
- Software tests password guesses without contacting the account owner
- A phone owner uses the official service to request a remote lock
- A caller poses as support and persuades someone to reveal a code
A message says your account is locked and asks you to send your password. What should you do?
- Reply with the password so the sender can restore your account
- Open the official app yourself without sending secrets
- Forward a reset code so the sender can check that you own the account
Running antivirus on your laptop is a reliable way to disconnect an unauthorised device that joined your router using the Wi-Fi password.
Circle one: True False
Your phone is stolen. Its lost-device service was enabled. Which action can help protect data on it?
- Request a remote lock through the official service
- Wait for the thief to contact you before taking action
- Send your password to a claimed recovery service
An unauthorised device joined your home Wi-Fi using an exposed password. Which action directly addresses that exposed credential?
- Ask the owner to scan a laptop while keeping the exposed Wi-Fi password
- Ask the owner to change the Wi-Fi password
- Ask the owner to restart the router while keeping its existing Wi-Fi password
Which password choice best resists guessing?
- Your full name and birthday, with punctuation added between the parts
- A familiar saying, with the first letter of every word changed to a capital
- A long random password generated by a password manager
Tom changes his Wi-Fi password but uses his email password for it. Someone nearby obtains that Wi-Fi password. Why does reuse matter?
- The person has a password they can try against Tom's email
- Sharing Wi-Fi lets the person read email without signing in
- Changing Wi-Fi removes Tom's other account safeguards
Mia enabled remote phone protection, but its linked account uses sunny123, also used on three other sites. What risk remains?
- Remote protection blocks access even if the password leaks
- A guessed or leaked password could expose the linked account
- A remote lock request removes the need for the account password

Answer key

For grown-ups. Fold this page away before handing over the rest.

Match each attack to its defence W1-mt_zMJzhIdEWd-s1

A caller poses as support and persuades someone to reveal a code · The caller uses a claimed identity to persuade a person to reveal a code. This is social engineering.
Open the official app yourself without sending secrets · The sender is asking for an account secret. Check through the official app or website without sending the sender a password or code.
False · Laptop antivirus checks the laptop for malicious software. The network owner manages router access through the router's settings and credentials.
Request a remote lock through the official service · Use a trusted device to request a lock through the official service. Delivery depends on the device and connection, so the request does not guarantee an immediate lock.
Ask the owner to change the Wi-Fi password · Changing the password replaces the exposed credential. The owner should also follow the router's instructions to disconnect unauthorised devices and reconnect trusted ones.
A long random password generated by a password manager · Length and unpredictability both help. Personal details and familiar sayings remain predictable despite punctuation or capitals.
The person has a password they can try against Tom's email · The exposed Wi-Fi password is also Tom's email password. Other safeguards may still block access, but reuse gives the person a credential to try.
A guessed or leaked password could expose the linked account · Remote phone protection does not remove the linked account's need for protection. A predictable or leaked password puts that account at risk.