← ACARA Digital Technologies Years 7–8

Applying protections to a scenario

Read a scenario, name the threat, explain how it works, then suggest measures like MFA or encryption and say why they reduce the harm.

Part of: ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 74, ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 95

Understanding Applying protections to a scenario in ACARA Digital Technologies Years 7–8

What it does: With MFA the attacker still needs a code from the student's phone, so the stolen password alone does not give access. An interceptor who captures the data only sees scrambled ciphertext without the key, so the harm is reduced. The email pretends to be from the school to trick Maya into entering her details. That is phishing. Ransomware locks files, and nothing here does that. Clicking the link could lead to a fake login page or malware. Reporting and deleting the message stops the harm before it starts. MFA asks for something more than the password. A thief with only the password is usually stopped at the second step.

Common mistakes: Locking files for cash describes ransomware. Phishing works by using a fake link to steal your login, so line 3 should be 'How: a link steals your login'. Reusing a password makes the harm worse, because one theft opens many accounts. The fix is to turn on MFA so a stolen password alone is not enough.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Applying protections to a scenario to a class →

This module's key terms are also in a printable crossword (Modules 696–726) and word search (Modules 696–770).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Maya gets an email that looks like it is from her school asking her to log in on a link. The link goes to a fake page. Which threat is this?
Ransomware: a program that locks your files until you payPhishing: a fake message that tricks you into giving away your login
Matches
Scenario: phishing email at school. Fix: just reply and ask if it is real.
↓
Replying to a suspected phishing email tells the attacker the address is active and may lead to more scams. Report and delete it instead.
Applying
Meanings
Term
apply protections
Meaning
Read a scenario, name the threat, explain how it works, then suggest measures like MFA or encryption and say why they reduce the harm.
Practice
Scenario: A fake school email asks for my password
Testing
Gaps
threat ← ""
Check Answer
Spots
2Threat: phishing
3How: it locks files for cash

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Ermine' badge — Tundra Streak, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Maya gets an email that looks like it is from her school asking her to log in on a link. The link goes to a fake page. Which threat is this?
A. Ransomware: a program that locks your files until you pay
B. Phishing: a fake message that tricks you into giving away your login ✓
The email pretends to be from the school to trick Maya into entering her details. That is phishing. Ransomware locks files, and nothing here does that.
2. Maya is not sure about the school email. What is the best protection to apply first?
A. Click the link to check if the page looks real, then decide
B. Do not click the link, report the message, then delete it ✓
Clicking the link could lead to a fake login page or malware. Reporting and deleting the message stops the harm before it starts.
3. A hacker steals Sam's password from a fake page. Sam has turned on MFA. Why does MFA reduce the harm?
A. The hacker still needs a second factor, like a code on Sam's phone ✓
B. MFA makes the stolen password change back to the old one
MFA asks for something more than the password. A thief with only the password is usually stopped at the second step.
4. Sam's password was stolen. Which extra step is a sensible response?
A. Change the password and use a different one on every other account ✓
B. Keep the same password so you do not forget it
A stolen password should be replaced straight away. Using the same password on other accounts lets an attacker try it everywhere.
5. Jai sends a private message over free public Wi-Fi at the mall. A stranger on the network could read it. What is this threat called?
A. Interception of data on a network ✓
B. A brute-force attack on a password
Interception means someone captures data as it travels across a network. Public Wi-Fi can make this easier if the data is not protected.

Match the Pairs

apply protections → Read a scenario, name the threat, explain how it works, then suggest measures like MFA or encryption and say why they reduce the harm.
Threat: phishing email -> Measure: report and delete → A fake email at school pretends to be the principal and asks for a login. Report it and delete it instead of clicking the link.
A stolen password is not enough to break in when a second proof of identity is also needed. → Threat: stolen password -> Measure: MFA
A message sent over public Wi-Fi can be intercepted, but encryption turns it into unreadable ciphertext. → Threat: interception on public Wi-Fi -> Measure: encryption (HTTPS)
Scenario: phishing email at school. Fix: just reply and ask if it is real. → Replying to a suspected phishing email tells the attacker the address is active and may lead to more scams. Report and delete it instead.
Scenario: password stolen. Fix: encryption stops the attacker logging in. → Encryption protects data while it is sent or stored, but it does not stop a login with a stolen password. MFA and changing the password are the right measures.

Key Term

apply protections
Read a scenario, name the threat, explain how it works, then suggest measures like MFA or encryption and say why they reduce the harm.

Fill in the Blanks

1. scenario ← "Fake email asks for your login" threat ← "phishing"
Hint: Type the name of the threat where a fake message tricks someone into giving away their login details.
2. scenario ← "Password was stolen" measure ← "MFA" reason ← "Thief also needs a second factor"
Hint: Type the short name for the protection that asks for a second proof of identity as well as the password.
3. scenario ← "Message sent on public Wi-Fi" threat ← "interception" measure ← "encryption"
Hint: Type the protection that scrambles data so an interceptor cannot read it.
4. measure ← "MFA" reason ← "Password alone cannot log in" OUTPUT measure, reason
Hint: Type the pseudocode keyword that displays values to the user.
5. scenario ← "Teacher email asks for login" threat ← "phishing" measure ← "report, delete, do not click"
Hint: Type the variable name that stores the protection the student chooses.

Spot the Error

Question 1
A Scenario: fake school email
B Threat: phishing
C How: it locks files for cash
D Fix: report and delete it
E Why: stops others being fooled
Line C — Locking files for cash describes ransomware. Phishing works by using a fake link to steal your login, so line 3 should be 'How: a link steals your login'.
Question 2
A Scenario: password was stolen
B Threat: account takeover
C Fix: reuse the same password
D Why: thief also needs a code
Line C — Reusing a password makes the harm worse, because one theft opens many accounts. The fix is to turn on MFA so a stolen password alone is not enough.
Question 3
A Scenario: chat on cafe Wi-Fi
B Threat: interception
C How: someone reads the data
D Fix: send it as plaintext
E Why: stolen data is scrambled
Line D — Plaintext can be read by anyone who intercepts it. The fix is encryption, such as HTTPS or a VPN, so intercepted data is scrambled.
Question 4
A Scenario: email asks for login
B Threat: ransomware
C Fix: check sender and report
D Why: fake links get ignored
Line B — An email that tricks you into giving your login is phishing, not ransomware. Ransomware locks files and demands payment.
Question 5
A Threat: ransomware attack
B Scenario: thief knows password
C Fix: turn on MFA
D Why: password alone won't work
Line A — The scenario is a thief who knows the password and can log in as the user. That is account takeover, which MFA helps to stop, not ransomware.

Student with a class code? Join your class →