Applying protections to a scenario

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Maya gets an email that looks like it is from her school asking her to log in on a link. The link goes to a fake page. Which threat is this?

A Ransomware: a program that locks your files until you pay

B Phishing: a fake message that tricks you into giving away your login

2. Maya is not sure about the school email. What is the best protection to apply first?

A Click the link to check if the page looks real, then decide

B Do not click the link, report the message, then delete it

3. A hacker steals Sam's password from a fake page. Sam has turned on MFA. Why does MFA reduce the harm?

A The hacker still needs a second factor, like a code on Sam's phone

B MFA makes the stolen password change back to the old one

4. Sam's password was stolen. Which extra step is a sensible response?

A Change the password and use a different one on every other account

B Keep the same password so you do not forget it

5. Jai sends a private message over free public Wi-Fi at the mall. A stranger on the network could read it. What is this threat called?

A Interception of data on a network

B A brute-force attack on a password

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1apply protections		AEncryption protects data while it is sent or stored, but it does not stop a login with a stolen password. MFA and changing the password are the right measures.
2Threat: phishing email -> Measure: report and delete		BRead a scenario, name the threat, explain how it works, then suggest measures like MFA or encryption and say why they reduce the harm.
3A stolen password is not enough to break in when a second proof of identity is also needed.		CA fake email at school pretends to be the principal and asks for a login. Report it and delete it instead of clicking the link.
4A message sent over public Wi-Fi can be intercepted, but encryption turns it into unreadable ciphertext.		DThreat: stolen password -> Measure: MFA
5Scenario: phishing email at school. Fix: just reply and ask if it is real.		EReplying to a suspected phishing email tells the attacker the address is active and may lead to more scams. Report and delete it instead.
6Scenario: password stolen. Fix: encryption stops the attacker logging in.		FThreat: interception on public Wi-Fi -> Measure: encryption (HTTPS)

Definitions

apply protections

Fill in the Blanks

Complete each line of code by filling in the missing parts.

scenario ← "Fake email asks for your login" threat ← "________"

scenario ← "Password was stolen" measure ← "___" reason ← "Thief also needs a second factor"

scenario ← "Message sent on public Wi-Fi" threat ← "interception" measure ← "__________"

measure ← "MFA" reason ← "Password alone cannot log in" ______ measure, reason

scenario ← "Teacher email asks for login" threat ← "phishing" _______ ← "report, delete, do not click"

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A Scenario: fake school email

B Threat: phishing

C How: it locks files for cash

D Fix: report and delete it

E Why: stops others being fooled

Question 2

A Scenario: password was stolen

B Threat: account takeover

C Fix: reuse the same password

D Why: thief also needs a code

Question 3

A Scenario: chat on cafe Wi-Fi

B Threat: interception

C How: someone reads the data

D Fix: send it as plaintext

E Why: stolen data is scrambled

Question 4

A Scenario: email asks for login

B Threat: ransomware

C Fix: check sender and report

D Why: fake links get ignored

Question 5

A Threat: ransomware attack

B Scenario: thief knows password

C Fix: turn on MFA

D Why: password alone won't work

Answer Key

Applying protections to a scenario

Section A: Quick Questions

B — Phishing: a fake message that tricks you into giving away your login

B — Do not click the link, report the message, then delete it

A — The hacker still needs a second factor, like a code on Sam's phone

A — Change the password and use a different one on every other account

A — Interception of data on a network

Section B: Match the Pairs

apply protections → Read a scenario, name the threat, explain how it works, then suggest measures like MFA or encryption and say why they reduce the harm.

Threat: phishing email -> Measure: report and delete → A fake email at school pretends to be the principal and asks for a login. Report it and delete it instead of clicking the link.

A stolen password is not enough to break in when a second proof of identity is also needed. → Threat: stolen password -> Measure: MFA

A message sent over public Wi-Fi can be intercepted, but encryption turns it into unreadable ciphertext. → Threat: interception on public Wi-Fi -> Measure: encryption (HTTPS)

Scenario: phishing email at school. Fix: just reply and ask if it is real. → Replying to a suspected phishing email tells the attacker the address is active and may lead to more scams. Report and delete it instead.

Scenario: password stolen. Fix: encryption stops the attacker logging in. → Encryption protects data while it is sent or stored, but it does not stop a login with a stolen password. MFA and changing the password are the right measures.

Section C: Definitions

apply protections — Read a scenario, name the threat, explain how it works, then suggest measures like MFA or encryption and say why they reduce the harm.

Section D: Fill in the Blanks

scenario ← "Fake email asks for your login"
threat ← "phishing"

scenario ← "Password was stolen"
measure ← "MFA"
reason ← "Thief also needs a second factor"

scenario ← "Message sent on public Wi-Fi"
threat ← "interception"
measure ← "encryption"

measure ← "MFA"
reason ← "Password alone cannot log in"
OUTPUT measure, reason

scenario ← "Teacher email asks for login"
threat ← "phishing"
measure ← "report, delete, do not click"

Section E: Spot the Error

C — Locking files for cash describes ransomware. Phishing works by using a fake link to steal your login, so line 3 should be 'How: a link steals your login'.

C — Reusing a password makes the harm worse, because one theft opens many accounts. The fix is to turn on MFA so a stolen password alone is not enough.

D — Plaintext can be read by anyone who intercepts it. The fix is encryption, such as HTTPS or a VPN, so intercepted data is scrambled.

B — An email that tricks you into giving your login is phishing, not ransomware. Ransomware locks files and demands payment.

A — The scenario is a thief who knows the password and can log in as the user. That is account takeover, which MFA helps to stop, not ransomware.