Layers of protection

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which statement about layered protection is true?

A Using several protections together means one failure does not expose the account

B One really strong password is all you need to keep an account safe

2. A hacker steals Mia's password, but her account also uses MFA. What happens?

A The hacker gets in because the password is all that matters

B The login is blocked because the hacker does not have her second factor

3. Someone intercepts Noah's data on public Wi-Fi, but the data is encrypted. What do they see?

A Scrambled ciphertext that is useless without the key

B His messages in plain, readable text

4. Which set shows layers of protection working together?

A Strong passphrase, MFA, software updates and encryption

B The same password reused on four different accounts

5. True or false: if you use MFA, you no longer need a strong passphrase.

A True: MFA does everything by itself

B False: no single measure is enough, so you keep both layers

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1layered security		AThis relies on one measure only. A strong password can still be stolen or leaked in a data breach, so one layer is not enough.
2passphrase + MFA + updates + encryption		BUsing several protections together so that if one fails, the others still protect your account and data
3The password is stolen, but the attacker is still blocked from logging in because a second layer is in place		Cpassword = stolen; MFA = on; login = blocked
4Data is intercepted on a network, but the attacker cannot read it because another layer protects it		DA set of layers where each protection covers a different weakness
5if (strong_password) { account = safe_forever }		Eintercepted = yes; encryption = on; readable = no
6layers = [password, password, password]		FRepeating the same protection is not layering. If the password is stolen, all three copies fail together.

Definitions

layered security

Fill in the Blanks

Complete each line of code by filling in the missing parts.

IF passwordStolen ___ mfaOn THEN login ← "blocked"

layers ← ["passphrase", "MFA", "updates"] IF ______(layers) > 1 THEN safer ← TRUE

IF dataIntercepted AND encrypted THEN attackerReads ← _____

IF passphraseCracked THEN __ mfaOn THEN login ← "blocked"

layers ← ["passphrase", "MFA", "updates"] ______(layers, "encryption")

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A layers ← []

B ADD 'passphrase' TO layers

C ADD 'MFA' TO layers

D ADD 'encryption' TO layer

E DISPLAY LENGTH(layers)

Question 2

A intercepted → TRUE

B hasKey ← FALSE

C IF intercepted AND hasKey THEN

D DISPLAY 'Message readable'

E ELSE DISPLAY 'Only scrambled'

Question 3

A passwordOk ← TRUE

B codeOk ← FALSE

C IF passwordOk OR codeOk THEN

D DISPLAY 'Access granted'

E ELSE DISPLAY 'Login blocked'

Question 4

A FOR EACH app IN apps

B IF app.version < latest THEN

C DELETE app

D END IF

E END FOR

Question 5

A passphrase ← INPUT()

B words ← WORDS(passphrase)

C IF words <= 4 THEN

D DISPLAY 'Strong layer'

E ELSE DISPLAY 'Add more words'

Answer Key

Layers of protection

Section A: Quick Questions

A — Using several protections together means one failure does not expose the account

B — The login is blocked because the hacker does not have her second factor

A — Scrambled ciphertext that is useless without the key

A — Strong passphrase, MFA, software updates and encryption

B — False: no single measure is enough, so you keep both layers

Section B: Match the Pairs

layered security → Using several protections together so that if one fails, the others still protect your account and data

passphrase + MFA + updates + encryption → A set of layers where each protection covers a different weakness

The password is stolen, but the attacker is still blocked from logging in because a second layer is in place → password = stolen; MFA = on; login = blocked

Data is intercepted on a network, but the attacker cannot read it because another layer protects it → intercepted = yes; encryption = on; readable = no

if (strong_password) { account = safe_forever } → This relies on one measure only. A strong password can still be stolen or leaked in a data breach, so one layer is not enough.

layers = [password, password, password] → Repeating the same protection is not layering. If the password is stolen, all three copies fail together.

Section C: Definitions

layered security — Using several protections together, such as a strong passphrase, MFA, updates and encryption, so if one fails the others still keep your account and data safe.

Section D: Fill in the Blanks

IF passwordStolen AND mfaOn THEN
    login ← "blocked"

layers ← ["passphrase", "MFA", "updates"]
IF LENGTH(layers) > 1 THEN
    safer ← TRUE

IF dataIntercepted AND encrypted THEN
    attackerReads ← FALSE

IF passphraseCracked THEN
    IF mfaOn THEN login ← "blocked"

layers ← ["passphrase", "MFA", "updates"]
APPEND(layers, "encryption")

Section E: Spot the Error

D — The list is called layers, not layer. The line must be ADD 'encryption' TO layers so the third protection joins the same list as the others.

A — Assignment uses the left arrow ←, not →. The line should be intercepted ← TRUE. The data is intercepted, but without the key it stays scrambled.

C — OR lets a thief in with only the stolen password. It must be AND so both layers (password and MFA code) are needed and the login is blocked.

C — An out-of-date app should be updated to fix its security holes, not deleted. The line should be UPDATE app.

C — The check uses the wrong operator. A strong passphrase has at least 4 words, so it should be IF words >= 4 THEN.