Threat
Name:
Date:
Class:
A
Quick Questions
Shade in the A or B circle for each question.
1. Which best describes a threat in digital security?
2. Which one is a threat to a school's student records?
3. A hacker deliberately tries to steal a company's customer data. What type of threat is this?
4. A student accidentally deletes a shared class folder. What type of threat is this?
5. An unhappy employee copies private files before leaving the company. Which type of threat is this?
B
Match the Pairs
Draw a line connecting each item on the left to its match on the right.
| Left column | Right column | |
|---|---|---|
| 1threat | Athreat_type = "deliberate" | |
| 2threat_type = "accidental" | BA stranger hacking from overseas is an external threat, not an internal one. The label should be "external". | |
| 3A deliberate threat is caused on purpose, like a hacker trying to steal data | CA threat with no intent to cause harm, such as a student deleting a file by mistake | |
| 4An internal threat comes from inside the organisation, like a staff member who clicks a bad link | DAnything that could cause harm to an asset, such as an attacker, malware, human error or a power failure | |
| 5A threat must always be a hacker, so a power failure is not a threat | EA threat can be anything that could harm an asset, including malware, human error and power failures, not just attackers. | |
| 6threat_source = "internal" for a stranger hacking in from overseas | Fthreat_source = "internal" |
C
Definitions
threat
D
Fill in the Blanks
Complete each line of code by filling in the missing parts.
1.
asset ← "school laptop"
______ ← "malware"
2.
threat ← "phishing attack"
intent ← "__________"
3.
threat ← "spilled drink"
intent ← "__________"
4.
threat ← "hacker overseas"
source ← "________"
5.
threat ← "staff share password"
source ← "________"
E
Spot the Error
Shade in the letter of the line that contains an error.
Question 1
A
asset = "student records"
B
threat = "phishing email"
C
intent = "accidental"
D
source = "external"
Question 2
A
threat = "antivirus software"
B
intent = "accidental"
C
source = "external"
Question 3
A
threat = "staff typo"
B
source = "external"
C
intent = "accidental"
Question 4
A
threat = "hacker"
B
if threat = "hacker":
C
print("Deliberate threat")
Question 5
A
threats = ["malware", "typo"]
B
for t in threats
C
print(t)
Answer Key
Threat
Section A: Quick Questions
Q1
A — Anything that could cause harm to an asset
Q2
A — A power failure that corrupts the server
Q3
B — Deliberate threat
Q4
A — Accidental threat
Q5
B — Internal threat
Section B: Match the Pairs
Q1
threat → Anything that could cause harm to an asset, such as an attacker, malware, human error or a power failure
Q2
threat_type = "accidental" → A threat with no intent to cause harm, such as a student deleting a file by mistake
Q3
A deliberate threat is caused on purpose, like a hacker trying to steal data → threat_type = "deliberate"
Q4
An internal threat comes from inside the organisation, like a staff member who clicks a bad link → threat_source = "internal"
Q5
A threat must always be a hacker, so a power failure is not a threat → A threat can be anything that could harm an asset, including malware, human error and power failures, not just attackers.
Q6
threat_source = "internal" for a stranger hacking in from overseas → A stranger hacking from overseas is an external threat, not an internal one. The label should be "external".
Section C: Definitions
Q1
threat — Anything that could cause harm to an asset, such as an attacker, malware, human error or a power failure. Threats can be deliberate or accidental, and internal or external.Section D: Fill in the Blanks
Q1
asset ← "school laptop"
threat ← "malware"Q2
threat ← "phishing attack"
intent ← "deliberate"Q3
threat ← "spilled drink"
intent ← "accidental"Q4
threat ← "hacker overseas"
source ← "external"Q5
threat ← "staff share password"
source ← "internal"Section E: Spot the Error
Q1
C — A phishing email is sent on purpose by an attacker, so it is a deliberate threat. The line should be intent = "deliberate".
Q2
A — Antivirus software protects an asset, so it is a security control and not a threat. A threat is something that could cause harm, such as a power failure.
Q3
B — A typo made by a staff member comes from inside the organisation, so it is an internal threat. The line should be source = "internal".
Q4
B — A single = assigns a value. To compare values in a condition you need ==. The line should be if threat == "hacker":.
Q5
B — A for loop line must end with a colon. The line should be for t in threats:.