Quizzes Technology 12 questions ~6 mins

Cybersecurity Awareness Quiz

Q: What is a phishing attack?

A fraudulent attempt to steal sensitive information by impersonating a trusted source — Phishing involves criminals posing as legitimate organisations — such as banks or HMRC — via email or fake websites to trick victims into handing over passwords or financial details.

Q: Which UK government agency should you report a phishing email to?

The National Cyber Security Centre (NCSC) via report@phishing.gov.uk — The NCSC runs the Suspicious Email Reporting Service (SERS); forwarding suspicious emails to report@phishing.gov.uk has resulted in hundreds of thousands of malicious sites being taken down.

Q: What does a VPN primarily do?

Encrypts your internet traffic and masks your IP address — A Virtual Private Network routes your traffic through an encrypted tunnel, hiding your IP address and making it much harder for third parties to intercept or monitor your online activity.

Q: Which of the following is the strongest password?

xQ7#mK2@pL9$wR4! — A long, random mix of uppercase, lowercase, numbers, and special characters is computationally the hardest to crack, even though a long memorable passphrase can also be strong in practice.

Q: What is two-factor authentication (2FA)?

A security layer requiring a second proof of identity beyond just a password — 2FA significantly reduces the risk of account compromise because an attacker needs both your password and your second factor — such as a one-time code sent to your phone — to gain access.

Q: Under UK law, which regulation governs how organisations must protect your personal data?

The UK General Data Protection Regulation (UK GDPR) — The UK GDPR (retained post-Brexit) obliges organisations to handle personal data lawfully, securely, and transparently, with the ICO acting as the supervisory authority.

Q: What is ransomware?

Malware that encrypts a victim's files and demands payment for the decryption key — Ransomware encrypts files on the victim's device or network, then the attacker demands a ransom — often in cryptocurrency — before providing the key to restore access.

Q: What does HTTPS in a web address indicate?

The connection between your browser and the site is encrypted — HTTPS uses TLS encryption to protect data in transit between your browser and the web server, preventing eavesdropping — though it does not guarantee the site itself is trustworthy.

Q: Which of the following is NOT a sign of a phishing email?

A personalised greeting using your full name and correct account details — Phishing emails typically use generic greetings, urgency, misspelt domains, and grammatical errors; a correctly personalised greeting with accurate account details is more consistent with a legitimate message.

Q: What is a 'brute force' attack?

Systematically trying every possible password combination until the correct one is found — Brute force attacks use automated tools to try millions of password combinations per second, which is why long, complex passwords and account lockout policies are essential defences.

Phishing, VPNs, password strength — could you spot a threat?

Speed-run mode

Question 1 of 12

1. What is a phishing attack?

2. Which UK government agency should you report a phishing email to?

3. What does a VPN primarily do?

4. Which of the following is the strongest password?

5. What is two-factor authentication (2FA)?

6. Under UK law, which regulation governs how organisations must protect your personal data?

7. What is ransomware?

8. What does HTTPS in a web address indicate?

9. Which of the following is NOT a sign of a phishing email?

10. What is a 'brute force' attack?

11. What does the term 'zero-day vulnerability' mean?

12. Which practice best protects you when using public Wi-Fi in a UK coffee shop?

Games you might like

Brain · 2 plays

My First 100 Words

Brain · 2 plays

Save The Planet

Match 3 · 36 plays

Prism Match 3D

2048 · 5 plays

Merge Royal

Battle · 5 plays

War the Knights

Simulation · 4 plays

Bus Driver Simulator 3D

Quiz comments (8)

How did you do? Compare scores and swap tips — no spoilers, please.

Marcy L 14 Jul 2026 Report

I’m curious about the difficulty curve here. What percentage of people actually get a perfect score on these? I'd bet it's under 5% for a comprehensive timeline like this. Where can I find the benchmark data for the average result?

Coach Reyes 13 Jul 2026 Report

Game on. Most people talk a big game about security until they actually hit the field. I’m treating this like a preseason scrimmage—time to see who’s actually putting in the work and who's just playing defense with a prayer. Let's see those scores.

Devon M. 13 Jul 2026 Report

Challenge accepted! I’ve been brushing up on my Tudors and Stuarts just for this. Let's see if I can get a perfect score—I'm aiming for the top of the leaderboard! Who's with me?

Libby G 13 Jul 2026 Report

I’m always terrified I’ll accidentally click something wrong and compromise my family's data. These quizzes are helpful, but it really makes you realize how sophisticated these scams have become. Does the guide include tips on what to do immediately if you think you've already been phished?

BudgetMum 12 Jul 2026 Report

I’ll be honest, my "secure" passwords are mostly just my kids' names and birth years. This is a wake-up call! With all our banking online now, I really need to make sure I'm not making it too easy for scammers. Off to take the quiz before I do something risky!

Ted W 12 Jul 2026 Report

I’ll be honest, I usually think I'm doing alright until I actually take one of these quizzes. It’s a good reminder that those scammers get craftier every year. My grandkids always tell me I'm too trusting with my email, so I reckon it's time I see where I actually stand. Thanks for putting this together.

bea_studies 12 Jul 2026 Report

I honestly thought I was pretty good at spotting phishing attempts, but these quizzes always remind me how sophisticated the scams have become. Do you think MFA is enough of a safety net now, or should we be moving toward completely passwordless systems?

Sofia from Daily Junction Host 12 Jul 2026 Report

I’m usually the one who clicks every "urgent" email because I panic, so I probably need this more than anyone! Does it actually give tips on how to fix your habits after, or just tell you that you failed? Wish me luck!