Stretch tasks Cyber security

Round 1: Quiz Blitz

1. Worm A worm copies itself from computer to computer. A virus needs someone to open or share an infected file.
2. A Trojan A Trojan pretends to be useful, so the user installs it willingly.
3. Ransomware Ransomware encrypts files and demands a ransom for the key.
4. A denial of service attack A DoS attack overwhelms a server so genuine users cannot get through.
5. False Encrypted data can still be intercepted. Encryption makes it useless, because it cannot be read without the key.
6. Regular backups kept separately; Keeping software updated Updates close the holes ransomware uses, and backups mean files can be restored without paying.
7. Checks traffic in and out of a network and blocks what breaks its rules A firewall controls what crosses the edge of a network. Scanning files is anti-malware's job.
8. New threats appear all the time, and it can only spot ones it knows about Anti-malware compares files with known threats. Without updates, the newest malware is invisible to it.
9. abc → abc123 → Abc123!? → purple-tractor-violin-cloud Every extra character multiplies the number of guesses needed. Length matters most.
10. Training staff to spot phishing The weakest point is a person. Training is a real security measure.
11. True If one account is compromised, the damage is limited to what that account could reach.
12. spyware Spyware secretly records activity; a keylogger is the kind that records keystrokes.

Round 2: Quick Fire

1. • A virus attaches to a file and spreads when the file is opened or shared
   • A worm spreads by itself across a network, with no user action
   Model answer

   A virus attaches itself to a file and only spreads when a user opens or shares that file. A worm spreads across a network by itself, with no user action needed.

2. • Intercepted encrypted data cannot be read or understood
   • Because it can only be decrypted with the key
   Model answer

   Anyone who intercepts encrypted data just sees meaningless scrambled data, because it cannot be decrypted without the key.

3. • Long, strong passwords
   • Locking the account or slowing down after several wrong attempts
   • Two factor authentication
   Model answer

   Long, strong passwords take far too long to guess, and locking the account after a few failed attempts stops the attack from trying millions of combinations.

4. • People are the weakest point: many attacks, such as phishing, target them
   • Trained staff can recognise and report attacks
   Model answer

   People are the weakest point in any system, and many attacks, such as phishing, are designed to trick them rather than break the technology. Trained staff can recognise these attacks, avoid them and report them.

Round 3: Big Think

1. • The ransomware encrypts or locks the school's files
   • It demands payment for the key to unlock them
   • The school can restore its files from backups
   • Updates, anti-malware and staff training help prevent it
   • Paying is no guarantee the files come back
   Model answer

   Ransomware encrypts the school's files so they cannot be opened, then demands payment, often in cryptocurrency, for the key to unlock them. Paying is no guarantee the files will come back, so the school should restore them from backups kept separately from the network. To protect itself in future it should keep all software updated, run up-to-date anti-malware, and train staff not to open unexpected email attachments.

2. • A firewall blocks unauthorised traffic entering or leaving the network
   • It cannot stop people being tricked, for example by phishing
   • It cannot stop malware that arrives by email or USB stick
   • Anti-malware software is needed as well
   • Backups are needed to recover from ransomware or failure
   • Strong passwords and two factor authentication protect accounts
   • Software updates close security holes
   • Encryption and user access levels limit what can be stolen
   • A conclusion: several layers of defence are needed
   Model answer

   A firewall is important, because it checks traffic entering and leaving the network and blocks unauthorised connections from hackers. However, it is not enough on its own. It cannot stop staff being tricked by phishing into typing their passwords into a fake page, and it does not stop malware that arrives in an email attachment or on a USB stick, so anti-malware software is needed too. Strong passwords and two factor authentication protect accounts, software updates close the security holes malware uses, and encryption and user access levels limit what an attacker could steal. Backups are essential to recover from ransomware. Overall, the claim is wrong: a company needs a combination of layers of defence, of which the firewall is just one.

This or That

1. Virus A virus needs a file to be opened or shared. A worm spreads across a network by itself.
2. A brute force attack Brute force tries combination after combination. A DoS attack floods a server with requests.
3. A long, unguessable password A long password has so many combinations that brute force takes far too long. Backups help recovery, not prevention.
4. They close holes that malware exploits Malware gets in through security holes in old software, and updates close them.
5. People are often the weakest point No firewall can stop someone typing their password into a convincing fake page. Training can.
6. Two factor authentication With two factor authentication the thief also needs the second factor, such as a code sent to your phone.
7. User access levels Access levels give each person only what their role needs.
8. The key Without the key, encrypted data is meaningless, which is why intercepting it is useless.

Memory Match

• A 5 Virus: Spreads when an infected file is opened
• B 3 Worm: Spreads across a network by itself
• C 2 Trojan: Pretends to be useful so you install it
• D 6 Ransomware: Locks your files and demands payment
• E 1 Firewall: Blocks traffic that breaks its rules
• F 4 Encryption: Makes intercepted data unreadable