This document appears to be a trivia game about cybersecurity topics. It includes questions about online safety, types of cyber attacks, device security, and cyber history. The questions cover a range of difficulties from 100 to 500 points. After each question, the correct answer is provided along with a prompt to return to the game board. The game covers important cybersecurity concepts and aims to educate players about online risks, best practices, and historical milestones through its trivia format.

1. Trivia Game

2. 2
Final Round
500
400
300
200
100
Cyber Stats
500
400
300
200
100
Cyber History
500
400
300
200
100
Types of
Cyber Attacks
500
400
300
200
100
Device Security
500
400
300
200
100
#BeCyberSmart:
Online Safety
National Cybersecurity Awareness Month
Trivia Game

3. 3
Back to game boardAfter each answer appears, please return to Game Board.
Answer: No. Once an image (or any information) is posted on the internet, it
is virtually impossible to remove it from circulation. Taking it off of your social
media page will help, but there is no guarantee that others have not already
seen it and/or downloaded it to their own machines.
You post a picture of you and your best friend to your favorite social
media platform. She doesn’t feel comfortable with the image, so you
agree to take it down. Will this ensure that no one else sees the picture?
#BeCyberSmart: Online Safety - 100

4. 4
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Do NOT click the link! Check the sender’s address and search the
document for spelling/grammar mistakes. If you notice anything suspicious, the
email is likely a scam. Even if it seems legitimate, navigate to the site yourself rather
than clicking any links.
You receive an email from an online shopping site claiming that you were
incorrectly charged for your last purchase and are due a refund. The email
asks you to click a link where you will submit the necessary information.
What should you do?
#BeCyberSmart: Online Safety - 200

5. 5
Back to game boardAfter each answer appears, please return to Game Board.
Answer: It depends. In general, it is never safe to transmit PII (Personally Identifiable Information),
especially financial information, over a public network. If you find yourself in a situation where
you may need to do so, first consider all your options, including using your mobile data or a VPN
(Virtual Private Network) to help protect your browsing.
You’ve just settled into your new hotel room when you realize you need to
transfer some funds from your savings account to your checking account.
In order to do this, you will need to connect your laptop to the hotel’s
public Wi-Fi and log in to your online bank. Should you risk it?
#BeCyberSmart: Online Safety - 300

6. 6
Back to game boardAfter each answer appears, please return to Game Board.
Answer(s):
• Turn off Wi-Fi and Bluetooth when not using them. These technologies leave you open to remote attacks.
• Make sure the network is legitimate. Hackers love to create fake networks that mimic real ones, enticing
unsuspecting users to log on.
• Don’t connect. Though perhaps drastic, one near-certain way to circumvent the dangers of public Wi-Fi is
simply to avoid using it whenever possible.
You have a long commute. Thankfully, your train just installed public Wi-Fi. Now you can
listen to your favorite music or podcast. However, when you check for social media
updates around lunch, you find that your account has been hacked. What steps could you
take to prevent your mobile device or laptop data from being compromised in the future?
#BeCyberSmart: Online Safety - 400

7. 7
Back to game boardAfter each answer appears, please return to Game Board.
Answer(s):
• Use a password manager. These are apps, devices, or cloud services that store your
passwords in an encrypted vault that can only be unlocked with a single master
password.
• Use a “password pattern.” This is simply a pattern (recognizable only to you) that you
can use to help remember your passwords.
Passwords often have complex requirements, and most online citizens will
need to remember numerous different passwords to access their internet
services. What is a way to help you keep track of all these different passwords?
#BeCyberSmart: Online Safety - 500

8. 8
After each answer appears, please return to Game Board. Back to game board
Answer: 1 & 3. While it is helpful for passwords to have some level of personal relevance, anything
concrete or publicly-available (high schools, birthdates, pets’ names, etc.) can be easily researched and
guessed by an attacker. Storing your passwords physically or in a text-document is also ill-advised, as
someone could gain access to the copy.
Which of the following are strong password practices? (Choose all that apply.)
1. Passwords should contain a mixture of upper and lower case letters, numbers, and special characters.
2. Passwords should have personal meaning to you (e.g. a relative’s birthday) so that you can remember
them more easily.
3. You should immediately change your password in the case of a known data breach.
4. You should store your passwords on paper or in a text document, giving you a backup in the event that
you forget them.
Device Security - 100

9. 9
Back to game boardAfter each answer appears, please return to Game Board.
Answer: False. Although updates can occasionally cause problems, they also contain
vital patches to help protect your machine against attackers. Keep your machine up-
to-date and install new patches as soon as possible. Don’t click, “Remind me later,”
twelve times.
True or false: Automatically updating your machine poses a significant
security concern, as it could install unwanted programs/features that
disrupt your network or harm your computer.
Device Security - 200

10. 10
Back to game boardAfter each answer appears, please return to Game Board.
Answer: False. Almost all consumer devices, especially cell phones and tablets,
are simply miniature computers. They contain important data (contacts,
financial information, calendars) and require protection like any other device.
True or false: Although they operate similarly to computers, most
mobile devices (cell phones, tablets, etc.) are not full computers
and do not require software, such as anti-virus, to be secure.
Device Security - 300

11. 11
Back to game boardAfter each answer appears, please return to Game Board.
Answer: All of them. Yes, even the toaster – possibly.
• Tablet
• Security camera
• Pacemaker
• Baby monitor
• GPS
• Toaster
• Thermostat
Which of the following devices could potentially be exploited by an attacker?
• Desktop computer
• Laptop computer
• Cell phone
• Television
• Refrigerator
• Digital assistant
• Remote-controlled keys
Device Security - 400

12. 12
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Multi-Factor Authentication (MFA). MFA greatly increases the
security of access control. Even if a password is learned or an ID is stolen, it
will not be enough to compromise a system. Many online services allow MFA
options, such as requiring a one-time login code as well as a password.
What is the method of access control by which users must
present multiple, separate pieces of identification, such as a
password and keycard, in order to access a system?
Device Security - 500

13. 13
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Phishing – a type of social engineering that often
manipulates human impulses, such as greed, fear, or the
desire to help others.
A scammer creates a fake email and sends it to thousands of
people, hoping some of them will click on a link and give up
their personal information. What is this type of attack called?
Types of Cyber Attacks - 100

14. 14
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Malware. This stands for “malicious software,”
and refers to a large variety of software-based attacks.
What is the term for harmful software that seeks
to damage or exploit the machines that run it?
Types of Cyber Attacks - 200

15. 15
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Spoofing. This kind of attack can come in many forms (email, GPS, caller
ID), but is most commonly known with regards to fake and malicious wireless
networks. Before logging onto a public network, be sure it is the correct one.
An attacker goes to a local coffee shop and creates a wireless network
using the shop’s name, hoping unsuspecting customers will log on.
What is this type of attack called?
Types of Cyber Attacks - 300

16. 16
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Shoulder surfing. It is important to remember that not all cyber attacks
require the direct manipulation of technology. Attackers can often obtain
important information by simply observing people, asking questions, or piecing
together dissociated facts to learn or guess something private.
You bring your laptop to a local restaurant. Without your knowledge,
the customer at the table behind you watches you log in to your
email, thereby learning your username and password. What is this
type of attack called?
Types of Cyber Attacks - 400

17. 17
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Ransomware. This type of attack has grown more common in recent
years, especially against institutions that need to recover their data as soon as
possible, such as medical facilities.
After clicking an advertisement on an unsecure website, your computer
freezes. A message appears, demanding you pay a certain amount of
money to unlock your computer. What is this type of attack called?
Types of Cyber Attacks - 500

18. 18
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Bill Gates.
This entrepreneur is widely-known for his contributions to
the personal computer industry. He founded the Microsoft
Corporation in 1975, with his business partner Paul Allen.
Cyber History - 100

19. 19
Back to game boardAfter each answer appears, please return to Game Board.
Answer: The Department of Homeland Security. Specifically, the Cybersecurity
and Infrastructure Security Agency (CISA), which is responsible for protecting
the Nation’s critical infrastructure from physical and cyber threats.
Which United States federal agency has been tasked with
improving national cybersecurity and protecting the nation’s
critical infrastructure?
Cyber History - 200

20. 20
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Alan Turing. Turing helped the Allies by cracking intercepted messages
from the German forces, gleaning information that was crucial to an Allied victory.
He also created the “Turing test,” which examines a machine’s ability to display
human behavior à la artificial intelligence.
This English cryptanalyst is famous for deciphering encoded messages during
World War II and creating standards for artificial intelligence. He is considered by
many to be the father of theoretical computing. (Hint: There was a 2014 movie
based on his biography.)
Cyber History - 300

21. 21
Back to game boardAfter each answer appears, please return to Game Board.
Answer(s): Ada Lovelace worked alongside Charles Babbage in
the 1840s to publish the first computer-based algorithm.
This English writer and mathematician is known for her work
on the Analytical Engine and is considered to be one of the
first computer programmers.
Cyber History - 400

22. 22
Back to game boardAfter each answer appears, please return to Game Board.
Answer: WannaCry. This ransomware attack propagated through an exploit called
EternalBlue, which took advantage of older Windows systems. Targeted machines
had their data involuntarily encrypted, with a demand of Bitcoin payment for the
release thereof.
In May 2017, this worldwide cyber attack used ransomware to exploit
approximately 400,000 unpatched machines, resulting in damages
totaling to over $4,000,000,000 (4 billion USD).
Cyber History - 500

23. 23
Back to game boardAfter each answer appears, please return to Game Board.
Answer: Over 10 million.
Approximately how many attempted cyber attacks are
reported to the Pentagon every day? (Closest answer wins.)
Cyber Stats- 100

24. 24
Back to game boardAfter each answer appears, please return to Game Board.
Answer: 310,000.
How many unfilled cybersecurity jobs are there in the United States
alone? (Closest answer wins.)
Cyber Stats- 200

25. 25
Back to game boardAfter each answer appears, please return to Game Board.
Answer: 1.8 Million.
Globally, how many unfilled cybersecurity positions are
there estimated to be by 2022? (Closest answer wins.)
Cyber Stats- 300

26. 26
Back to game boardAfter each answer appears, please return to Game Board.
Answer: $1.6 Million USD.
What is the estimated cost of a successful phishing attack on a
single small or medium-sized business? (Closest answer wins.)
Cyber Stats- 400

27. 27
Back to game boardAfter each answer appears, please return to Game Board.
Answer: $2 Trillion USD.
What is the estimated global cost of cybercrime by the
end of 2019? (Closest answer wins).
Cyber Stats- 500

28. 28
Back to game board
Answer: Connect with confidence!
(This is called a Caesar cipher; since the key is 13, each letter
is replaced with the letter 13 places down the alphabet.)
Solve this cryptogram:
Bonus Trivia

29. Visit https://niccs.us-cert.gov/national-cybersecurity-awareness-
month-2019 to download the NCSAM 2019 toolkit
Thanks for playing!