Privacy Poll Warm-Up

Teacher Instructions: Launch a live poll (e.g., Poll Everywhere, Mentimeter) or ask for a show of hands. Record student responses to spark discussion around what information we commonly share online.

Prompt: Which of these personal details have you shared online?

A) Full name
B) Location
C) Birthday
D) All of the above

Discussion Questions:
• Were you surprised by any responses?
• Why might it be risky to share certain details?
• How could you limit what you share in the future?

Quiz Insights

Below are the correct answers for the Are You Cyber-Savvy? Quiz, along with step-by-step explanations to guide classroom discussion.

Question 1: When creating a password, which practice is the most secure?

Correct Answer: B) A random combination of letters, numbers & symbols

Step-by-step reasoning:

1. Using your birthdate – Easily found or guessed by anyone who knows you or checks your social media.
2. “Password” with numbers – A common pattern that’s vulnerable to dictionary attacks.
3. Your pet’s name – Often public or shared, making it guessable.
4. Random combo – Unpredictable, long, and uses mixed character types, maximizing entropy and resisting cracking.

Question 2: What is two-factor authentication (2FA)?

Correct Answer: C) A second verification step (e.g., code)

Step-by-step reasoning:

1. Using two passwords – Not standard and doesn’t significantly increase security if similar.
2. Backup email – A way to recover access, not a true authentication factor.
3. Logging in twice – Repeating login adds no new factor.
4. Second verification step – Combines something you know (password) with something you have (SMS code, authenticator app, hardware token).

Discussion Prompt: What examples of 2FA have you encountered? (e.g., text code, authenticator app, fingerprint.)

Question 3: What’s the safest way to connect to public Wi-Fi?

Correct Answer: B) Use a VPN

Step-by-step reasoning:

1. Public Wi-Fi is often unencrypted—data sent over it can be intercepted.
2. No protection – Leaves you fully exposed.
3. Share files openly – Invites malware and data leaks.
4. Only HTTP sites – HTTP is unencrypted; HTTPS can still be vulnerable if the network is compromised.
5. VPN – Encrypts all your traffic, making it unreadable to others on the same network.

Question 4: If you receive an unexpected link via email, you should:

Correct Answer: B) Delete it

Step-by-step reasoning:

1. Phishing emails often contain malicious links leading to credential-stealing pages or malware installs.
2. Click it immediately – Risks infection or credential theft.
3. Reply asking for more info – Confirms your address is active and invites more phishing.
4. Forward to friends – Spreads the threat.
5. Delete (and report) – Safest way to remove the risk and notify your IT or teacher.

Question 5: Which is a sign of a phishing attempt?

Correct Answer: A) Generic greeting

Step-by-step reasoning:

1. Correct spelling – Phishers often improve spelling to avoid detection.
2. Personalized info – Can be used to build trust.
3. Secure URL – Even HTTPS sites can be faked with look-alike domains.
4. Generic greeting – (“Dear Customer,” “Hello User”) shows the sender doesn’t know you personally.

Discussion Prompt: What other red flags have you seen? (Urgent language, mismatched sender address, unexpected attachments.)

Use these explanations to spark deeper conversation about real-world examples and reinforce why each correct practice is vital for staying safe online.