• Classify the data that must never be published and explain why each item is dangerous in the wrong hands.
• Match each attack type with its technique and with its correct prevention.
• Configure a secure account password policy, MFA, automatic updates, firewall.
• Act as a responsible digital citizen privacy of others, truthfulness, polite discourse and respect of copyright.

• Update software and operating systems regularly each update closes newly discovered security holes — these are the security patches.
• Antivirus use an original, updated product rather than a cracked one; a cracked scanner may itself carry malware.
• Firewall keep it enabled so incoming and outgoing traffic is filtered by rule.
• Download applications only from official stores and verify the publisher; do not install unknown browser extensions.
• On public Wi-Fi avoid banking, use HTTPS sites, and turn off auto-connect and file sharing.
• Back up important data on an independent medium so a ransomware attack does not become fatal.

💡 High-yield traps

• Malware is the general term; virus, spyware and ransomware are its types — answering “virus” when the question asks the umbrella term loses the mark.
• Phishing targets credentials; ransomware targets files. Keep the two purposes separate.
• A keylogger belongs to spyware, not to a virus.
• The golden rule the exam expects no bank or official institution ever asks for your password or your OTP/CVV.
• MFA means factors of different categories, not two passwords.
• A password of 8 characters must also mix cases, digits and symbols; length alone is not “strong”.
• Updates matter because they are security patches, not only new features.
• An intranet being “private” does not make it immune — internal policy and access control still apply.
• Plagiarism includes un-cited AI-generated text, not only copied human writing.
• Digital citizenship = rights and responsibilities in balance; naming only one side is an incomplete answer.