Free practice tests ยท Kids & Youth

Stuff Every Cyber Scout Should Know: free practice in 30-second cards

Stuff Every Cyber Scout Should Know

Practice facts for the Cybersecurity merit badge. Not an official Scouting America credential.

Start Stuff Every Cyber Scout Should Know โšก Today's sprint ๐ŸŽ™๏ธ Voice mode

๐Ÿ”— Put this game on your site

Free. It plays the first 50 cards; players subscribe at Aha Trivia for the rest. Every embed code

๐Ÿ“– Read the study guide

Free to start, no sign-up. 70 cards so far. One Knowledge Score and day streak across all your courses.

Questions people ask

Is this practice test free?

Yes. The first 50 cards are free for everyone with no sign-up, each with the answer, why it is right and its sources. Aha Trivia members get all 70 cards and timed practice exams.

How many practice questions are there?

70 practice questions so far. Each one is a 3-choice card that takes about 30 seconds, and the course grows as new cards pass our source checks.

Where do the answers come from?

Every card lists the sources it was checked against, and each answer explains why it is right. If you think an answer is wrong, tap "Challenge this answer" in the game and it gets reviewed.

Can I study in the car?

Yes. Voice mode reads the questions out loud and you answer by voice.

Try 3 cards

  1. What is a vulnerability in computer security?
    Show the answer

    A flaw that compromises security. A vulnerability is a weakness in how a system is built or run that can be exploited.

  2. What is a threat in computer security?
    Show the answer

    An action or event that could harm data. A threat is something that could negatively affect hardware, software, or data.

  3. What is an exploit?
    Show the answer

    A working method to abuse a vulnerability. An exploit is a technique or tool that takes advantage of a specific vulnerability.

All 70 practice questions

The first 50 are free, with the answer, why it's right and the official sources. The other 20 (๐Ÿ”’) open with a membership (every test). Or play them as a game and track what you've learned.

Show all 70 questions
  1. What is a vulnerability in computer security?
  2. What is a threat in computer security?
  3. What is an exploit?
  4. What is the main job of antivirus software?
  5. What makes a password strong?
  6. What does multi-factor authentication add to a password?
  7. What is phishing?
  8. What is spoofing?
  9. What is a common sign of a phishing message?
  10. How does a worm differ from a virus?
  11. What does ransomware do?
  12. What is a keylogger?
  13. What is a Trojan horse program?
  14. What is a backdoor in a computer system?
  15. What is a denial-of-service attack?
  16. What is a man-in-the-middle attack?
  17. What is a risk of using public Wi-Fi?
  18. How can a VPN help on public Wi-Fi?
  19. What does HTTPS tell you about a website?
  20. What is encryption used for in cybersecurity?
  21. What is end-to-end encryption?
  22. What is a checksum used to check?
  23. What is a digital footprint?
  24. Why should you check privacy settings on apps and games?
  25. What is a good way to prevent eye strain from screens?
  26. What is a safe habit while walking with a phone?
  27. What is an ethical response to finding an unlocked computer?
  28. What should you do if you see someone's password written down?
  29. What is an attack surface?
  30. What is a useful home network security step?
  31. Why is backing up data important?
  32. What is a connected device in the Internet of Things?
  33. What is a risk of a connected smart lock?
  34. What is spear-phishing?
  35. What does the principle of least privilege mean?
  36. What is defense in depth?
  37. What is cyber hygiene?
  38. What is an intrusion detection system for?
  39. What is a vulnerability scanner used for?
  40. What does a firewall do for a network?
  41. Why should you install software updates promptly?
  42. What is a password manager used for?
  43. What is a computer virus?
  44. What is spyware designed to do?
  45. What is scareware designed to do?
  46. What is email spoofing?
  47. What is a direct-access attack?
  48. What is a botnet used for in a DDoS attack?
  49. What is privilege escalation?
  50. What is a side-channel attack?
  51. What is tampering in computer security? ๐Ÿ”’
  52. What is HTML smuggling? ๐Ÿ”’
  53. What is security by design? ๐Ÿ”’
  54. What is an audit trail used for? ๐Ÿ”’
  55. What is a Trusted Platform Module (TPM) used for? ๐Ÿ”’
  56. What is a drive lock used for? ๐Ÿ”’
  57. Why is disabling unused USB ports a security measure? ๐Ÿ”’
  58. What is a Physical Unclonable Function (PUF) used for? ๐Ÿ”’
  59. What is secure coding? ๐Ÿ”’
  60. What is an access control list (ACL)? ๐Ÿ”’
  61. What is role-based access control (RBAC)? ๐Ÿ”’
  62. What is a common mistake that makes users vulnerable? ๐Ÿ”’
  63. Why is user security training important? ๐Ÿ”’
  64. What is a financial system security risk? ๐Ÿ”’
  65. Why are utilities like power grids sensitive to cyberattacks? ๐Ÿ”’
  66. What is a cyber-kinetic attack? ๐Ÿ”’
  67. Why are medical devices a security concern? ๐Ÿ”’
  68. What is a SIM card used for in telecommunications? ๐Ÿ”’
  69. What is a biometric passport? ๐Ÿ”’
  70. What is a common sign of a fake website used in phishing? ๐Ÿ”’