AP Computer Science Principles Quiz: Safe Computing

What this quiz covers

This quiz focuses on Safe Computing, giving you a quick way to practice the rules, question types, and explanations that matter most for AP Computer Science Principles.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

Question 1

1. Knowledge and inherence
2. Possession and knowledge
3. Inherence and possession
4. Possession and inherence (correct answer)

Explanation: A keycard is an example of 'something you have,' which is the possession factor. A palm scan is an example of 'something you are,' which is the inherence factor. Therefore, the two factors are possession and inherence, respectively.

Question 2

1. A phishing attack (correct answer)
2. A keylogging attack
3. A rogue access point attack
4. A computer virus infection

Explanation: This is a classic example of a phishing attack, which uses deceptive emails and websites to trick users into providing sensitive personal information. Keylogging, rogue access points, and viruses are different types of security threats that do not match the described scenario.

Question 3

1. The data sets could be stored inefficiently, taking up a large amount of digital space.
2. The aggregation of this information can create a detailed personal profile, revealing sensitive patterns about the user's life. (correct answer)
3. The user will receive less relevant advertisements, as the combined data will be too confusing for algorithms to process.
4. The user's device will perform more slowly due to the increased amount of data being tracked.

Explanation: The aggregation of seemingly unrelated data can create a comprehensive profile of an individual's habits, preferences, and daily routines. This knowledge can be exploited in ways the user never intended, posing a significant privacy risk.

Question 4

1. The sender's email account could have been compromised, and the attachment may contain malware. (correct answer)
2. The file could be in a format that the user's computer is unable to open.
3. The file could use a large amount of Internet bandwidth to download.
4. The file's contents might violate the sender's company policy on email usage.

Explanation: Email accounts can be compromised and used to send malware to contacts. Therefore, an unexpected attachment, even from a known sender, poses a significant risk of containing a virus or other malicious software.

Question 5

1. The websites' use of cookies and other trackers to record browsing history. (correct answer)
2. The user's Internet Service Provider slowing down access to certain sites.
3. A computer virus that randomly generates advertisements based on keywords.
4. A government program that requires all websites to show the same ads to users.

Explanation: Targeted advertising relies on tracking technologies like cookies that websites place on a user's browser. These trackers record the user's activity, which is then used to create a profile for delivering specific, relevant ads. This data collection is a key aspect of online privacy.

Question 6

1. It is a common word or phrase that is easy for the user to remember.
2. It is directly related to the user's personal information, such as their birthdate.
3. It is a long sequence of varied characters, including letters, numbers, and symbols. (correct answer)
4. It is the same password used for multiple online accounts for convenience.

Explanation: A strong password is difficult for others to guess and for computers to crack. This is best achieved by using a long password with a mix of character types. The other options describe practices that lead to weak, easily compromised passwords.

Question 7

1. Social media platforms are required by law to make all deleted content publicly available for 30 days.
2. Deleting a post from one's own view does not always immediately remove it from the platform's servers or from the devices of others who may have saved it. (correct answer)
3. The photograph is automatically converted into a public domain image as soon as it is uploaded, making it impossible to delete.
4. Most social media platforms do not actually have a delete function; they only allow users to archive content.

Explanation: Once information is placed online, it can be difficult or impossible to remove completely. Data may persist on servers, in backups, or be copied and shared by other users before the original is deleted. The other options are factually incorrect.

Question 8

1. A computer virus is the only type of malware that can steal financial information.
2. A computer virus is designed to attach to legitimate programs and replicate itself, while malware is a general term for any malicious software. (correct answer)
3. A computer virus can only be spread through physical media like USB drives, unlike other malware.
4. A computer virus is designed to be annoying but harmless, whereas other malware always causes system damage.

Explanation: A computer virus is a specific type of malware characterized by its ability to replicate and attach itself to other files or programs. Malware is the overarching term that includes viruses, spyware, ransomware, and other malicious software.

Question 9

1. It adds a second verification step, reducing harm when a password is guessed or stolen. (correct answer)
2. It encrypts every file automatically, so passwords become unnecessary for accessing patient records.
3. It prevents device theft by locking office doors, which stops outsiders from entering buildings.
4. It works only when users reuse passwords, because repetition helps systems recognize legitimate logins.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing encompasses authentication methods like two-factor authentication, which adds an extra layer of security beyond passwords. The passage provides the example of requiring 'a password plus a second check, such as a code' to illustrate how two-factor authentication works in protecting patient data. Choice A is correct because it accurately describes how two-factor authentication adds a second verification step, reducing harm when a password is guessed or stolen, which directly addresses the vulnerability exploited in the breach where attackers guessed a simple, reused password. Choice B is incorrect because it confuses two-factor authentication with encryption - authentication controls access while encryption scrambles data, and the passage clearly distinguishes these as separate security measures. To help students: Focus on understanding different security layers and their specific purposes. Encourage students to identify how each security measure addresses different vulnerabilities. Practice distinguishing between authentication (verifying identity) and encryption (protecting data). Watch for: confusing different security technologies, misunderstanding how security measures complement rather than replace each other, overlooking the specific vulnerability each measure addresses.

Question 10

1. It helps users resist pressure tactics, reducing the chance they disclose passwords or codes. (correct answer)
2. It eliminates the need for device updates because manipulation cannot affect software security.
3. It guarantees privacy by stopping websites from collecting any information about visitors.
4. It works only for companies with security teams, not for individuals at home.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing encompasses recognizing social engineering tactics, which the passage defines as manipulation that pressures quick decisions, a critical skill for protecting against human-targeted attacks. The passage emphasizes how social engineering relates to security concerns like phishing calls that request verification codes, showing how attackers exploit human psychology rather than technical vulnerabilities. Choice A is correct because it accurately captures the role of recognizing social engineering in enhancing cybersecurity by helping users resist pressure tactics, thereby reducing the chance they disclose passwords or codes - directly addressing the manipulation tactics described in the passage. Choice B is incorrect because it claims recognizing social engineering eliminates the need for device updates, misunderstanding that social and technical security measures serve different purposes, a common error when students compartmentalize security concepts. To help students: Focus on understanding how attackers exploit human psychology. Encourage analyzing pressure tactics and urgency in suspicious communications. Practice recognizing manipulation techniques across different contexts. Watch for: assuming technical measures alone provide complete security, misunderstanding the human element in security, underestimating social engineering risks.

Question 11

1. It slows repeated login attempts, making password guessing harder and reducing account takeover risk. (correct answer)
2. It encrypts patron reading histories, so staff no longer need passwords to access the portal.
3. It increases guessing speed, because faster logins help legitimate users remember weak passwords.
4. It replaces refunds after breaches, because technical controls remove legal duties to notify patrons.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing includes defensive measures like rate limiting, which the passage defines as 'the system slows repeated login attempts to deter guessing.' The passage shows how attackers exploited weak passwords through repeated guessing, demonstrating why rate limiting is an important defense against brute force attacks. Choice A is correct because it accurately describes how rate limiting slows repeated login attempts, making password guessing harder and reducing account takeover risk, which directly addresses the attack method used in the breach where 'attackers repeatedly guess weak patron passwords.' Choice C is incorrect because it claims rate limiting increases guessing speed to help users, which is the opposite of its actual purpose and would make systems more vulnerable to the exact attack described in the passage. To help students: Focus on understanding how technical controls defend against specific attack methods. Encourage analyzing the relationship between attack techniques and defensive measures. Practice identifying how security measures balance usability with protection. Watch for: misunderstanding security measures as helping attackers, confusing the purpose of defensive controls, missing the connection between vulnerabilities and countermeasures.

Question 12

1. They record access activity, helping detect misuse and supporting accountability after a suspected breach. (correct answer)
2. They prevent spam by automatically blocking all outgoing messages from customer support accounts.
3. They replace encryption keys, because logs convert readable data into coded text for storage.
4. They ensure accounts deactivate automatically, so offboarding errors cannot occur in any organization.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing requires monitoring and accountability measures like audit logs, which the passage defines as 'records of who accessed what and when.' The passage demonstrates how audit logs help detect unauthorized access when a former employee's account was misused, illustrating their role in both detection and investigation. Choice A is correct because it accurately describes how audit logs record access activity, helping detect misuse and supporting accountability after a suspected breach, which aligns with how the logs revealed unusual patterns from the former employee's account access. Choice C is incorrect because it confuses audit logs with encryption, claiming logs convert data into coded text, when the passage clearly distinguishes these as separate security measures with different purposes - logs record activity while encryption protects data. To help students: Focus on understanding different security controls and their specific functions. Encourage analyzing how monitoring supports both prevention and response. Practice distinguishing between detective controls (audit logs) and protective controls (encryption). Watch for: confusing different security technologies, missing the role of logs in accountability, overlooking the importance of monitoring in security.

Question 13

1. It reduces damage from credential stuffing, since one leaked password cannot unlock other accounts. (correct answer)
2. It makes phishing harmless, because scammers cannot send messages to accounts with unique passwords.
3. It replaces two-factor authentication, since uniqueness alone provides a second verification step.
4. It secures Wi‑Fi signals by scrambling radio waves, which prevents outsiders from joining networks.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing encompasses password security practices that protect against credential-based attacks, with unique passwords per site being a critical defense against credential stuffing attacks. The passage provides examples such as the university experiencing a breach where reused passwords allowed attackers to access multiple accounts, leading to fraudulent refund requests and costly investigations. Choice A is correct because it accurately captures how unique passwords limit the damage from credential stuffing attacks - if one site's password database is compromised, the leaked password cannot be used to access the user's accounts on other sites. Choice B is incorrect because it misunderstands the relationship between passwords and phishing - unique passwords don't prevent phishing emails from being sent, they only limit the damage if credentials are compromised. To help students: Focus on understanding different password-related attacks and defenses. Encourage thinking about the interconnected nature of online accounts and cascade effects of breaches. Practice distinguishing between different security measures and what specific threats they address. Watch for: confusion about what password practices protect against, misunderstanding of credential stuffing attacks, and oversimplification of security benefits.

Question 14

1. It tells users what data is collected and why, supporting informed consent and responsible handling. (correct answer)
2. It prevents phishing by blocking all emails, which removes the need for training programs entirely.
3. It encrypts viewing histories automatically, because transparency is another term for data scrambling.
4. It requires collecting more data, because larger databases make intrusions easier to detect reliably.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing includes ethical considerations like transparency, which the passage defines as 'clear communication about what data is collected and why.' The passage emphasizes how transparency supports informed consent and responsible data handling, connecting ethical practices to security outcomes. Choice A is correct because it accurately captures how transparency tells users what data is collected and why, supporting informed consent and responsible handling, which aligns with the passage's definition and emphasis on ethical implications of data collection. Choice C is incorrect because it completely misunderstands transparency, confusing it with encryption (data scrambling), when the passage clearly defines transparency as communication about data practices, not a technical security measure. To help students: Focus on understanding ethical principles alongside technical measures. Encourage analyzing how transparency builds trust and supports security. Practice distinguishing between ethical practices (transparency, consent) and technical controls (encryption, access limits). Watch for: confusing ethical concepts with technical measures, missing the connection between transparency and user trust, overlooking non-technical aspects of security.

Question 15

1. It explains that location patterns can reveal routines, making identity theft and stalking easier. (correct answer)
2. It argues oversharing only matters for celebrities, not ordinary students using social media.
3. It claims oversharing prevents malware by keeping accounts too public for attackers.
4. It suggests oversharing is harmless if posts include humor and avoid technical language.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing encompasses understanding privacy risks, including how oversharing personal information can lead to serious consequences like identity theft and stalking. The passage specifically mentions fitness apps sharing location patterns that reveal home addresses as a privacy concern, illustrating how seemingly innocent data can be exploited. Choice A is correct because it accurately captures how oversharing impacts privacy by explaining that location patterns can reveal routines, making identity theft and stalking easier - directly reflecting the passage's example of fitness apps exposing home addresses through location data. Choice B is incorrect because it suggests oversharing only matters for celebrities, contradicting the passage's focus on everyday users, a common error when students underestimate their own privacy risks. To help students: Focus on identifying how personal data can be aggregated and misused. Encourage analyzing seemingly harmless information sharing. Practice recognizing privacy implications of location and routine data. Watch for: underestimating personal vulnerability, misunderstanding data aggregation risks, assuming privacy only matters for high-profile individuals.

Question 16

1. It ensures a breach of one site does not automatically compromise accounts on other sites. (correct answer)
2. It makes it safe to store passwords in plain text notes on a shared computer.
3. It prevents phishing by blocking all suspicious emails before they reach your inbox.
4. It replaces the need to log out on public devices because sessions end automatically.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing encompasses practices like using unique passwords for different accounts to prevent cascading security failures when breaches occur. The passage mentions the 2018 Marriott breach which exposed personal details and increased fraud risk, illustrating why password compartmentalization is crucial. Choice A is correct because it accurately captures the purpose of using unique passwords - ensuring that a breach of one site does not automatically compromise accounts on other sites, which directly addresses the security principle of limiting damage from individual breaches. Choice B is incorrect because it suggests storing passwords in plain text on shared computers is safe, which contradicts fundamental security practices, a common error when students misunderstand that unique passwords alone don't eliminate all security requirements. To help students: Focus on understanding defense-in-depth strategies. Encourage analyzing how password reuse creates vulnerability chains. Practice recognizing the importance of password management tools. Watch for: assuming one security measure eliminates the need for others, misunderstanding password storage best practices, underestimating breach impacts.

Question 17

1. It fixes known weaknesses in software, reducing the chance attackers exploit outdated systems successfully. (correct answer)
2. It hides employee badge data by deleting logs, which eliminates privacy concerns without any tradeoffs.
3. It guarantees production never stops, because patched systems cannot be misconfigured by users.
4. It replaces intrusion detection, because updates automatically alert staff about unusual network behavior.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing requires continuous maintenance including patching, which the passage defines as 'installing updates that fix known flaws.' The passage demonstrates how an unpatched server was exploited, leading to production stoppage and significant business impact, illustrating why timely patching is critical. Choice A is correct because it accurately describes how patching fixes known weaknesses in software, reducing the chance attackers exploit outdated systems, which directly addresses the vulnerability that led to the breach where 'an unpatched server is exploited.' Choice C is incorrect because it makes unrealistic guarantees about production continuity and ignores that patching addresses software vulnerabilities, not user configuration errors, demonstrating a common misconception about the scope of security measures. To help students: Focus on understanding the purpose and limitations of each security measure. Encourage analyzing how vulnerabilities are discovered and fixed through the patching process. Practice distinguishing between different types of security controls and their specific purposes. Watch for: making absolute claims about security, confusing different security measures' functions, missing the ongoing nature of security maintenance.

Question 18

1. It makes intercepted messages unreadable without the key, protecting privacy during transmission. (correct answer)
2. It stops employees from forgetting passwords by automatically logging them into all systems.
3. It prevents computers from being stolen because encrypted devices are too heavy to carry.
4. It ensures every cyberattack comes from phishing, so other threats can be ignored.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing encompasses practices like encryption, network security, and ethical data handling to protect sensitive information during storage and transmission. The passage provides examples such as the hospital network encrypting data 'in transit' to ensure that intercepted messages remain unreadable without the proper decryption key. Choice A is correct because it accurately captures the purpose of transit encryption in protecting privacy by making intercepted communications unreadable to unauthorized parties, addressing the specific vulnerability of data being captured while moving between systems. Choice B is incorrect because it confuses encryption with password management systems, which are entirely different security mechanisms serving different purposes. To help students: Focus on understanding the distinction between data at rest and data in transit, and why each requires protection. Encourage students to think about the data lifecycle and vulnerabilities at each stage. Practice identifying which security measures address which specific threats. Watch for: confusion between different security technologies, misunderstanding the scope of what encryption protects, and conflating different types of security measures.

Question 19

1. It ensures every employee can access all systems, so work continues smoothly during emergencies.
2. It limits user access to necessary resources, reducing damage if an account becomes compromised. (correct answer)
3. It replaces employee training by making phishing emails automatically disappear from all inboxes.
4. It mainly increases internet speed by reducing encryption overhead on internal financial databases.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing encompasses access control principles like least privilege, which limits each user's access to only what they need for their job responsibilities. The passage explicitly defines least privilege as meaning 'each worker receives only the access needed for their job,' illustrating how this principle reduces potential damage from compromised accounts. Choice B is correct because it accurately captures how least privilege limits user access to necessary resources, reducing damage if an account becomes compromised, which aligns with the passage's emphasis on minimizing the impact of security breaches. Choice A is incorrect because it contradicts the fundamental concept of least privilege by suggesting everyone should access all systems, which would maximize rather than minimize potential damage from a breach. To help students: Focus on understanding the principle of minimizing access to reduce risk. Encourage analyzing how security principles balance functionality with protection. Practice identifying how different principles work together (least privilege with encryption and training). Watch for: misunderstanding that more access equals better security, confusing convenience with security, missing how principles complement each other.

Question 20

1. Leaders encrypt backups and restrict links, because preventing foreseeable customer harm outweighs minor inconvenience. (correct answer)
2. Leaders ignore public links, because customers should expect their addresses to be shared online anyway.
3. Leaders buy faster laptops, because higher performance always prevents data exposure and legal penalties.
4. Leaders rely on a firewall alone, because encryption and training are unnecessary for cloud backups.

Explanation: This question tests understanding of safe computing principles as discussed in AP Computer Science Principles, focusing on their practical and ethical implications. Safe computing encompasses ethical responsibilities to protect user data beyond mere compliance, considering the real harm that can result from data breaches. The passage emphasizes how unencrypted backups with public links led to reputational damage and customer complaints, illustrating the importance of proactive security measures. Choice A is correct because it demonstrates ethical computing by showing leaders encrypting backups and restricting links to prevent foreseeable customer harm, even if it causes minor inconvenience, which aligns with the passage's emphasis on ethical implications including preventing foreseeable harm. Choice B is incorrect because it shows negligence and disregard for customer privacy, directly contradicting the ethical principle of protecting customer data from unnecessary exposure mentioned in the passage. To help students: Focus on identifying ethical responsibilities beyond legal requirements. Encourage analyzing the balance between convenience and security. Practice recognizing how technical decisions have ethical implications. Watch for: confusing legal compliance with ethical responsibility, missing the human impact of security decisions, overlooking preventable vulnerabilities.