MFA
What does MFA stand for?
Multifactor Authentication
What is a password manager?
A tool that creates, remembers, and fills in passwords
What should you do if you receive a suspicious email?
Report it
True or False: Using the same password for multiple accounts is a good idea.
False
The UConn cybersecurity presentation covers two main "tools of the trade." Name one
Multifactor Authentication or Password Manager (LastPass)
What MFA app does UConn use?
DUO Mobile
What password manager does UConn provide to staff and students?
LastPass
Name two red flags that suggest an email is a phishing attempt.
- Strange sender address
- Urgent language
- Spelling/grammar mistakes
- Suspicious links
- Unexpected attachments
- Requests for login info
Which is the strongest password? A) password123 B) Huskies2026 C) Blue-Carpet-River-Lemon
C — it is a long passphrase, much harder to crack
The cyber toolkit applies to both ______ and ______ life
Personal and professional
What are two methods a bank might offer for MFA?
- SMS
- Phone Call
- Hardware token
- Software token
- Addresses
- Payment Cards
- Bank Accounts
- Secure Notes
True or False: If an email looks official, it is safe to click its links
False — phishing emails are often designed to look official
What is a passphrase?
A series of random words used together as a password
What is malware?
Malicious software designed to damage or gain unauthorized access to a computer system
True or False: MFA protects you account even if your password is stolen
True! The attacker would need the second factor
What is social engineering?
Manipulating people into revealing confidential information, such as pretending to be IT support
According to the UConn presentation, how long does it take a cybercriminal to crack an 8-character password that includes upper and lower case letters, symbols, and numbers?
5 minutes
Why is it risky to plug in an unknown USB drive?
It could contain malware that automatically installs on your computer
According to the UConn presentation, what are two things should you do to keep your password manager vault safe?
If a UConn employee leaves the university, what are their three options for their personal LastPass account?
Keep the free version, pay for premium, or export/delete
True or False: A website with a padlock icon (HTTPS) is always trustworthy and safe
False — HTTPS only means the connection is encrypted, not that the site itself is legitimate
Name the three methods cybercriminals use to obtain your password, as described in the presentation.
Guess it, phish/collect it, or brute force it
Name all four reasons the UConn presentation gives for why everyone needs a cyber toolkit.
Digital life is complicated, cybercriminals want your access, we are not computers, and things fail