How Vulnerable Is Your Data? The 2026 Cyber Exposure Quiz

Q: Is the "How Vulnerable Is Your Data? The 2026 Cyber Exposure Quiz" quiz accurate?

This quiz uses scenario-based questions grounded in established psychological frameworks. While no online quiz replaces professional assessment, our methodology provides meaningful insights for self-discovery.

Q: How long does this quiz take?

The quiz takes approximately 3-5 minutes to complete. It consists of 12 carefully designed questions. Answer honestly with your gut reaction for the most accurate result.

Q: Can I retake the quiz?

Yes, you can retake the quiz as many times as you like. Your answers may vary depending on your current life circumstances and personal growth.

Question 1

You get an email from "Canvas Support" saying your account was flagged and you need to verify your login immediately. There's a button that says "Secure My Account Now." You...

Accepted Answer

Click the button — it looks official and you don't want your account locked, Hover over the link first to check the URL, then Google the sender domain before doing anything, Feel suspicious but click anyway because it might be real and you don't want to miss it, Forward it to your IT department or report it as phishing without clicking anything

Question 2

A friend tells you the Canvas breach exposed student emails and IDs. You attended a school that uses Canvas. Your first move is...

Accepted Answer

Check HaveIBeenPwned.com for your email and put a credit freeze on within the hour, Assume it probably didn't get your specific data and move on with your day, Google it to read more about what happened, but don't take any protective steps yet, Panic and immediately change every password you can remember — using the same base word for each

Question 3

Your phone buzzes with a text: "Unusual sign-in detected on your bank account. Reply STOP to cancel or click here." You...

Accepted Answer

Click the link — your bank texted you, so it must be real, Don't click the link. Open your bank's official app directly and check activity there, Call the number in the text to verify — that feels safer than clicking, Ignore it completely — you're too busy to deal with it right now

Question 4

Think about the passwords you use for your most important accounts (email, bank, social media). How would you describe them honestly?

Accepted Answer

I have one strong password I use everywhere — at least it's a good one, I use a password manager with unique, randomly generated passwords for every account, I have a few variations of the same core password depending on how important the site is, Some accounts use old passwords I've had for years and honestly can't remember if I changed them

Question 5

Your laptop connects to public Wi-Fi at the airport. While connected, you need to check your bank balance. You...

Accepted Answer

Check it directly — you're only looking, not transferring money, Turn on your VPN first, then access the bank app, then disconnect when done, Use your phone's mobile data instead of the airport Wi-Fi for anything sensitive, Wait until you get home — public Wi-Fi for banking feels sketchy but you're not sure why

Question 6

It's been a while since you reviewed which apps have access to your location, contacts, and microphone on your phone. When did you last audit your app permissions?

Accepted Answer

I did a full audit in the last 30 days and revoked anything I don't recognize, I've never actually gone through and checked — the apps asked, I tapped allow, I review them maybe once a year when I think about it, I checked when I first set up my phone but haven't looked since

Question 7

You get a LinkedIn message from a recruiter with an unusually attractive job offer. They ask you to fill out a "pre-screening form" with your full name, address, and date of birth. You...

Accepted Answer

Block the recruiter immediately without engaging — any real job starts with an interview, Fill it out — it's LinkedIn, the recruiter profile looks real, and the job sounds great, Research the recruiter's profile, the company, and the domain of the form before touching it, Give your name and email but skip the address and DOB — that feels like too much

Question 8

You receive a voicemail from someone who sounds exactly like your boss, saying there's a wire transfer emergency and you should call back immediately. (AI voice cloning is now common.) You...

Accepted Answer

Report it to your company's security team and don't engage further, Call back right away — it's your boss's voice and it sounds urgent, Hang up and call your boss directly using the number saved in your contacts to verify, Call back but stay suspicious and refuse to authorize anything without email confirmation

Question 9

How many of your accounts have two-factor authentication (2FA) or multi-factor authentication (MFA) enabled?

Accepted Answer

I'm honestly not sure which ones have it on and which ones don't, All of my important accounts — email, bank, work tools, social media, Just my email, because I set it up when prompted and forgot about the rest, None — the extra step annoys me and I don't think I'm a target

Question 10

You find out your email address appears in a data broker's database — your name, address, phone number, and employer are all listed publicly. You...

Accepted Answer

Don't know data brokers exist and have never looked yourself up, Submit opt-out requests to the major data brokers (Spokeo, Whitepages, etc.) that same week, Feel uncomfortable but assume there's nothing you can do about it, Google yourself, read what's out there, but don't take any formal removal steps

Question 11

Your work laptop hasn't had a software update in three weeks because the prompts kept interrupting you. Where do you stand with it right now?

Accepted Answer

I have no idea — I don't track updates on any of my devices, I clicked "install later" repeatedly and the OS is still showing a pending critical patch, I updated it the same day the patch dropped — I know critical patches close active exploits, It's on auto-update so I assume it's current, but I haven't verified recently

Question 12

You're cleaning out an old laptop to donate. It has old tax returns, login cookies, and photos on it. What do you do?

Accepted Answer

Back everything up to a drive, do a standard factory reset, and call it done, Realize you have three old devices and have never actually done this properly, Delete the obvious files, empty the trash, and hand it over — that should be enough, Perform a factory reset plus a full disk wipe (DBAN or equivalent) before donating

How Vulnerable Is Your Data? The 2026 Cyber Exposure Quiz

Quiz Questions

You Might Also Like

📚 Recommended Reading

Frequently Asked Questions

Is this quiz accurate?

How long does this quiz take?

Can I retake the quiz?