Improving students' privacy awareness – Analysis of a pilot survey to design a VR environment for self-paced learning

1. What is personal data? a. Only our names and email addresses. b. The list of websites we daily visit and the location of our devices. c. Any information relating to an identified or identifiable natural person, such as name, IDs, medical data or location. 2. What is pseudonymisation? a. A data transformation process, of which outcome data can only be attributed to a person by the use of additional information. b. A process when we delete an individual's data. c. Special information about a person. 3. What is anonymisation? a. A process when we delete an individual's data. b. A process when we unsubscribe from newsletters. c. A process when we transform personal data as the subject of that cannot be identified anymore. 4. What a secure password should not contain? a. Special characters and the space character. b. Personal or context-specific information. c. Accented characters. 5. What is a website cookie? a. Some delicious cakes that we can order online. b. Browsing or user-specific information stored in a file on your computer. c. Malicious contents, such as malware or virus. 6. Has privacy become an issue since Facebook? a. No, because "Discussion on privacy issues is as old as mankind" – by Jan Holvast. b. Yes, it is related to Facebook. c. No, it is only some privacy policies from the 21st century. 7. Does Google Chrome Incognito browser allow you to search in complete privacy? a. Yes, nobody can get information about your browsing. b. No, because it secretly collects browsing data, and other Google tools used by the specific site can also collect various types of data. c. No, but you can delete the search history. 8. Can public wi-fi share your location data? a. Yes, data can be the location of the WIFI point or IP address. b. No, wi-fi routers do not have GPS tools. c. Yes, Google can share your location with your friends. 9. Is fingerprinting a form of website tracking that uses the attributes of your device or browser to build a profile of you? a. No, because it is a DNA collection process. b. Yes, it is true. c. No, because fingerprinting is when you use the fingerprint reader of your smartphone. 10. Under the general data protection regulation (GDPR), what can be correct? a. Right to be informed or Right to transparency. b. Right not to comply with privacy policies. c. Right to be filmed by other people’s camera equipment 11. Sharing passwords with each other. a. It is safe. b. It is okay because everybody does the same. c. It is possibly dangerous. 12. Adding personal information, such as name, website name or dates to passwords. a. It is safe. b. It is okay because everybody does the same. c. It is possibly dangerous. 13. Privacy policies of websites we daily use give information about. a. How the company will manage and store the data we share with them. b. It is an unnecessarily difficult discussion about the data we have to share. c. It is an important list of the company employees. 14. Sending sensitive information, such as medical records, contracts or bank card data via unencrypted emails. a. It is safe. b. It is okay because everybody does the same. c. It is possibly dangerous. 15. Posting photos about our holidays during that on social media. a. It is safe. b. It is okay because everybody does the same. c. It is possibly dangerous. 16. Sharing bank card data, document images or sensitive personal data on social media. a. It is safe. b. It is okay because everybody does the same. c. It is possibly dangerous. 17. Sending nude photos about ourselves to strangers. a. It is safe. b. It is okay because everybody does the same. c. It is possibly dangerous. 18. Sending nude photos about ourselves to our partner or best friends. a. It is safe. b. It is okay because everybody does the same. c. It is possibly dangerous. 19. Posting photos about us without sensitive information, such as address, medical data or location. a. It is okay. b. It is okay because everybody does the same. c. It is possibly dangerous. 20. Posting photos about us with other people. a. It is okay. b. It is okay, but only with the others' consent to share their photos. c. It is okay because everybody does the same. 21. Reading privacy policies of websites we daily use is. a. Very important all the time because we have to know how our data will be managed. b. Not important because companies do not comply with their policies and we cannot do anything against it. c. Not important all the time because all company handles our data the same way. 22. What is multi-factor authentication (MFA)? a. SMS-based authentication. b. Applying two different categories of authentication, for example, password and authenticator application, or password and hardware security key. c. Sharing passwords with each other. 23. What are the factors of authentication? a. Something you know (e.g. passwords), something you have (e.g. hardware key) and something you are (e.g. fingerprint). b. Passwords and usernames. c. Passwords and usernames with SMS-factor. 24. What are the special categories of personal data? a. Data that relate to the list of GDPR Article 9, such as medical data, sexual preferences, religion or political opinions. b. Mother's name and address together. c. Encrypted personal data. 25. You can request to hide your house from Google Maps. a. Yes, it is true. You can easily request it. b. Well, it is possible, but very difficult to reach it. c. It is not possible because Google captures all buildings and places them in their service.