Tech+ 4.1 Cybersecurity

Open Ended

What 2 questions would you ask him?

Open Ended

What would you advise him to do?

Some good questions

• Does the email sender’s address look correct?

  • Is the company’s URL correct when you hover your mouse over it?

• Does the email or message ask you to take immediate action, or something bad will happen?

  • Your account will be suspended.

  • You owe back taxes and must pay immediately.

  • Etc.

Some good questions

• Does the email or message address you by name?

  • If it reads “Dear Customer,” it’s likely a phishing email.

  • Even if it addresses you by name, it could be a spear phishing (targeted) email.

• Are there any spelling or grammar mistakes in the message?

  • Emails and messages from companies are unlikely to have spelling and grammar mistakes.

• Is it from a person or company you know?

  • Do you have an account at this bank?

  • Are they notifying you about unauthorized activity? (This is a tactic threat actors often use.)

  • Are they asking you to verify your identity or login information?

Some advice

• If you suspect that a message or email is from a threat actor:

  • Click nothing, not even “unsubscribe.”

  • Report the email or message.

  • Delete it.

Some advice

• What should you do it the email or message appears to be from a person or company you know, but you aren’t sure? 

  • Call the person to verify.

  • Type the company’s URL into your browser. Then log in.

  • Contact the company.

How could one mistake from one person affect an org's cybersecurity?

• Someone might: 

  • Accidentally disclose sensitive information by:

    • Responding to a phishing email

    • Using a weak or easily guessable password

• Mishandle sensitive data by:

  • Storing it in unsecure locations 

  • Sharing it through unencrypted channels

• Neglect physical security measures by:

  • Leaving workstations unlocked

  • Losing devices with sensitive information

Match

Match the security issues below

• respond to a phishing email

• storing data in unsecure locations

• leaving workstations unlocked

disclose sensitive info

mishandle sensitive data

neglect physical security measures

• disclose sensitive info

• mishandle sensitive data

• neglect physical security measures

means information can be accessed only by people who are authorized to see it.

• Measures to ensure confidentiality include:

  • Encryption 

  • Access controls 

  • Authentication mechanisms

Confidentiality

means that the data is stored and transferred as intended and that all modifications are authorized.

• Measures to ensure integrity include:

  • Hashing

  • Digital signatures

  • Checksums to verify that that the data hasn’t been modified

Integrity

means making sure information and resources are available to authorized users when they need it. 

• Ensuring availability means preventing disruptions by maintaining and managing: 

  • Hardware 

  • Software 

  • Network infrastructure

Availability

• Techniques to ensure availability include: 

  • Redundancy

  • Failover systems

  • Regular maintenance

Availability

Multiple Choice

Choose the correct leg of the CIA triangle: Data can be accessed ONLY by people who have authorization

• Confidentiality

• Integrity

• Availability

Multiple Choice

Choose the correct leg of the CIA triangle: Data is transferred and reached its destination in its original format

• Confidentiality

• Integrity

• Availability

Multiple Choice

Choose the correct leg of the CIA triangle: Data is accessible to those users when they need it.

• Confidentiality

• Integrity

• Availability

Multiple Choice

Choose the correct leg of the CIA triangle: Encryption and Access Controls

• Confidentiality

• Integrity

• Availability

Multiple Choice

Choose the correct leg of the CIA triangle: Hashing and Digital Signatures

• Confidentiality

• Integrity

• Availability

Multiple Choice

Choose the correct leg of the CIA triangle: maintaining hardware, software and network resources

• Confidentiality

• Integrity

• Availability

Multiple Choice

Choose the correct leg of the CIA triangle: redundancy and failover systems

• Confidentiality

• Integrity

• Availability

Uses data and time stamps as well as login information to TRACK CHANGES

ensures data integrity and accountability

Non-repudiation

Open Ended

No one knows who owns the Form in Google Drive; recently a user changed a question and the manager wants to know who made the change; how could non-repudiation help in this situation?

Open Ended

What was Tony’s greatest loss? Why?

Match

Match the authentication method

• answers to security questions

• tokens

• fingerprint

something you know

something you have

something you are

• something you know

• something you have

• something you are

you know	​you have	​you are
​PINs	mobile phones​	facial recognition​
​answers to security questions	​security tokens	​iris scan
passwords​	passkey​	​finger print

Match

Match the authentication method

• pins

• mobile phone

• facial recognition

something you know

something you have

something you are

• something you know

• something you have

• something you are

Multiple Choice

• A password + a security code sent via a text or email is an example of

• two-factor authentication (2FA)
• multi-step verification
• password recovery
• single-factor authentication

Open Ended

What multi-factor authorization system would you suggest for employees at a school?

• Determining what rights individual users should have when accessing a particular resource

• Enforcing those rights

Authorization

Multiple Select

A teacher shares a doc to students on the classroom; Students should have authorization to do what?

• Read a document

• Make a copy of a document

• Edit the document

• Delete the document

Multiple Select

A teacher shares a doc to their fellow teacher and asks for suggestions; the other teacher should be able to:

• Read a document

• Make a copy of a document

• Edit the document

• Delete the document

Multiple Select

Administration asks a teacher to change the ownership of a document to another teacher; as a result the other teacher will be able to:

• Read a document

• Make a copy of a document

• Edit the document

• Delete the document

Open Ended

What is the benefit of limiting access to data?

Dropdown

​

Select answer

is the cybersecurity practice of allowing users, applications, or systems the ​

Select answer

levels of access—or permissions—​

Select answer

to perform their required functions

Open Ended

Do you agree with these permissions? Why or why not?

Think

• How are accounting (in cybersecurity) and doorbell cameras similar?

  • Both are used to monitor and record activity and provide actionable insights. 

process of documenting user activities on the system

Accounting

• How you logged in

• What time you logged in

• Which programs you worked on and when

• Which websites you visited while browsing the web

• When you logged out

Accounting

• Are there other ways to track user activity?

  • Location tracking

    • Global positioning system (GPS)

    • Geofencing

      • Tracks assets by drawing a line their location

      • If an asset, like a computer, moves outside the line, it could mean the item was stolen.

      • The IT department gets a notification when something moves.

Accounting

Multiple Choice

On a Windows machine, what applet lets you see user activity on the machine?

• Control Panel
• Event Viewer
• Device Manager
• Task Manager

That's it! 4.1 is now done...click next

Poll

Rate this lesson

• Just right

• Too easy

• Too hard

Word Cloud

Type one word or phrase you found important from the lesson