What term describes a weakness in a system-like an unlocked door-that could let someone cause harm, whether by accident or on purpose?

What is the chance that someone or something might take advantage of that weakness to cause damage?

The person or thing causing the threat is called a/an:

What is the process of spotting possible problems (like weaknesses or threats), figuring out how serious they are, and deciding how to deal with them?

Improving a system's security is called:

Which of the following is any data that can identify a person-like their name, ID number, phone number, or address?

The General Data Protection Regulation (GDPR) is a privacy law from which region?

What is the term for protecting data by making sure only the right people or systems can read it?

Which type of algorithm changes readable text (called plaintext) into unreadable code (called ciphertext), requiring a special key to change it back?

What is data that is saved and not currently moving anywhere, such as on a hard drive, SSD, USB flash drive, or cloud storage?

What is the actual method or code that a hacker uses to take advantage of that weakness?

A special kind of weakness that no one (not even the software developer) knows about yet is called a:

What type of threat comes from someone outside the organization who doesn't have login access?

What is the term for when an attacker pretends to be someone or something else?

Which type of attack involves an attacker trying to break or block a service so that normal users can't use it, often by overloading the system?

What is a large group of computers that have been secretly taken over by a hacker and controlled from a central point?

Which type of malware attaches itself to files and spreads when the file is opened?

What is an attack where a hacker secretly places themselves between two devices (like your computer and a server) during a conversation?

What attack involves sending out fake messages that pretend to come from a trusted device-like the router-to trick other computers into sending their traffic to the hacker's device instead?

What attack targets a switch by sending a massive amount of fake data using random, made-up MAC addresses to fill up its MAC address table?

Which type of attack involves a hacker tricking the network into letting their device talk to VLANs they shouldn’t have access to, sometimes by using a double-tagged frame?

What is any device or service connected to your network without the IT department’s permission?

What happens when there’s an unauthorized or fake DHCP server on the network?

What type of attack targets the system that helps devices translate website names (like google.com) into IP addresses they can actually connect to?

What is the social engineering trick where an attacker pretends to be someone trustworthy-often using fake emails or websites-to fool someone into doing something dangerous, like downloading a virus or giving away their password?

Which of the following is an example of an external threat?

What is the primary goal of footprinting and fingerprinting attacks?

What is it called when attackers register fake websites with names similar to real ones (like [suspicious link removed] instead of google.com)?

Which term refers to data that is currently being used by a device, meaning it’s temporarily held in the computer’s memory (RAM or CPU)?

Confidentiality means that everyone should be able to see the information.

Integrity means the information must stay the way it was meant to be, without unauthorized changes.

Risk is how likely it is that a threat will actually happen and how bad the damage would be.

Security policies are rules that make sure risks are known and steps (called security controls) are in place to reduce those risks.

It is always a good idea to fix every possible security risk regardless of cost.

A Mission Essential Function (MEF) is something a business cannot stop doing-even for a short time.

Regulatory compliance is about what the law requires, whereas internal audits are about what the company thinks is important.

Data sovereignty is when a country says that certain data-like personal info-must stay within that country's borders.

Encryption is a type of physical security.

You can turn a hash back into the original text.

Data in transit is data that is saved and not currently moving anywhere.

An exploit is like a broken lock, and a vulnerability is the trick someone uses to open that broken lock.

Reputational threat intelligence is written information explaining how attacks happen.

Social engineering involves hacking a computer rather than tricking a human.

A worm requires a user to open a file to spread.

Trojans are programs that ask for permission before installing hidden malware.

In MAC spoofing, hackers fake MAC addresses to sneak past security rules.

ARP (Address Resolution Protocol) has strong built-in security checks.

If a MAC flooding attack is successful, a switch starts sending traffic out to all ports like a hub.

Shadow IT devices are always set up with malicious intent.

Typosquatting is a common threat in private networks.

DNS client cache poisoning affects only one computer's stored IP addresses.

DNS server cache poisoning affects all users who use that server if successful.