Social Engineering
Hacker Types
Security Acronyms
Mobile & Device Security
Data Privacy
100

Fake emails designed to trick you into revealing personal information or clicking bad links are called this.

What is phishing?

100

Hackers who are given permission to break into systems to find weaknesses are known by this “hat” color.

What is white hat?

100

Smart cameras, doorbells, and thermostats that connect to the internet are known collectively by this three-letter abbreviation.

What is IoT (Internet of Things)?

100

Downloading apps only from official stores, like Google Play or the Apple App Store, helps protect your phone from this kind of harmful software.

What is malware?

100

Your name, Social Security number, and home address are examples of this type of data.

What is Personally Identifiable Information?

200

A scammer calling while pretending to be your bank or IT help desk is committing this type of attack.

What is vishing (voice phishing)?

200

Hackers who break into systems illegally for personal gain or to cause harm wear this color “hat.”

What is black hat?

200

The top security leader at a company holds this title, abbreviated CISO. Name what the full acronym stands for.

What is Chief Information Security Officer?

200

Before installing an app, you should review the things it asks to access, such as your camera, contacts, or location. These are called this.

What are app permissions?

200

Websites use these small files stored in your browser to remember your preferences and track your activity.

What are cookies?

300

Messages that say “Act now or your account will be closed!” use this pressure tactic to make you panic and skip careful thinking.

What is urgency/fear?

300

Hackers who break into systems without permission but without harmful intent, sometimes reporting the flaw afterward, are this color “hat.”

What is gray hat?

300

IDS stands for this system, which watches network traffic and alerts you to suspicious activity. Name what the full acronym stand for.

What is an Intrusion Detection System?

300

Removing the manufacturer’s built-in restrictions on a phone, which can make it far less secure, is called this.

What is jailbreaking (or rooting)?

300

Before you sign up for a service, this document explains how a company collects, uses, and shares your data.

What is a privacy policy?

400

Following an authorized employee through a secured door without using your own badge is known as this.

What is tailgating?

400

Hackers who break into systems to promote a political or social cause are known by this name, a blend of “hacker” and “activist.”

What is a hacktivist?

400

TLS is the modern protocol, replacing SSL, that encrypts data traveling between your browser and a website. Name what the full acronym stand for.

What is Transport Layer Security?

400

Connecting your phone to this kind of network at a café or airport is risky because attackers can intercept your traffic.

What is public Wi-Fi?

400

This browser mode doesn’t save your history or cookies once you close the window, though it doesn’t hide your activity from your internet provider or employer.

What is private browsing (incognito mode)?

500

An email that appears to come from your boss, asking you to quickly buy gift cards or send money, is an example of this tactic.

What is impersonation?

500

A current or former employee who misuses their access to harm a company is known as this type of threat.

What is an insider threat?

500

This attack, abbreviated DDoS, floods a server with traffic from many compromised systems to knock it offline. Name what the full acronym stands for.

What is Distributed Denial of Service?

500

Companies use this type of software to manage and secure employees’ phones and tablets.

What is Mobile Device Management?

500

Stolen login credentials and personal data are often sold on this hidden part of the internet, accessible only with special software.

What is the dark web?

M
e
n
u