Passwords & Authentication
Adding a second proof of identity, like a code sent to your phone, is known by this three-letter abbreviation.
What is MFA (multi-factor authentication)?
A written step-by-step procedure for what to do when a cyberattack happens is called an "incident _ _"
What is a response plan/incident response plan?
This malware locks your files and demands payment to unlock them.
What is ransomware?
This security system monitors and filters incoming and outgoing network traffic.
What is a firewall?
The “S” in HTTPS stands for this.
What is “Secure”?
This type of tool generates and stores unique, strong passwords for all your accounts.
What is a password manager?
These records document events occurring on a computer or network.
What are logs?
Named for a wooden horse, this malware disguises itself as legitimate software.
What is a Trojan?
Using this tool creates an encrypted tunnel for your traffic, which is especially useful on public Wi-Fi.
What is a VPN?
Confidentiality, Integrity, and Availability make up this foundational security model.
What is the CIA triad?
Logging in with your fingerprint or face scan is an example of this type of authentication.
What is/are biometrics?
When sensitive information like customer records is exposed or stolen, it’s called a "data _".
What is a breach/data breach?
This self-replicating malware spreads across networks without any user action.
What is a worm?
In this attack, many compromised systems flood a server with traffic to knock it offline.
What is a DDoS attack?
Installing these regularly fixes known vulnerabilities in your software.
What are updates/patches?
A long, easy-to-remember string of random words used instead of a short password is called this.
What is a passphrase?
This security tool collects and analyzes logs from multiple sources to identify suspicious activity.
What is a SIEM (Security information and event management)?
This malware secretly records what you type, including passwords.
What is a keylogger (spyware)?
When an attacker secretly intercepts communication between two parties, it’s known by this 4-word name.
What is a man-in-the-middle attack?
Scrambling data so that only someone with the right key can read it is known as this.
What is encryption?
Websites should store passwords in this scrambled, one-way form, ideally with random “*” added.
What is a hash?
This team monitors a company’s computers 24/7 for suspicious activity, potential security threats or signs of a cyberattack.
What is a Security Operations Center (SOC)?
A network of infected devices controlled remotely by an attacker is called this.
What is a botnet?
This is the newest and most secure Wi-Fi encryption standard, succeeding WPA2.
What is WPA3?
Giving users only the minimum access they need to do their job is called the principle of this.
What is least privilege?