This type of email pretends to be from a trusted source to trick you into clicking a link or providing information.
What is phishing?
This should be unique for every account and never shared.
What is a password?
Cybercriminals often exploit this human trait more than technical vulnerabilities.
What is trust?
Malware that locks files and demands payment is called this
What is ransomware?
Software designed to harm, disrupt, or steal information is known as this.
What is malware?
Before clicking a link in an email, you should do this to verify where it really goes.
What is hover over the link?
Using a second verification step, such as a text code or app notification, is called this.
What is Multi-Factor Authentication (MFA)?
Someone tailgating through a secure door without a badge is an example of this.
What is physical social engineering?
When a computer behaves unusually, the first thing you should do is this.
What is report it immediately?
A self-replicating type of malware often spreads without user interaction.
What is a worm?
This type of phishing attack targets a specific individual or department.
What is spear phishing?
A password manager helps users do this safely.
What is store and generate strong passwords?
An attacker pretending to be IT Support to gather information is called this.
What is pretexting?
Regularly creating copies of important data helps protect against this type of incident.
What is data loss?
Malware disguised as legitimate software is called this.
hat is a Trojan horse?
An email claiming your account will be suspended unless you act immediately is using this tactic.
What is urgency?
This attack attempts to guess passwords by trying many combinations.
What is a brute-force attack?
Leaving infected USB drives for employees to find is known as this social engineering technique.
What is baiting?
This term describes software updates that fix security weaknesses
What are patches?
Criminals who break into systems for financial gain are commonly called this.
What are cybercriminals?
If you suspect a phishing email, this is the best action to take.
What is report it using the Report Phish button?
The strongest passwords are typically these four things.
hat are long, unique, complex, and memorable?
This is the best defense against social engineering attacks.
What is verifying requests before acting?
The time between discovering a vulnerability and fixing it can create this kind of exposure.
What is security risk?
A group of compromised devices controlled remotely is known as this.
What is a botnet?