IT Vocabulary
Cyberattack Categories
Safety Tips & Containment
Unsafe Behaviour & Attack Vectors
Miscellaneous Vocabulary
100

A network barrier that inspects incoming and outgoing traffic to block unauthorised access

What is a firewall?  

100

An umbrella term for any software designed to infiltrate, damage, or disable computer systems.

What is malware?  

100

The immediate action required to ensure a virus will not spread to other computers on the system.  

What is disconnect the network?  

100

Deceptive emails or messages sent to trick individuals into disclosing sensitive credentials.  

What is phishing?  

100

A robust string of characters, numerals, and symbols engineered to withstand brute-force attacks.  

What is a strong password?  

200

A duplicate archive of critical operational files stored separately to recover lost or corrupted records.  

What is a backup?  

200

Malicious software that encrypts user files and extorts money in exchange for the decryption tool.  

What is ransomware?  

200

Dedicated utility software engineered to detect, quarantine, and eliminate computer viruses and threats.  

What is an antivirus?  

200

A web hyperlink embedded in a message that directs the victim to a malicious or fraudulent website.  

What is a suspicious link?  

200

 A person who exploits technical weaknesses in systems or computer networks to gain unauthorised access.  

What is a hacker?  

300

The cryptographic method of scrambling readable data so that only authorised parties can decipher it.  

What is encryption?  

300

Software that secretly tracks user activity and gathers sensitive information without consent.  

What is spyware?  

300

The specific action you must take if you want to stop receiving more emails from a malicious source.

What is block the sender?  

300

Psychological manipulation of staff into handing over private data or circumventing security controls.  

What is social engineering?  

300

An automated chronological record detailing system events, user logins, and data transactions.  

What is a network log?  

400

An identity verification protocol requiring two independent authentication factors before granting access.  

What is two-factor authentication?  

400

Malicious code disguised as legitimate, harmless software to trick users into running it.  

What is a Trojan horse?  

400

A software release designed to rectify existing bugs, security weaknesses, and system flaws.  

What is a security patch?  

400

Forging an email header, IP address, or sender display name to masquerade as a trusted party.  

What is spoofing?  

400

A secret digital algorithm or code required to reverse encryption and restore scrambled files.

What is a decryption key?  

500

Segregating an infected computer or rogue file from the network to stop lateral spread.  

What is quarantine?  

500

An assault aimed at exhausting server resources by flooding it with illegitimate network requests.  

What is Denial of Service?  

500

A formal, pre-planned protocol defining containment, eradication, and recovery steps after an attack.  

What is an incident response plan?

500

Systematically extracting and compiling usernames and login passwords via phishing portals.  

What is credential harvesting?  

500

A comprehensive operational review assessing an organisation's cyber defences and compliance

What is a security audit?  

M
e
n
u