Identity & Access Management
Multi-Factor Authentication
What does MFA stand for?
A fraudulent attempt to obtain sensitive information by pretending to be trustworthy
What is phishing?
Software as a Service.
What does SaaS stand for?
Artificial Intelligence
What does AI stand for?
Virtual Private Network
What does VPN stand for?
Authenticator app, hardware token, fingerprint, facial recognition, or SMS code.
Name one additional factor besides a password that can be used for authentication.
Suspicious links, urgent language, unknown sender, spelling mistakes, unexpected attachment.
Name one indicator of a phishing email.
SaaS
What cloud model includes products like Microsoft 365?
An attempt to manipulate an AI system by providing malicious instructions
What is a prompt injection attack?
Malware
What type of software is designed to damage or disrupt systems?
Principle of Least Privilege
What security principle states users should only have the access they need to perform their job?
A targeted phishing attack aimed at a specific individual or organization.
What is spear phishing?
Shared Responsibility Model
What concept defines how security responsibilities are shared between a customer and cloud provider?
Confidential, proprietary, personal, regulated, or sensitive information
What type of company information should never be entered into public AI tools?
Malware that encrypts data and demands payment for recovery
What is ransomware?
Password Spraying
What type of attack attempts common passwords against many different accounts?
Business Email Compromise (BEC).
An attacker impersonates a company executive and requests an urgent wire transfer. What type of attack is this?
Publicly accessible storage buckets or containers
What is a common cloud misconfiguration that can expose data to the internet?
A technique used to bypass the safety restrictions of an AI model.
What is an AI jailbreak?
A security flaw that is unknown or unpatched when attackers begin exploiting it
What does the term "zero-day vulnerability" mean?
They are phishing-resistant and cannot be stolen or reused like passwords
Why are passkeys considered more secure than passwords?
They exploit human trust, emotions, urgency, and increasingly use sophisticated techniques.
Why are phishing attacks still successful despite security awareness training?
Kubnet
What is an example of legacy Container Networking Interface?
An architecture flaw when agent has access to the Internet, capability to communicate outside and access to company internal resources.
What is lethal trifecta?
Zero Trust
What security concept assumes no user or device should be trusted by default?