General Tech
Physical Security
OSINT
The Enemy
Compliance
100

How many times do you have to brush your teeth a day?

What is 2

100

How much time should you spend outside per day?

What is 20 minutes

100

how many steps should an adult be taking a day?

What is 7,000 to 10,000 steps

100

how much sleep do people need?

What is 7 and 9 hours

100

What posture should you have while at the computer?

What is sitting upright or leaning back slightly at 100-110 degrees with elbows at 90-120 degrees

200

What is the most visited website? 

What is Google.com?

200
The list of computers, laptops, software, equipment owned by an organization.
What is Inventory?
200

What is the name of information within a file such as author, file size, and location

What is metadata

200
Is the risk presented to an organization by current or past employees who have knowledge of how the organization works and what and where the most valuable (damaging) information might reside.
What is Insider threat?
200

This policy determines how long records stick around before they're securely destroyed 

What is a data retention policy?

300

What does CPU stand for? 

What is Central Processing unit?

300
The use of personality, inowledge of human nature and social skills to steal passwords, keys tokens or other credentials to gain access to systems.
What is Social Engineering?
300

An image contains a building you recognize. What OSINT technique can help identify the location of where the image was taken

What is geolocation

300
These are well run groups of crooks who methodically look for computer vulnerabilities to steal large numbers of financial or credit card accounts for financial profit.
Who are organized crime groups?
300

This document lays out who does what, and how the company communicates, when a breach or attack happens. 

What is an Incident Response Plan (IRP)?

400

What’s the term for an isolated testing environment in which a computer system can run untested code securely? 

What is Sandbox?

400
30-50% of all data loss due to the people already within the organization.
What is Insider Threat?
400

This information is connected to a specific individual that can be used to uncover or steal that individual's identity

What is Personal Identifiable Information (PII)

400
They are structured groups funded by other governments and dedicated to mapping out the internet addresses for the purpose of espionage and possible computer attacks.
What is state sponsored hacking?
400

This 2022 executive order and related federal guidance pushed U.S. agencies toward phishing-resistant MFA as part of a broader security model. 

What is Zero Trust?

500

What Computer language’s motto is “write once, run everywhere”? 

What is Java?

500

A necessary process to limit the kinds of hardware and software which minimizes the number of different vulnerabilities and reduces exposure to security weaknesses.

What is Standardization?

500

What operator searches for an exact phrase in your browsers search bar

What is “ “

500
The weakest link in every computer system. The one person who can through thoughtlessness, unawareness or accident, cause loss of work products through deletion, corruption or improperly safeguarding data.
Who are you? (Who am I?)
500

This DoD certification program, now on version 2.0, verifies contractors' cybersecurity maturity. 

What is CMMC?