Malware
This type of malware disguises itself as legitimate software to trick users into installing it.
What is a Trojan (horse)?
This layer 4 protocol establishes a reliable connection using a three-way handshake (SYN, SYN-ACK, ACK).
What is TCP?
his security principle states users should only have the minimum access necessary to do their job.
What is the principle of least privilege?
This type of hacker breaks into systems with malicious intent, as opposed to a "white hat."
What is a black hat?
This free, open-source program is used to capture and analyze network traffic packet by packet.
What is Wireshark?
This type of malware encrypts a victim's files and demands payment for the decryption key.
What is ransomware?
This device filters incoming and outgoing network traffic based on predetermined security rules.
What is a firewall?
This three-part model — confidentiality, integrity, and availability — forms the foundation of information security.
What is the CIA triad?
This 2017 ransomware attack exploited the EternalBlue vulnerability and spread rapidly across the globe, affecting the UK's NHS among others.
What is WannaCry?
This command-line tool is used to scan networks and discover open ports on a target system.
What is Nmap?
Unlike a virus, this type of malware can self-replicate and spread across networks without attaching to a host file.
What is a worm?
This attack floods a target with traffic from many compromised systems to make a service unavailable.
What is a DDoS attack?
This process verifies a user's identity, typically through a password, biometric, or token.
What is authentication?
This term describes a previously unknown security flaw that hasn't been publicly disclosed or patched
What is a zero-day
This penetration testing framework lets security professionals develop and execute exploit code against a target system.
What is Metasploit?
This malware records every keystroke a user makes, often used to steal passwords.
What is a keylogger?
This protocol, the secure version of HTTP, encrypts data in transit using TLS/SSL.
What is HTTPS?
This U.S. framework, published by NIST, provides voluntary guidance for managing cybersecurity risk (Identify, Protect, Detect, Respond, Recover).
What is the NIST Cybersecurity Framework?
This 2013–2014 breach of a major retailer exposed roughly 40 million credit/debit card numbers after attackers compromised a third-party HVAC vendor.
What is the Target data breach?
This password-cracking tool is commonly used to test password strength by attempting to guess hashes.
What is John the Ripper (or Hashcat)?
This type of malware hides its presence by modifying the operating system's core functions, often gaining kernel-level access to remain undetected.
What is a rootkit?
This attack technique intercepts communication between two parties who believe they're talking directly to each other.
What is a man-in-the-middle (MITM) attack?
This security approach assumes no user or device should be automatically trusted, even inside the network perimeter.
What is Zero Trust?
This massive 2017 breach at a credit reporting agency exposed the personal data of nearly 147 million people due to an unpatched Apache Struts vulnerability.
What is the Equifax breach?
This tool is used to test web applications for vulnerabilities like SQL injection and XSS, and acts as an intercepting proxy between browser and server.
What is Burp Suite?