`"}},{"@type":"Question","eduQuestionType":"Flashcard","name":"What is a Zero-Day Exploit?","text":"What is a Zero-Day Exploit?","acceptedAnswer":{"@type":"Answer","text":"An attack that exploits a previously unknown vulnerability in a computer application or operating system for which the developer has not yet released a patch. Attackers have 'zero days' to fix it."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"Identify common types of Threat Actors.","text":"Identify common types of Threat Actors.","acceptedAnswer":{"@type":"Answer","text":"Individuals or groups who pose a risk to an organization's security. Types include `script kiddies` (unskilled, use pre-made tools), `hacktivists` (political/social motives), `insiders` (current/former employees), `state-sponsored actors` (government-backed), and `Advanced Persistent Threats (APTs)` (sophisticated, long-term attacks)."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"What is Social Engineering?","text":"What is Social Engineering?","acceptedAnswer":{"@type":"Answer","text":"The psychological manipulation of people into performing actions or divulging confidential information. It relies on human error rather than technical vulnerabilities. Common techniques include pretexting, baiting, tailgating, and impersonation."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"Explain Pretexting as a social engineering technique.","text":"Explain Pretexting as a social engineering technique.","acceptedAnswer":{"@type":"Answer","text":"Creating a fabricated scenario (a 'pretext') to trick a victim into divulging information or granting access. The attacker often pretends to be someone with authority or a legitimate need for the information."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"What is Baiting?","text":"What is Baiting?","acceptedAnswer":{"@type":"Answer","text":"A social engineering attack that lures victims with a promise of something desirable (e.g., a free download, a USB drive left in a public place) to trick them into installing malware or revealing credentials."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"Describe Tailgating (or Piggybacking).","text":"Describe Tailgating (or Piggybacking).","acceptedAnswer":{"@type":"Answer","text":"A physical social engineering technique where an unauthorized person follows closely behind an authorized individual to gain access to a restricted area without proper authentication."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"What is Impersonation in social engineering?","text":"What is Impersonation in social engineering?","acceptedAnswer":{"@type":"Answer","text":"An attacker pretends to be someone else (e.g., an IT technician, a vendor, a new employee) to gain trust and access to information or systems."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"Describe the Vulnerability Management process.","text":"Describe the Vulnerability Management process.","acceptedAnswer":{"@type":"Answer","text":"The cyclical practice of identifying, classifying, prioritizing, remediating, and mitigating software and system vulnerabilities. Key steps include `identification` (scanning), `assessment` (risk analysis), `remediation` (patching, configuration changes), and `verification` (re-scanning)."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"What is Penetration Testing and its typical phases?","text":"What is Penetration Testing and its typical phases?","acceptedAnswer":{"@type":"Answer","text":"A simulated cyberattack against your computer system to check for exploitable vulnerabilities. Phases typically include `planning`, `reconnaissance` (information gathering), `scanning` (vulnerability identification), `gaining access`, `maintaining access`, and `covering tracks` (reporting)."}},{"@type":"Question","eduQuestionType":"Flashcard","name":"Explain Risk Assessment methodologies.","text":"Explain Risk Assessment methodologies.","acceptedAnswer":{"@type":"Answer","text":"The process of identifying potential risks, analyzing their likelihood and impact, and determining acceptable levels of risk. Methodologies include `Qualitative Risk Assessment` (subjective, uses categories like high/medium/low) and `Quantitative Risk Assessment` (objective, uses monetary values and probabilities)."}}]}]}CompTIA Security+ (SY0-601) - Threats, Attacks & Vulnerabilities Flashcards | Notum Learn
Flashcard Deck · 25 cards · Public

CompTIA Security+ (SY0-601) - Threats, Attacks & Vulnerabilities

Dominate the CompTIA Security+ (SY0-601) exam by mastering core cybersecurity threats, attack types, and vulnerability management. This high-yield deck covers essential concepts from malware to zero-day exploits, ensuring you're ready to protect digital assets.
Study Now (25 Cards) Browse Community

Cards in this deck

(25 cards)

Preview terms and definitions before starting your study session.

#1
Term
What is Malware?
Definition
Malicious software designed to disrupt, damage, or gain unauthorized access to a computer system. Common types include viruses, worms, Trojans, ransomware, spyware, and adware.
#2
Term
Define a Computer Virus.
Definition
A type of malware that attaches itself to legitimate programs or documents and requires a host program to execute. It self-replicates by inserting copies of itself into other computer programs, often without the user's knowledge.
#3
Term
Explain a Computer Worm.
Definition
A standalone malware computer program that replicates itself to spread to other computers. Unlike viruses, worms do not need to attach to an existing program and can spread independently across networks.
#4
Term
What is a Trojan Horse (Trojan)?
Definition
A type of malware that disguises itself as legitimate software or files. Trojans do not self-replicate but trick users into installing them, often creating backdoors for attackers to gain remote access.
#5
Term
Describe Ransomware.
Definition
Malware that encrypts a victim's files or locks their computer system, then demands a ransom payment (usually in cryptocurrency) for decryption or restoration of access.
#6
Term
What is Spyware?
Definition
Malware designed to secretly observe and record user activity without their knowledge or permission. It can collect personal information, browsing habits, and keystrokes.
#7
Term
What is Adware?
Definition
Software that automatically displays unwanted advertisements (pop-ups, banners) on a user's computer, often bundled with legitimate free software. While annoying, some forms can also track user data.
#8
Term
Define Phishing.
Definition
A social engineering technique where attackers attempt to trick individuals into revealing sensitive information (e.g., usernames, passwords, credit card details) by disguising themselves as a trustworthy entity in electronic communication.
Showing 8 of 25 cards in this deck.
Study All Now

Related Flashcard Sets

Explore similar study materials created by the community

Browse community decks
Deck · 25 cards

JLPT N5 - Essential Grammar & Kanji

Master essential Japanese grammar, particles, and the first 100 Kanji with this comprehensive JLPT N5 flashcard deck. Build a strong foundation for your language journey and confidently tackle basic conversations and texts.

Study flashcards Study set
Deck · 25 cards

Kubernetes Fundamentals & Container Orchestration

Master Kubernetes fundamentals and container orchestration with this high-yield flashcard deck. Dive into core concepts, architecture, key objects, and essential `kubectl` commands to confidently deploy and manage applications at scale.

Study flashcards Study set
Deck · 25 cards

Pharmacology - Drug Classes & Mechanisms of Action

Master essential pharmacology with this high-yield deck covering major drug classes, their therapeutic uses, and detailed mechanisms of action. Dive deep into pharmacokinetics, pharmacodynamics, and key molecular targets to ace your exams.

Study flashcards Study set
Deck · 23 cards

Harvard CS50 Web Programming with Python and JavaScript

Master full-stack web development with this high-yield flashcard deck covering Harvard CS50W's core concepts. Dive into HTML5, CSS3, JavaScript, Python/Django, SQL, and React to build dynamic, data-driven web applications.

Study flashcards Study set