Good practice
The eight measures of security hygiene: updates, least privilege, passwords and two-factor authentication, hardening, logging, backup, encryption of portable devices and phishing awareness.
- 29 cards
- 6 topics
- Free
The outline, topic by topic
Each topic is weighted the way the exam weighs it.
- Concepts
- Questions
- Sort and link
- On the timeline
- The numbers
- Scenarios
A few cards from the deck
Security hygiene: what is it?
Show the answer
A set of simple, regular measures that rule out most common attacks without any specialised tool.
Most compromises exploit a mundane flaw: an unpatched known vulnerability, a weak password, a careless click. These measures close them.
An urgent message from "your bank" shows a link whose text is the official address, but whose real address, on hover, is another domain. What should you do?
- Not click, and go to the site by typing its address
- Reply to the sender to ask whether the message is genuine
- Open the link in a private browsing window
- Click if the logo and layout look right
Show the answer
Not click, and go to the site by typing its address
A link's text commits to nothing, and a logo can be copied. Replying confirms the address is live. Private browsing does not stop you handing credentials to the fake site.
Applying security … without delay closes known vulnerabilities, which attackers often exploit as soon as the fix is published.
Show the answer
Applying security updates without delay closes known vulnerabilities, which attackers often exploit as soon as the fix is published.
The fix indirectly describes the flaw: the gap between its release and its installation is the window attacks take advantage of.
Phishing: what is it?
Show the answer
A message that imitates a trusted sender to push the recipient into handing over credentials or opening a malicious file.
The attack targets the person, not the machine: no firewall stops it. The clues are urgency, a lookalike domain and a link that leads elsewhere than its text.