MugUp logoMugUp
HomeBrowseAboutBlog
LoginSign Up
MugUp

Plan your day, study, read, write and track your habits in one app.

Follow MugUp

Product

  • Features
  • Compare
  • Free Tools
  • Deck Library
  • MugUp for Discord

Community

  • Blog
  • Changelog
  • Feature Requests
  • Deck Requests

Company

  • Home
  • About
  • Contact

© 2026 MugUp. All rights reserved.

Terms of ServicePrivacy PolicyCookie Policy
  1. Browse decks
  2. Security Engineering Fundamentals
Public deck

Security Engineering Fundamentals

What security engineers work on outside application code: security principles, threat modelling, cryptography, identity and network controls. It also covers finding vulnerabilities, detecting attacks, responding to incidents, and how malware and social engineering work.

Engineering
AShared by Alex Chen
0PlaySign in to clone

You’re reading a free preview. Sign up to see every topic and question — and to play this deck as games.

See the whole deck

Suggested order

Arrows point from what to learn first. Topics side by side can be studied in any order — and cloning the deck brings this order with it.

Topics

Open a topic to read through its content, then play just that topic.

Security Principles: CIA, Least Privilege and Defence in Depth
The basic ideas security decisions are built on: the CIA triad, least privilege, layered controls, the types of control, and how systems should behave when something fails.
MCQ: 10
Fill-in: 8
Flashcards: 12
Pair match: 10
40 total questions
Threat Modelling
How to look at a system design and work out what could go wrong: data flow diagrams, trust boundaries, STRIDE, attack trees and scoring risk.
MCQ: 10
Fill-in: 8
Flashcards: 12
Pair match: 10
40 total questions
Applied Cryptography
Using cryptography correctly: hashing, encoding and encryption, symmetric and public-key algorithms, signatures, key exchange, password storage and randomness.
MCQ: 11
Fill-in: 8
Flashcards: 12
Pair match: 10
Locked · 41 questions inside
Identity and Access Control
How people and programs prove who they are and get the right access: MFA, single sign-on with SAML and OIDC, RBAC and ABAC, admin access and the account lifecycle.
MCQ: 10
Fill-in: 8
Flashcards: 12
Pair match: 10
Locked · 40 questions inside
Network Security
Controls that protect networks: segmentation, firewalls and WAFs, IDS and IPS, VPNs, bastion hosts, zero trust network access and DDoS defence.
MCQ: 10
Fill-in: 8
Flashcards: 12
Pair match: 10
Locked · 40 questions inside
Vulnerability Management and Penetration Testing
Finding and fixing weaknesses: CVE, CWE and CVSS, deciding what to patch first, scanning, and how penetration tests, red teams and bug bounties differ.
MCQ: 10
Fill-in: 8
Flashcards: 12
Pair match: 10
Locked · 40 questions inside
Security Monitoring and Detection
Spotting attacks: which logs to collect, SIEM and EDR, tuning alerts, false positives and false negatives, and using MITRE ATT&CK to describe attacker behaviour.
MCQ: 10
Fill-in: 8
Flashcards: 12
Pair match: 10
Locked · 40 questions inside
Incident Response and Forensics
What to do when an attack happens: the incident response phases, containing and removing an attacker, collecting and protecting evidence, and learning from it afterwards.
MCQ: 10
Fill-in: 8
Flashcards: 12
Pair match: 10
Locked · 40 questions inside
Malware and Social Engineering
The main types of malware and the ways attackers trick people, from phishing and pretexting to fake USB drives, and how to defend against each.
MCQ: 10
Fill-in: 8
Flashcards: 12
Pair match: 10
Locked · 40 questions inside
7 more topics in this deck

Create a free account to open every topic — and play the whole deck without copying it.

Sign up freeLog in