What security engineers work on outside application code: security principles, threat modelling, cryptography, identity and network controls. It also covers finding vulnerabilities, detecting attacks, responding to incidents, and how malware and social engineering work.
You’re reading a free preview. Sign up to see every topic and question — and to play this deck as games.
The basic ideas security decisions are built on: the CIA triad, least privilege, layered controls, the types of control, and how systems should behave when something fails.
40 total questions
Card #1
Least privilege
Card #2
Defence in depth
Card #3
Separation of duties
1. A flood of traffic from thousands of hijacked devices takes your online shop offline for six hours. Which part of the CIA triad was mainly harmed?
2. An attacker intercepts an invoice email and changes the bank account number before it reaches the customer. Which security property was violated?
3. A laptop holding an unencrypted copy of the customer database is stolen from a car. Which property is most at risk?
1. A ___ is a weakness in a system that a threat could exploit.
Hint: A flaw or gap
2. An ___ is code or a technique that takes advantage of a weakness to cause harm.
Hint: What attackers use against a flaw
3. Giving an analyst access only to the specific case files they are working on applies the principle of ___.
Hint: Three words about necessity
