AP®︎ Cybersecurity: Topic 2.2 Flashcards

Master key terms and definitions for Topic 2.2 of AP Cybersecurity – Physical Vulnerabilities and Attacks to help you prep for quizzes and the AP exam.

0%
17 cards total
17 not started
0 learning
0 almost done
0 mastered
Term

Asset

Definition

Something valuable that must be protected, such as a device, data, facility, or service

1 / 17
Asset
Not Started

Something valuable that must be protected, such as a device, data, facility, or service

2.2.B
Threat
Not Started

A person, event, or condition capable of causing harm; physical threats include human adversaries and natural disasters

2.2.B2.2.B.1
Physical Vulnerability
Not Started

A weakness or flaw in a physical environment, facility, device, or information-handling practice that a threat could exploit

2.2.B2.2.B.2
Risk
Not Started

The possibility that a threat will exploit a vulnerability and compromise an asset

2.2.C
Attack
Not Started

An action taken by a human adversary to exploit a vulnerability and compromise an asset

2.2.A
Likelihood
Not Started

The chance that a threat will exploit a vulnerability

2.2.C
Impact
Not Started

The damage that would result if a threat exploited a vulnerability, such as data loss, service disruption, or equipment destruction

2.2.C
Piggybacking
Not Started

Using social engineering to manipulate an authorized person into granting access to a restricted area

2.2.A2.2.A.2
Tailgating
Not Started

Entering a restricted area by following close behind an authorized person without that person's awareness or knowledge

2.2.A2.2.A.3
Shoulder Surfing
Not Started

Watching or recording a user accessing sensitive information so it can be used later

2.2.A2.2.A.4
Dumpster Diving
Not Started

Searching a target's physical trash for information that can help achieve an attack objective

2.2.A2.2.A.5
Card Cloning
Not Started

Copying an authorized user's access card so the duplicate can access resources permitted to the original credential

2.2.A2.2.A.6
Keylogger
Not Started

A device attached to a computer that records a user’s keystrokes to capture credentials or other information

2.2.B2.2.B.5
Physical Risk Assessment
Not Started

Identify the asset, threat, vulnerability, exploitation method, consequences, likelihood, impact severity, and justified risk rating

2.2.C
High Physical Risk
Not Started

Risk in which sensitive information or critical systems are physically exposed without sufficiently restricted and controlled access

2.2.C2.2.C.2
Moderate Physical Risk
Not Started

Risk in which an exposed noncritical or nonsensitive asset could provide a foothold for access to more valuable resources

2.2.C2.2.C.3
Low Physical Risk
Not Started

Risk in which the vulnerable asset has low value, exploitation is unlikely, and the resulting harm would be limited

2.2.C2.2.C.4