AP®︎ Cybersecurity: Topic 2.3 Flashcards
Master key terms and definitions for Topic 2.3 of AP Cybersecurity – Protecting Physical Spaces to help you prep for quizzes and the AP exam.
Security Awareness Training
A managerial control that teaches employees to detect social engineering, avoid admitting others with their badges, and help prevent device theft
A managerial control that teaches employees to detect social engineering, avoid admitting others with their badges, and help prevent device theft
Psychological manipulation that induces a target to take an action benefiting an adversary
A managerial control specifying required protections for workplace devices, documents, and information, sometimes with stronger tiers for sensitive data
A lock on an active user session that prevents others from using an unattended, already-authenticated device
A requirement to remove or secure sensitive papers and exposed information when a workstation is unattended
A physical screen barrier that limits viewing from outside the intended position and mitigates shoulder surfing
A device that protects equipment from damaging voltage spikes but normally does not provide backup power
A limited backup power source that keeps devices operating briefly or allows an orderly shutdown when normal power fails
A physical barrier that defines a controlled perimeter and deters or restricts pedestrian approaches
A controlled passage point through a physical perimeter
A sturdy post that restricts vehicles from approaching entrances, equipment, or other protected areas
A restraint on a door, cabinet, or computer that helps prevent unauthorized entry, theft, or hardware access
An entry control that denies unauthorized badges and records which credential was used at a location and time
Piggybacking is knowingly admitting an unauthorized person; tailgating is an unauthorized person following without the authorized person’s awareness
A controlled two-door passage in which the first door generally closes before the second opens, limiting entry on one authorization
A physical entrance control that limits how many people can pass for each authorization
Blocking or limiting USB device access to prevent external drives or malicious peripherals from compromising a computer
A larger-scale backup power source that can support a building or critical systems during an extended outage
Identify the asset and vulnerability, trace its exploitation and CIA impact, choose a control that changes the attack, and evaluate remaining risk
Ranking relevant controls by risk severity and total cost so resources address the most consequential risks cost effectively
Using multiple complementary security layers so different attack paths are addressed and one control’s failure does not expose the asset
