Week 14 vocabulary deck
Threats, Malware Response, and Secure Client Systems
Say the definition before you flip. Use the example and distinction to repair fuzzy terms, then take the separate vocabulary quiz.Vocabulary lab
Flip the idea, not just the card
Explain the term before you reveal the back. Then compare your explanation with the definition, example, and warning.
Read all terms without animation
- phishing
- Phishing uses deceptive messages or sites to trick users into revealing information or taking unsafe actions. Example: A fake password-reset message directs a user to an imitation sign-in page. Do not confuse it with: Do not confuse phishing with a technical exploit that requires no user deception.
- ransomware
- Ransomware is malware that blocks access to data or systems, commonly through encryption, to demand payment or leverage. Example: Files become unreadable after malicious encryption runs on a workstation. Do not confuse it with: Do not confuse ransomware with ordinary file corruption.
- Trojan
- A Trojan is malicious software disguised as or bundled with something that appears legitimate. Example: A user installs a fake utility that also installs malware. Do not confuse it with: Do not confuse a Trojan with a worm; a Trojan relies on deceptive delivery rather than self-propagation.
- rootkit
- A rootkit is malware designed to hide malicious activity and maintain privileged access. Example: System components are manipulated to conceal an attacker's presence. Do not confuse it with: Do not confuse a rootkit with a standard administrative tool.
- spyware
- Spyware secretly collects information about a user or system. Example: Malware records browsing activity and sends it to an unauthorized party. Do not confuse it with: Do not confuse spyware with legitimate monitoring that has authorization and disclosure.
- PUP
- A potentially unwanted program is software that may be unwanted, intrusive, or bundled even if it is not classified the same way as traditional malware. Example: A free installer adds an unwanted browser toolbar and ad software. Do not confuse it with: Do not confuse every PUP with destructive malware; the classification is different.
- social engineering
- Social engineering manipulates people into bypassing normal security behavior or controls. Example: An attacker impersonates support staff and asks a user for a verification code. Do not confuse it with: Do not confuse social engineering with a purely technical vulnerability.
- quarantine
- Quarantine isolates a suspicious file or object so it cannot operate normally while it is reviewed. Example: Endpoint protection moves a detected file into an isolated area. Do not confuse it with: Do not confuse quarantine with permanent deletion.
- remediation
- Remediation is the controlled action taken to remove, correct, or reduce a confirmed security problem. Example: A verified malicious application is removed and affected settings are repaired. Do not confuse it with: Do not confuse remediation with initial detection; remediation happens after evidence supports action.
- secure erase
- Secure erase is a sanitization method intended to make stored data unrecoverable using an appropriate device-supported process. Example: A retired SSD is sanitized using an approved secure-erase method before disposal. Do not confuse it with: Do not confuse secure erase with sending files to the recycle bin.