What does 'cybersecurity' mean?

Protecting computer systems, networks, and data from unauthorized access, damage, or attack Building faster internet connections so data moves securely A type of antivirus software you install on your computer The rules that govern how websites must display their privacy policies

What is the 'CIA triad' in cybersecurity?

Confidentiality (only authorized people see data), Integrity (data isn't altered without authorization), Availability (systems are accessible when needed) Cybercrime, Investigation, and Arrests — the three steps in responding to a hack Computers, Internet, and Applications — the three things cybersecurity protects Classified, Internal, and Available — the three levels of data sensitivity

A hacker breaks into a hospital database and changes patient blood type records. Which part of the CIA triad is most violated?

Integrity — the data has been altered without authorization, making it unreliable and potentially deadly Confidentiality — patient records were accessed by an unauthorized person Availability — the hospital's systems are now offline and unusable None — the CIA triad only applies to business data, not medical records

A ransomware attack encrypts all of a company's files so employees can't access anything. Which part of the CIA triad is most violated?

Availability — the systems and data exist but employees cannot access them when needed Confidentiality — the attackers now have access to all company secrets Integrity — the files have been changed by the encryption process All three equally — ransomware always violates all CIA triad principles

Why does cybersecurity matter for everyday people — not just banks or governments?

Personal data (passwords, financial info, health records, photos) has real value to criminals and must be protected by individuals, not just organizations It doesn't — only organizations with large databases are worth hacking Only if you work in finance or government — regular people aren't targets Cybersecurity is automatically handled by your internet provider

What is 'social engineering' in cybersecurity?

Manipulating people psychologically to reveal information or take actions that compromise security — exploiting human behavior rather than technical weaknesses Using social media to spread malware through shared posts Building a community of ethical hackers who help improve security The engineering techniques used to build social media platforms securely

What is 'threat modeling'?

Identifying what assets you need to protect, who might want to attack them, how they might do it, and what defenses make the most sense Creating 3D models of network infrastructure to visualize security gaps A software tool that automatically detects threats on your network Predicting which countries will launch cyberattacks next

What is a 'vulnerability' in cybersecurity terms?

A weakness in a system, software, or process that could be exploited by an attacker to gain unauthorized access or cause harm Any computer that doesn't have antivirus software installed A type of malware that specifically targets outdated operating systems The emotional impact on employees when their company is hacked

Why are software updates important for cybersecurity?

Updates often include security patches that fix known vulnerabilities — running outdated software means attackers can exploit flaws the developer has already discovered and fixed Updates are only for adding new features — security is handled separately by antivirus Updates help companies collect more data about how you use their software Security updates only matter for servers and enterprise computers, not personal devices

What is 'defense in depth'?

Using multiple layers of security so that if one control fails, others are still in place — no single defense is relied upon as the only protection Installing the most advanced, expensive security software available Backing up data to multiple locations in case of a ransomware attack Hiring a team of security experts to monitor your network 24/7