Clyvexis Simulators

What is it? Authentication verifies who a user or system is. MFA adds additional verification factors, such as a password plus a security code or security key. Why it matters: A stolen password is less useful to an attacker when another verification factor is required.

What is it? Phishing uses deceptive messages, websites, or other communication to trick people. Social engineering is the broader idea of manipulating people rather than relying only on technical flaws. Watch for: Urgency, unexpected requests, suspicious links, unusual sender addresses, and requests for sensitive information.

What is it? Networks allow devices and systems to communicate. DNS, or the Domain Name System, helps translate domain names into IP addresses. Why it matters: Understanding networking helps security analysts recognize unusual connections and network activity.

What is it? Malware is software designed to perform harmful or unauthorized actions. Examples: Viruses, worms, Trojans, ransomware, and spyware are different categories of malicious software. Defense: Security updates, endpoint protection, careful software installation, and monitoring can reduce risk.

Encryption: Encryption transforms readable data into protected ciphertext so unauthorized people cannot easily read it. Hashing: Hashing creates a fixed-size representation of data. Cryptographic hashes can help verify integrity and are used in many security systems.

What is it? A firewall monitors and controls network traffic according to configured security rules. Why it matters: Firewalls can help restrict unwanted connections and reduce the exposure of systems and services.

What is it? Incident response is the organized process of handling a cybersecurity incident. Common stages: Detection, analysis, containment, eradication, recovery, and lessons learned.

What are logs? Logs are records of events occurring within systems, applications, networks, and other technology environments. Why they matter: Analysts can compare timestamps, accounts, devices, and actions to understand what happened.

Good practice: Use unique, strong passwords for different accounts and avoid sharing passwords. Password managers: A password manager can help generate and store unique passwords so users do not have to memorize every one.

What is it? The principle of least privilege means giving users, applications, and systems only the permissions necessary to perform their tasks. Why it matters: Limiting permissions can reduce the potential impact of a compromised account or application.

What is it? Threat detection involves monitoring systems and identifying signs of potentially malicious or unauthorized activity. Examples: Unusual logins, unexpected processes, suspicious network connections, and repeated failed access attempts can all deserve investigation.

C — Confidentiality: Protect information from unauthorized access. I — Integrity: Keep information accurate and protected from unauthorized modification. A — Availability: Keep systems and information accessible to authorized users when needed.