Continue your lesson
Connect each term to the asset, threat, control, and evidence it affects.
Block 1 of 1Compare Phishing · Removable media vector · Exposed service · Supply-chain compromise
Current · 15 min
Compare Phishing · Removable media vector · Exposed service · Supply-chain compromise
Optional concept notes
Phishing
Uses deceptive messages to make recipients disclose information or act.
Removable media vector
Introduces malicious content through portable connected storage devices.
Exposed service
Presents a remotely reachable port or application for attack.
Cross-certificationA+ ↔ Net+ ↔ Sec+
Remote administration services
RDP and SSH both support remote administration, but they are not interchangeable. RDP is graphical and normally uses TCP/UDP 3389; SSH is command-line access over TCP 22. Security+ adds the question of whether either service should be exposed at all.
Supply-chain compromise
Reaches a target through a trusted supplier or dependency.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Practice the reasoning here
Use a fictional organization. Name the risk, choose the narrowest useful control, and state what evidence would prove the control worked.
- State the expected result before changing or testing anything.
- Name the observation, command, log, or report that would confirm it.
- Explain why the closest alternative does not fit the same requirement.
Check the whole objective
This unlocks objective 2.2 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.