2.1 Cyber Foundations（网络基础）

LO 7 · EK 40 ｜ 严格按大纲顺序学习

▶ 从第一个 EK 开始看课件（幻灯片，可翻页/全屏） 点击下方任意 EK 编号（如 2.1.A.1）也可直接进入对应课件页

学习目标 Learning Objectives

2.1.A Identify social engineering attacks.

- [2.1.A.1](/ek/2.1.A.1) — Social engineers use psychological tactics to manipulate targets into taking a desired action.… - [2.1.A.2](/ek/2.1.A.2) — Pretexting is when adversaries create a believable reason to contact a target.… - [2.1.A.3](/ek/2.1.A.3) — Authority is when adversaries impersonate someone with power over a target or pretend to relay i… - [2.1.A.4](/ek/2.1.A.4) — Intimidation is when adversaries state negative consequences if demands aren’t met.… - [2.1.A.5](/ek/2.1.A.5) — Consensus is when adversaries create social pressure by making a target believe everyone else is… - [2.1.A.6](/ek/2.1.A.6) — Scarcity is when adversaries create a sense of limited availability.… - [2.1.A.7](/ek/2.1.A.7) — Familiarity is when adversaries pretend to be or know someone close to a target to establish tru… - [2.1.A.8](/ek/2.1.A.8) — Urgency is when adversaries create a deadline that requires quick action by a target to avert ne…

2.1.B Identify types of adversaries.

- [2.1.B.1](/ek/2.1.B.1) — Script kiddies are low-skilled adversaries who use tools developed by others without understandi… - [2.1.B.2](/ek/2.1.B.2) — Hacktivists are motivated by social, political, or personal causes. They compromise computers an… - [2.1.B.3](/ek/2.1.B.3) — Insider adversaries are unique threats because they have legitimate credentials and access to sy… - [2.1.B.4](/ek/2.1.B.4) — Cyberterrorists are motivated by politics or beliefs and seek to disrupt entire communities, reg… - [2.1.B.5](/ek/2.1.B.5) — Transnational criminal organizations seek financial gain primarily by deploying ransomware and s…

2.1.C Describe the phases of a cyberattack.

- [2.1.C.1](/ek/2.1.C.1) — Cyberattacks aim to disrupt, harm, steal, or destroy devices, networks, or data. Adversaries wor… - [2.1.C.2](/ek/2.1.C.2) — In the reconnaissance phase of an attack, adversaries gather as much information as possible abo… - [2.1.C.3](/ek/2.1.C.3) — In the initial-access phase of an attack, adversaries establish a foothold on the target’s compu… - [2.1.C.4](/ek/2.1.C.4) — After gaining access during an attack, adversaries establish persistence to maintain access with… - [2.1.C.5](/ek/2.1.C.5) — In the lateral-movement phase of an attack, adversaries try to escalate their privileges by acce… - [2.1.C.6](/ek/2.1.C.6) — In the taking-action phase of an attack, adversaries act on their objectives by collecting targe… - [2.1.C.7](/ek/2.1.C.7) — In the final phase of an attack, many adversaries try to evade detection by removing or editing …

2.1.D Describe the risk assessment process.

- [2.1.D.1](/ek/2.1.D.1) — Risk occurs when a threat can exploit a vulnerability to compromise an asset.… - [2.1.D.2](/ek/2.1.D.2) — An asset is anything valuable. Assets include financial resources, intellectual property, data, … - [2.1.D.3](/ek/2.1.D.3) — Risk assessment considers two factors: Bullet The likelihood of an attack against a specific vul… - [2.1.D.4](/ek/2.1.D.4) — The likelihood of a vulnerability being exploited depends on many factors, including: Bullet The… - [2.1.D.5](/ek/2.1.D.5) — The severity of an attack is often measured by financial cost, which can also include reputation… - [2.1.D.6](/ek/2.1.D.6) — The result of a risk assessment can be quantitative or qualitative. Bullet Quantitative risk ass… - [2.1.D.7](/ek/2.1.D.7) — Risk assessment documentation should include: Bullet Vulnerable assets and their value Bullet De…

2.1.E Identify strategies for managing risk. Bullet An explanation of the severity of damage (financial, operational, reputational, etc.) if a specific asset were compromised, and the likelihood of that compromise occurring Bullet A final rating, quantitative or qualitative, for each risk identified ILLUSTRATIVE EXAMPLES Bullet Scaled score (e.g., 1–10) Bullet Monetary value (e.g., a $10,000 risk vs. a $100,000 risk)

- [2.1.E.1](/ek/2.1.E.1) — Once a risk has been identified and assessed, an organization has four options for managing that… - [2.1.E.2](/ek/2.1.E.2) — Risk avoidance stops the activity that is generating the risk. If the activity is a critical par… - [2.1.E.3](/ek/2.1.E.3) — Risk transference places the burden of the risk on another entity, such as an insurance company,… - [2.1.E.4](/ek/2.1.E.4) — Risk mitigation implements security controls to reduce the likelihood or impact of a risk.… - [2.1.E.5](/ek/2.1.E.5) — Residual risk is the risk that remains after an organization has gone through avoidance, transfe… - [2.1.E.6](/ek/2.1.E.6) — To conserve financial resources and employee capacity, an organization will often favor solution…

2.1.F Identify types of security controls.

- [2.1.F.1](/ek/2.1.F.1) — Security controls address at least one of the following principles: Bullet Confidentiality ensur… - [2.1.F.2](/ek/2.1.F.2) — Security controls can be classified by type. Bullet Physical controls provide security in the ph… - [2.1.F.3](/ek/2.1.F.3) — Security controls can be classified by function. Bullet Preventative controls address potential …

2.1.G Identify social engineering attacks. Identify types of adversaries. Describe the phases of a cyberattack. Describe the risk assessment process. Identify strategies for managing risk. Identify types of security controls. Explain why a defense-in-depth security strategy is necessary to optimally protect an organization. 8 2.2 Physical Vulnerabilities and Attacks

- [2.1.G.1](/ek/2.1.G.1) — A defense-in-depth strategy, or layered defense, uses multiple types of security controls to pro… - [2.1.G.2](/ek/2.1.G.2) — A defense-in-depth strategy allows an organization to address different types of threats, each w… - [2.1.G.3](/ek/2.1.G.3) — A defense-in-depth strategy allows for resilience in data protection so when one security contro… - [2.1.G.4](/ek/2.1.G.4) — Layers in a defense-in-depth strategy can include human, physical, network, device, application,…

---

← 返回单元 Unit 2