Module 1: Threats, Vulnerabilities, and Social Engineering
Week of Tue, Sep 22 · module closes Sun, Oct 4 · 100 points
Take Meerk's quiz for Module 1
This module's items
- M1 Quizdue Fri, Oct 2 · 50 pts
- M1 Labdue Sun, Oct 4 · 50 pts
Exact due times are in Canvas.
Know these cold
- Threat actors: nation-state (sophisticated, persistent), hacktivist (ideological), organized crime (financial), insider threat (privileged access), script kiddie (low skill, automated tools).
- Attack vectors: phishing (email), vishing (phone), smishing (SMS), spear phishing (targeted), whaling (executives), pretexting (fabricated scenario).
- Malware categories: virus (requires host file), worm (self-propagating), ransomware (encrypts data), RAT (remote access), rootkit (hides in OS), spyware (collects data).
- Vulnerability scanning identifies known weaknesses; penetration testing actively exploits them to assess real-world risk.
- MITRE ATT&CK framework catalogs adversary tactics, techniques, and procedures (TTPs) used in real attacks.
Meerk's quiz — open the Module 1 gate
10 questions, no time limit. 85% on your first attempt in a 24-hour window opens the gate. Retakes inside the window are practice — they help you learn, they don't count. Work alone; the point is to know it, not to have seen it.
Dinner Table Question
Ask at home: Have you or someone you know ever received a phishing message? How did you recognize it?
En español: ¿Tú o alguien que conoces ha recibido un mensaje de phishing? ¿Cómo lo reconocieron?