Attack surfaces and vectors in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is an attack surface in cybersecurity?

An attack surface is all the points where an unauthorized user can try to enter or extract data from a system. It includes all the ways a system can be attacked.

beginner

Define attack vector.

An attack vector is the method or path used by a hacker to gain access to a system or network. It is how the attack is carried out.

beginner

Give an example of an attack surface in everyday technology.

An example is a smartphone's Wi-Fi connection. If it is open or weakly secured, it can be an attack surface where hackers try to connect and steal data.

intermediate

Why is reducing the attack surface important?

Reducing the attack surface means fewer ways for attackers to get in. This lowers the chance of a successful attack and makes systems safer.

intermediate

Name three common attack vectors.

Common attack vectors include phishing emails, unsecured Wi-Fi networks, and malware-infected websites.

What does the term 'attack surface' refer to?

A All possible points where a system can be attacked

B The tool used to attack a system

C The damage caused by an attack

D The software that protects a system

The attack surface is all the points where an attacker can try to enter or extract data from a system.

Which of the following is an example of an attack vector?

A The speed of an internet connection

B The total number of users on a network

C The physical size of a computer

D A hacker's method to access a system

An attack vector is the method or path used by an attacker to gain access.

Why should organizations reduce their attack surface?

A To lower the chances of being attacked

B To make the system slower

C To increase the number of users

D To add more features

Reducing the attack surface lowers the number of ways attackers can enter, making attacks less likely.

Which of these is NOT a common attack vector?

A Unsecured Wi-Fi

B Strong passwords

C Malware websites

D Phishing emails

Strong passwords help protect systems and are not attack vectors.

An open Wi-Fi network is an example of what?

A Encryption method

B Attack vector

C Attack surface

D Firewall

An open Wi-Fi network is a point where attackers can try to enter, so it is part of the attack surface.

Explain in your own words what an attack surface is and why it matters in cybersecurity.

Think about all the ways someone could try to break into your phone or computer.

Describe what an attack vector is and give two examples.

Consider how hackers actually get into systems, not just where they can try.