An employee receives an email that appears to come from their company’s IT department, asking them to log in to a portal to “verify unusual activity.” The login page looks identical to the real system. After entering credentials, nothing happens. What type of attack most precisely occurred?

What is the base rate in Signal Detection Theory?

A company updates its phishing training after noticing an increase in AI-generated phishing emails. Which principle of effective risk management is demonstrated?

What is a defining feature of Role-Based Access Control (RBAC)?

What is the difference between active failures and latent conditions in the Swiss Cheese Model?

An organization is evaluating whether to invest in a new security system. Leadership considers both how likely a cyberattack is and how damaging it would be if it occurred. What concept are they applying?

What is the correct order of the access control process?

What does “satisficing” mean?

What does authentication specifically do?

What is the primary goal of Identity and Access Management (IAM)?