Chapter 1
General Security Concepts
Course: Comptia Security Sy0 701
Subject: Comptia Security Sy0 701.,
Chapter: Threats Vulnerabilities And Mitigations 5514 10404
Lesson 2: Threat Vectors & Attack Surfaces
In this lesson, we will explore the various threat vectors and attack surfaces that cyber attackers exploit to compromise systems and networks. Understanding these vectors is crucial for identifying potential vulnerabilities and defending against different types of attacks.
We will cover a wide range of attack methods, including message-based threats, social engineering techniques, and file-based attacks, to help you recognize and mitigate risks in your environment.
By the end of this lesson, you should be able to:
- Understand and explain message-based threats such as phishing, smishing, vishing, and spam.
- Identify the risks associated with unsecure networks, including man-in-the-middle attacks, rogue APs, and packet sniffing.
- Recognize various social engineering tactics like pretexting, baiting, tailgating, and shoulder surfing.
- Describe file-based attacks, including malicious attachments and macro viruses, and their impact on systems.
- Explain voice call threats like vishing and deepfake audio, and how they affect security.
- Understand the risks associated with supply chain attacks and compromised software/hardware.
- Recognize vulnerabilities in software, particularly unpatched applications and legacy systems.