In the school example, which asset hurts most if lost?
- A public club timetable
- Pupil records
- Canteen price sheets
What must you name before choosing defences?
- Assets, adversaries, crossings
- Firewalls, filters, and scanners
- Logins, passwords, and updates
Every defence should answer one named threat.
Circle one: True False
Where do you mark a trust boundary?
- Where data moves to a new folder
- Where trust or control changes
- Where data is copied in one account
A message asks for your password on a copied page. Who is the adversary?
- The school mail server
- Phishers
- A pupil who mistyped a password
How do you rank two assets?
- By cost of loss
- By alphabetical name order
- By file size, largest first
Which defence answers phishers in the school example?
- Reply with your password to confirm
- Forward the mail to everyone you know
- Check the sender, open the known app
A pricey filter stops no named threat. What do you do?
- Keep the filter and add more rules
- Buy a larger filter of the same kind
- Defend a crossing that needs it
Name it before you defend it W1-mt_VRXTkrNFvx-s1
- Pupil records · In the school example, pupil records cost far more than a public timetable or price sheets when lost.
- Assets, adversaries, crossings · The three names aim every later defence at a real risk.
- True · Matching keeps effort on real risks instead of vague worries.
- Where trust or control changes · A boundary is where trust or control changes, so protection sits there.
- Phishers · Fake pages harvesting logins are the phisher method.
- By cost of loss · Loss cost decides where protection effort lands first.
- Check the sender, open the known app · A sender check plus sign-in in the known app starves the fake page.
- Defend a crossing that needs it · Unmatched effort should move to a crossing with a real adversary.