Big Idea 5 · Topic 5.6 · Exercise 2
Attack Triage
25 minutes - 5 incidents - LO IOC-2.B, IOC-2.C
Back to the Topic 5.6 lessonAll CSP topics
How this page works
The writing boxes below are yours. What you type stays in this browser, is saved here as you go, and is never sent to us or to your teacher. Hand the written work in the way your teacher asked for it.
The graded check at the bottom is the part that records to your teacher's gradebook.
The cases, from your handoutNot recorded
The same cases as your handout, in the same order.
Scenario 1 · Foundational
An email from '[email protected]' (look closely at that capital I) warns that mailboxes over quota will be deleted tonight, and links to a login page that mirrors the district portal pixel for pixel. Three staff members entered their passwords before lunch.
Sign check (the tells in this report):
Mechanism + defense (CED attack name, how it works, what blocks it):
Enrichment sub-type (the specific variant at work):
Scenario 2 · Foundational
A student installed a free 'FPS booster' from a shareware site. Since then the gaming account, then the email, then a streaming account have each been hijacked - in exactly the order the student logged into them after the install.
Sign check (the tells in this report):
Mechanism + defense (CED attack name, how it works, what blocks it):
Enrichment sub-type (the specific variant at work):
Scenario 3 · Core
At an away debate tournament, students find two networks: 'GuestWiFi' and 'GuestWiFi_FAST.' The second has full bars and no password. A coach later reports that pages submitted over it - including a payment form - threw odd certificate warnings.
Sign check (the tells in this report):
Mechanism + defense (CED attack name, how it works, what blocks it):
Enrichment sub-type (the specific variant at work):
Scenario 4 · Core
The robotics captain's account emails the whole team 'our updated parts list' as an attachment named parts_list.pdf.exe. The captain is standing in the room and sent nothing. Two members already opened it.
Sign check (the tells in this report):
Mechanism + defense (CED attack name, how it works, what blocks it):
Enrichment sub-type (the specific variant at work):
Scenario 5 · Challenge
Hunting for a free PDF converter, a teacher gets a pop-up: 'Your video player is 3 versions out of date - Update Now,' which downloads player_update.exe. The real player updates itself through the OS store. Meanwhile, the district has postponed all OS security updates for a month to 'avoid disruption.'
Sign check (the tells in this report):
Mechanism + defense (CED attack name, how it works, what blocks it):
Enrichment sub-type (the specific variant at work):
No graded check on this page yetNot recorded
About the line in your handout
Your handout says this exercise is available online and auto-graded. The exercise IS here, and it is the same work in the same order, but the auto-graded half is not written for this topic yet. Nothing on this page is scored or sent to your teacher.
Hand this in the way your teacher asked for it. Topic 1.1 has its graded check today, and the rest follow.