CYBER.ORG: AP Cybersecurity – Lesson 18- Topic 6.2.2 – Securing Devices

Objective:

  • Students will:
    • Define and explain key security measures for devices, including authentication, anti-malware, firewalls, updates, and physical protection.
    • Describe how each method contributes to overall device and data security.
    • Evaluate the effectiveness of various physical security controls.

Standards:

CompTIA Security+ SYO-701 Objectives:

  • 6.2 – Explain methods to secure devices and security best practices.
  • Securing devices (mobile/workstation)
    • Authentication
    • Anti-malware
    • Firewall
    • Patching/updating
    • Physical device security
      • Cable locks
      • USB locks

Guiding Question:

  • What steps can be taken to secure personal and workplace devices from both digital and physical threats?

Resources:

  • Lesson Slides Lesson 6.2.1 – Security Awareness.pptx and Activity
    6.2.1 – Security Awareness
    .pptx
    available on Google Classroom

Assignment:

  1. Follow along with the Lesson 6.2.2 – Securing Devices.pptx presentation in today’s class.
  2. Complete the Activity 6.2.2 – Secure That Device!.pptx in class using the materials provided.
  3. Complete the Activity 6.2.2 – Secure That Device! using the Student Handout Tech 6.2.2 document available in the Google Classroom.

Posted: October 29th, 2026
Teacher Pacing Due Date: October 30th, 2026

CYBER.ORG: AP Cybersecurity – Lesson 17 – Topic 6.2.1 – Security Awareness

Objective:

  • Students will:
    • Define social engineering and explain its connection to phishing.
    • Identify different types of phishing attacks.
    • Explain what malicious or compromised content is and how it is used in attacks.
    • Identify signs of phishing and compromised content.

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 6.2 – Explain methods to secure devices and security best practices.
    • Security awareness
      • Social engineering
        • Phishing
      • Malicious or compromised content

Guiding Question:

  • How can understanding phishing and other vectors for malicious content help you protect yourself and others from social engineering attacks?

Resources:

  • Lesson Slides Lesson 6.2.1 – Security Awareness.pptx and Activity
    6.2.1 – Security Awareness
    .pptx
    available on Google Classroom

Assignment:

  1. Follow along with the Lesson 6.2.1 – Security Awareness.pptx presentation in today’s class.
  2. Complete the Activity 6.2.1 – Security Awareness.pptx in class using the materials provided.
  3. Complete your Security Awareness Poster in class today, and we will display and present the completed posters in class tomorrow!

Posted: October 27th, 2026
Teacher Pacing Due Date: October 28th, 2026

CYBER.ORG: AP Cybersecurity – Lesson 16 – Topic 2.4.10 Wireless, On Path, And Replay Attacks & Lab – Session Replay

Objective:

  • Students will analyze potential indicators associated with network attacks.

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 2.4 – Given a scenario, analyze indicators of malicious activity.
    • Network Attacks
      • Wireless
      • On-path
      • Credential replay
      • Malicious code

Guiding Question:

  • What are common wireless network attacks and how can you defend against them?

Resources:

  • Lesson Slides Lesson 2.4.10 – Wireless, On-Path, and Replay Attacks.pptx and Lab – Session Replay.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson 2.4.10 – Wireless, On-Path, and Replay Attacks.pptx presentation in today’s class.
  2. Complete the Lab – Session Replay in class using the materials provided in Google Classroom.
  3. To confirm completion the lab activity, upload a screenshot displaying your successful login to the DVWA session on the Kali Linux machine to today’s Google Classroom post.

Posted: October 23rd, 2026
Teacher Pacing Due Date: October 26th, 2026

CYBER.ORG: AP Cybersecurity – Lesson 15 – Topic 2.2.1 – Common Attack Surfaces & Case Study – Wireless Security

Objective:

  • Students will:
    • Compare and contrast various types of threat vectors.

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 2.2 Explain common threat vectors and attack surfaces.
    • Message-based
      • Email
      • Short Message Service (SMS)
      • Instant messaging (IM)
    • Image-based
    • File-based
    • Unsecure networks
      • Wireless
      • Wired
      • Bluetooth
    • Open service ports
    • Default credentials
    • Supply chain
      • Managed service providers (MSPs)
      • Vendors
      • Suppliers
    • Removable device
    • Vulnerable software
      • Client-based vs agentless
    • Unsupported systems and applications

Guiding Question:

  • What are some different attack surfaces and threat vectors?

Resources:

  • Lesson Slides Lesson 2.2.1 – Common Attack Surfaces.pptx and Case Study – Wireless Security.pdf available on Google Classroom

Assignment:

  1. Follow along with the Lesson 2.2.1 – Common Attack Surfaces.pptx presentation in today’s class.
  2. Complete the Case Study – Wireless Security.pdf Lab Activity using the Case Study 2.2.1 – Wireless Security Responses document available in the Google Classroom.

Posted: October 22nd, 2026
Teacher Pacing Due Date: October 23rd, 2026

CYBER.ORG: AP Cybersecurity – Lesson 14 – Topic 8.3.1 – Wireless, Mobile & VPNs

Objective:

  • Students will:
    • Identify three methods of wireless connectivity
    • Explain three Bluetooth threats and how to mitigate them
    • Explain wireless threats and how to mitigate them
    • Explain how a virtual private network (VPN) works
    • Examine how encryption is an effective protection against message interception

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 2.2 Explain common threat vectors and attack surfaces.
    • Unsecure networks
      • Wireless
  • 2.4 Given a scenario, analyze indicators of malicious activities
    • Network attacks
      • Wireless
  • 3.3 Given a scenario, apply security principles to secure enterprise infrastructure.
    • Secure communication/access
      • Virtual private network (VPN)

Guiding Question:

  • What are some of the threats of wireless internet and how can they be mitigated?

Resources:

  • Lesson Slides Lesson Slides 8.3.1 – Wireless, Mobile & VPNs.pptx and Lab PPT 8.3.1 – SSH Tunneling for Privacy.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson Slides 8.3.1 – Wireless, Mobile & VPNs.pptx presentation in today’s class.
  2. Complete the Lab PPT 8.3.1 – SSH Tunneling for Privacy.pptx Lab Activity using the Lab Worksheet 8.3.1 – SSH Tunneling for Privacy document available in the Google Classroom.

Posted: October 19th, 2026
Teacher Pacing Due Date: October 20th, 2026

CYBER.ORG: AP Cybersecurity – Lesson 13 – Topic 8.2.1 – Spoofing & Sniffing

Objective:

  • Students will:
    • Define spoofing based attacks including ARP poisoning, IP spoofing and DNS spoofing
    • Identify how spoofing is used for AiTM and DDoS attacks
    • Identify methods of securing against spoofing

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 2.4 Given a scenario, analyze indicators of malicious activity.
    • Network attacks
    • Distributed denial-of-service attacks
    • On-path (AiTM)
  • 3.1 Compare and contrast security implications of different architecture models.
    • Considerations – Availability

Guiding Question:

  • What types of attacks can be executed using networked systems and how can we identify and secure against spoofing attacks??

Resources:

  • Lesson Slides Lesson 8.2.1 – Spoofing & Sniffing.pptx and Lab PPT 8.2.1 – ARP Spoofing for DoS and AiTM Attacks.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson 8.2.1 – Spoofing & Sniffing.pptx presentation in today’s class.
  2. Complete the Lab PPT 8.2.1 – ARP Spoofing for DoS and AiTM Attacks.pptx Lab Activity using the Lab Worksheet 8.2.1 – ARP Spoofing for DoS and AiTM Attacks document available in the Google Classroom.

Posted: October 13th, 2026
Teacher Pacing Due Date: October 14th, 2026

CYBER.ORG: AP Cybersecurity – Lesson 12 – Topic 2.1.1 – Threat Actors & Case Study – Stuxnet

Objective:

  • Students will analyze threat actors and their motivations.

Standards:

  • CompTIA Security+ SYO-701 Objective:
  • 2.1 – Compare and contrast common threat actors and motivations
    • Threat actors
      • Nation-state
      • Unskilled attacker
      • Hacktivist
      • Insider threat
        • Organized crime
      • Shadow IT
    • Attributes of actors
      • Internal/external
        • Resources/funding
      • Level of sophistication/capability
    • Motivations
      • Data exfiltration
      • Espionage
      • Service disruption
      • Blackmail
      • Financial gain
      • Philosophical/political beliefs
      • Ethical
      • Revenge
      • Disruption/chaos
      • War

Guiding Question:

  • What are threat actors and their motivations?

Resources:

  • Lesson Slides Lesson 2.1.1 – Threat Actors.pptx and Case Study – Stuxnet.pdf available on Google Classroom

Assignment:

  1. Follow along with the Lesson 2.1.1 – Threat Actors.pptx presentation in today’s class.
  2. Complete the Case Study – Stuxnet.pdf Activity using the Case Study
    2.1.1 – Threat Actors Question Responses
     document available in the Google Classroom.

Posted: September 30th, 2026
Teacher Pacing Due Date: October 1st, 2026

CYBER.ORG: AP Cybersecurity – Lesson 11 – Topic 4.6.2 – Multifactor Authentication (MFA) & Case Study – Biometrics

Objective:

  • Students will investigate common methods to manage access.

Standards:

  • CompTIA Security+ SYO-701 Objective:
  • 4.6 – Given a scenario, implement and maintain identity and access management
  • Multifactor authentication
    • Implementations
      • Biometrics
      • Hard/soft authentication tokens
      • Security keys
    • Factors
      • Something you know
      • Something you have
      • Something you are
      • Somewhere you are

Guiding Question:

  • What are some common implementations of multifactor authentication?

Resources:

  • Lesson Slides Lesson 4.6.2 – Multifactor Authenticaion (MFA).pptx and Case Study – Biometrics.pdf available on Google Classroom

Assignment:

  1. Follow along with the Lesson 4.6.2 – Multifactor Authentication (MFA).pptx presentation in today’s class.
  2. Complete the Case Study – Biometrics.pdf Activity using the Case Study 4.6.2 – Biometrics Question Responses document available in the Google Classroom.

Posted: September 29th, 2026
Teacher Pacing Due Date: September 30th, 2026

CYBER.ORG: AP Cybersecurity – Lesson 10 – Topic 3.3.2 – Technical Controls and Attacks 2 & Brute Forcing with Metasploit Lab

Objective:

  • Students will:
    • Define and categorize technical controls and how they relate to other control types.
    • Examine ways to implement technical controls that prevent and deter attacks.
    • Recognize common attacks and how technical controls mitigate them.

Standards:

  • CompTIA Security+ Compatibility Standard(s)
    • 1.1 Compare and contrast various types of security controls.
      • Technical

Guiding Question:

  • What are technical security controls and how do they relate and work in tandem with the other types of security controls to create a strong security posture for an organization?

Resources:

Assignment:

  1. Read the Lesson Slides Cyber2 3.3.2.pptx presentation in today’s class.
  2. Complete the Lab PPT Cyber2 3.3.2.pptx Activity in class. Use the PPT and the Lab Worksheet 3.3.2 – Brute Forcing with Metasploit Google Doc provided in today’s Google Classroom Assignment Post to complete the Brute Forcing with Metasploit Lab, and answer the “Putting it all Together” questions at the bottom of the Worksheet to demonstrate completion of the lab by the end of the day on Friday, September 24th.

Posted: September 23rd, 2026
Teacher Pacing Due Date: September 24th, 2026

CYBER.ORG: AP Cybersecurity – Lesson 9 – Topic 3.3.1 – Technical Controls and Attacks 1

Objective:

  • Students will:
    • Define and categorize technical controls and how they relate to other control types.
    • Examine ways to implement technical controls that prevent and deter attacks.
    • Recognize common attacks and how technical controls mitigate them.

Standards:

  • CompTIA Security+ Compatibility Standard(s)
    • 1.1 Compare and contrast various types of security controls.
      • Technical

Guiding Question:

  • What are technical security controls and how do they relate and work in tandem with the other types of security controls to create a strong security posture for an organization?

Resources:

Assignment:

  1. Follow along with the Lesson Slides Cyber2 3.3.1.pptx presentation in today’s class.

Posted: September 22nd, 2026
Teacher Pacing Due Date: September 23rd, 2026

It's dangerous to go alone!