AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 22 – Topic 8.0 – Risks of AI

Objective:

  • Students will:
    • Define AI risk.
    • Identify different types of AI risks.
    • Evaluate the seriousness of risk using likelihood and impact.

Standards:


ISACA AI Fundamentals Objective(s):

  • Requirements, Governance, Risks, and Ethics of Implementing AI Systems

Guiding Question:

  • What questions should we ask before trusting AI, including what could go wrong, who gets impacted, how likely it is to happen, and how serious the impact could be?

Resources:

  • Lesson Slides Lesson 8.0 – Risks of AI.pptx and Student Handout 8.0 – Risks of AI.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson 8.0 – Risks of AI.pptx presentation in today’s class.
  2. Complete the Student Handout Activity 8.0 – Risks of AI Activity using the  document available in the Google Classroom.

Posted: November 6th, 2026
Teacher Pacing Due Date: November 7th, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 21 – Topic 5.6.1 – AI Threats in Cyber Security

Objective:

  • Students will:
    • Analyze various AI-driven cyber threats, including deepfakes, AI-generated phishing, data poisoning, and adversarial attacks.
    • Evaluate mitigation strategies, such as SIEM and EDR integration, regular updates, and the use of AI-powered threat detection tools.
    • Discuss how AI can be used to enhance threat detection, automate incident response, and analyze large datasets to improve cybersecurity.
    • Assess real-world cybersecurity incidents like the Arup deepfake scam, to understand the impact of AI-based attacks and explore possible preventive measures.

Standards:

CSTA Compatibility Standard(s):

  • 3B-NI-04: Compare ways software developers protect devices and information from unauthorized access.

Guiding Question:

  • How can artificial intelligence be both a tool for strengthening cybersecurity and a weapon for cybercriminals to exploit vulnerabilities?

Resources:

  • Lesson Slides Lesson 5.6.1 – AI Threats in Cyber Security.pptx and Activity 5.6.1 – AI Deepfake Case Study.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson 5.6.1 – AI Threats in Cyber Security.pptx presentation in today’s class.
  2. Complete the Activity 5.6.1 – AI Deepfake Case Study.pptx in class using the materials provided.
  3. Complete the Activity 5.6.1 – AI Deepfake Case Study using the Student Handout Activity 5.6.1 – AI Deepfake Case Study document available in the Google Classroom.

Posted: November 5th, 2026
Teacher Pacing Due Date: November 6th, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 20 – Topic 6.2.4 – Safe Browsing Practices

Objective:

  • Students will:
    • Explain what a digital certificate is and why it matters for safe browsing.
    • Differentiate between a valid and invalid certificate.
    • Compare valid and invalid certificates from a web browser

Standards:

CompTIA Tech+ FC0-U71 Objective:

  • 6.2 – Explain methods to secure devices and security best practices.
  • Safe browsing practices
    • Certificates
      • Valid

Guiding Question:

  • How can you tell if a website is safe to use, and why it is important to check for a valid certificate when browsing online?

Resources:

  • Lesson Slides Lesson 6.2.4 – Safe Browsing Practices.pptx and Activity Activity 6.2.4 – Certificate Analysis.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson 6.2.3 – Device Use Best Practices.pptx presentation in today’s class.
  2. Complete the Activity 6.2.4 – Certificate Analysis.pptx in class using the materials provided.
  3. Complete the Activity 6.2.4 – Certificate Analysis using the Student Handout Activity 6.2.4 – Certificate Analysis document available in the Google Classroom.

Posted: November 4th, 2026
Teacher Pacing Due Date: November 5th, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 19 – Topic 6.2.3 – Device Use Best Practices

Objective:

  • Students will:
    • Differentiate between open-source and proprietary licensing models.
    • Compare subscription-based, one-time purchase, and perpetual licensing models.
    • Explain the importance of product keys and serial numbers.
    • Identify trustworthy software sources and explain how to verify them.
    • Describe when and why software should be removed.
    • Analyze the ethical and legal consequences of software piracy.

Standards:

CompTIA Security+ SYO-701 Objectives:

  • 6.2 – Explain methods to secure devices and security best practices.
  • Device use best practices
    • Licensing
      • Open source vs. proprietary
      • Subscription vs. one-time purchase vs. perpetual
      • Product keys and serial numbers
    • Software sources
      • Researching and validating legitimate sources
      • Original equipment manufacturer
      • (OEM) websites vs. third-party websites
      • Application stores
    • Removal of software
      • Unwanted
      • Unnecessary
      • Malicious
    • Software piracy

Guiding Question:

  • How can we make smart software choices that protect devices and maintain legality and security?

Resources:

  • Lesson Slides Lesson 6.2.3 – Device Use Best Practices.pptx and Activity 6.2.3 – Best Practices, Best Choices.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson 6.2.3 – Device Use Best Practices.pptx presentation in today’s class.
  2. Complete the Activity 6.2.3 – Best Practices, Best Choices.pptx in class using the materials provided.
  3. Complete the Activity 6.2.3 – Best Practices, Best Choices using the Student Handout Tech 6.2.2 document available in the Google Classroom.

Posted: November 2nd, 2026
Teacher Pacing Due Date: November 3rd, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 18- Topic 6.2.2 – Securing Devices

Objective:

  • Students will:
    • Define and explain key security measures for devices, including authentication, anti-malware, firewalls, updates, and physical protection.
    • Describe how each method contributes to overall device and data security.
    • Evaluate the effectiveness of various physical security controls.

Standards:

CompTIA Security+ SYO-701 Objectives:

  • 6.2 – Explain methods to secure devices and security best practices.
  • Securing devices (mobile/workstation)
    • Authentication
    • Anti-malware
    • Firewall
    • Patching/updating
    • Physical device security
      • Cable locks
      • USB locks

Guiding Question:

  • What steps can be taken to secure personal and workplace devices from both digital and physical threats?

Resources:

  • Lesson Slides Lesson 6.2.1 – Security Awareness.pptx and Activity
    6.2.1 – Security Awareness    .pptx     available on Google Classroom

Assignment:

  1. Follow along with the Lesson 6.2.2 – Securing Devices.pptx presentation in today’s class.
  2. Complete the Activity 6.2.2 – Secure That Device!.pptx in class using the materials provided.
  3. Complete the Activity 6.2.2 – Secure That Device! using the Student Handout Tech 6.2.2 document available in the Google Classroom.

Posted: October 29th, 2026
Teacher Pacing Due Date: October 30th, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 17 – Topic 6.2.1 – Security Awareness

Objective:

  • Students will:
    • Define social engineering and explain its connection to phishing.
    • Identify different types of phishing attacks.
    • Explain what malicious or compromised content is and how it is used in attacks.
    • Identify signs of phishing and compromised content.

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 6.2 – Explain methods to secure devices and security best practices.
    • Security awareness
      • Social engineering
        • Phishing
      • Malicious or compromised content

Guiding Question:

  • How can understanding phishing and other vectors for malicious content help you protect yourself and others from social engineering attacks?

Resources:

  • Lesson Slides Lesson 6.2.1 – Security Awareness.pptx and Activity
    6.2.1 – Security Awareness    .pptx     available on Google Classroom

Assignment:

  1. Follow along with the Lesson 6.2.1 – Security Awareness.pptx presentation in today’s class.
  2. Complete the Activity 6.2.1 – Security Awareness.pptx in class using the materials provided.
  3. Complete your Security Awareness Poster in class today, and we will display and present the completed posters in class tomorrow!

Posted: October 27th, 2026
Teacher Pacing Due Date: October 28th, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 16 – Topic 2.4.10 Wireless, On Path, And Replay Attacks & Lab – Session Replay

Objective:

  • Students will analyze potential indicators associated with network attacks.

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 2.4 – Given a scenario, analyze indicators of malicious activity.
    • Network Attacks
      • Wireless
      • On-path
      • Credential replay
      • Malicious code

Guiding Question:

  • What are common wireless network attacks and how can you defend against them?

Resources:

  • Lesson Slides Lesson 2.4.10 – Wireless, On-Path, and Replay Attacks.pptx and Lab – Session Replay.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson 2.4.10 – Wireless, On-Path, and Replay Attacks.pptx presentation in today’s class.
  2. Complete the Lab – Session Replay in class using the materials provided in Google Classroom.
  3. To confirm completion the lab activity, upload a screenshot displaying your successful login to the DVWA session on the Kali Linux machine to today’s Google Classroom post.

Posted: October 23rd, 2026
Teacher Pacing Due Date: October 26th, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 15 – Topic 2.2.1 – Common Attack Surfaces & Case Study – Wireless Security

Objective:

  • Students will:
    • Compare and contrast various types of threat vectors.

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 2.2 Explain common threat vectors and attack surfaces.
    • Message-based
      • Email
      • Short Message Service (SMS)
      • Instant messaging (IM)
    • Image-based
    • File-based
    • Unsecure networks
      • Wireless
      • Wired
      • Bluetooth
    • Open service ports
    • Default credentials
    • Supply chain
      • Managed service providers (MSPs)
      • Vendors
      • Suppliers
    • Removable device
    • Vulnerable software
      • Client-based vs agentless
    • Unsupported systems and applications

Guiding Question:

  • What are some different attack surfaces and threat vectors?

Resources:

  • Lesson Slides Lesson 2.2.1 – Common Attack Surfaces.pptx and Case Study – Wireless Security.pdf available on Google Classroom

Assignment:

  1. Follow along with the Lesson 2.2.1 – Common Attack Surfaces.pptx presentation in today’s class.
  2. Complete the Case Study – Wireless Security.pdf Lab Activity using the Case Study 2.2.1 – Wireless Security Responses document available in the Google Classroom.

Posted: October 22nd, 2026
Teacher Pacing Due Date: October 23rd, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 14 – Topic 8.3.1 – Wireless, Mobile & VPNs

Objective:

  • Students will:
    • Identify three methods of wireless connectivity
    • Explain three Bluetooth threats and how to mitigate them
    • Explain wireless threats and how to mitigate them
    • Explain how a virtual private network (VPN) works
    • Examine how encryption is an effective protection against message interception

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 2.2 Explain common threat vectors and attack surfaces.
    • Unsecure networks
      • Wireless
  • 2.4 Given a scenario, analyze indicators of malicious activities
    • Network attacks
      • Wireless
  • 3.3 Given a scenario, apply security principles to secure enterprise infrastructure.
    • Secure communication/access
      • Virtual private network (VPN)

Guiding Question:

  • What are some of the threats of wireless internet and how can they be mitigated?

Resources:

  • Lesson Slides Lesson Slides 8.3.1 – Wireless, Mobile & VPNs.pptx and Lab PPT 8.3.1 – SSH Tunneling for Privacy.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson Slides 8.3.1 – Wireless, Mobile & VPNs.pptx presentation in today’s class.
  2. Complete the Lab PPT 8.3.1 – SSH Tunneling for Privacy.pptx Lab Activity using the Lab Worksheet 8.3.1 – SSH Tunneling for Privacy document available in the Google Classroom.

Posted: October 19th, 2026
Teacher Pacing Due Date: October 20th, 2026

AP Cybersecurity

CYBER.ORG: AP Cybersecurity – Lesson 13 – Topic 8.2.1 – Spoofing & Sniffing

Objective:

  • Students will:
    • Define spoofing based attacks including ARP poisoning, IP spoofing and DNS spoofing
    • Identify how spoofing is used for AiTM and DDoS attacks
    • Identify methods of securing against spoofing

Standards:

  • CompTIA Security+ SYO-701 Objectives:
  • 2.4 Given a scenario, analyze indicators of malicious activity.
    • Network attacks
    • Distributed denial-of-service attacks
    • On-path (AiTM)
  • 3.1 Compare and contrast security implications of different architecture models.
    • Considerations – Availability

Guiding Question:

  • What types of attacks can be executed using networked systems and how can we identify and secure against spoofing attacks??

Resources:

  • Lesson Slides Lesson 8.2.1 – Spoofing & Sniffing.pptx and Lab PPT 8.2.1 – ARP Spoofing for DoS and AiTM Attacks.pptx available on Google Classroom

Assignment:

  1. Follow along with the Lesson 8.2.1 – Spoofing & Sniffing.pptx presentation in today’s class.
  2. Complete the Lab PPT 8.2.1 – ARP Spoofing for DoS and AiTM Attacks.pptx Lab Activity using the Lab Worksheet 8.2.1 – ARP Spoofing for DoS and AiTM Attacks document available in the Google Classroom.

Posted: October 13th, 2026
Teacher Pacing Due Date: October 14th, 2026

It's dangerous to go alone!