Introduction to Security
What this unit covers
The topics below follow the published Cybersecurity course framework for Unit 1. Cybersecurity publishes no per-unit weighting, so there is no percentage to chase here.
Lessons in this unit
- Threats, Vulnerabilities, and Risk18 min · 3 objectivesDistinguish threats, vulnerabilities, attacks, and risk · Explain why authentication failures are high-value attack paths · Use likelihood and impact to prioritize defenses
- Security Goals and Attack Surfaces18 min · 3 objectivesExplain confidentiality, integrity, availability, and attack surfaces · Apply the idea to evidence from a realistic technology scenario · Justify a decision using security, reliability, cost, and user impact
- Identity, Authentication, and Social Engineering18 min · 3 objectivesExplain identity proof, authentication factors, and social engineering · Apply the idea to evidence from a realistic technology scenario · Justify a decision using security, reliability, cost, and user impact
What examiners penalize here
- For AP Cybersecurity prompts, do not stop at naming an attack. Tie the attack to the exploited weakness and then recommend a control that actually reduces that risk.
- For a scenario about **confidentiality, integrity, availability, and attack surfaces**, identify the decisive evidence before naming a response. A defensible conclusion here is: The incident affects integrity and confidentiality; restoring a backup alone would not explain the disclosure or stop the attacker.
- For a scenario about **identity proof, authentication factors, and social engineering**, identify the decisive evidence before naming a response. A defensible conclusion here is: Treat the request as likely social engineering; never approve or disclose an unsolicited authentication challenge.
Practice Cybersecurity
Our practice bank is drawn from across the whole course rather than filtered to one unit, which is closer to how the exam asks anyway — it will not tell you which unit a question is testing.
Questions about this unit
How much of the AP Cybersecurity exam is Unit 1?
The Cybersecurity course framework does not publish a per-unit weighting, so there is no percentage to quote for Unit 1 and anyone who gives you one is guessing. Spread your time by where your own errors are instead.
What topics are covered in Cybersecurity Unit 1?
Introduction to Security covers Social engineering, Authentication, AI in cybersecurity and Cyber adversaries.
How should I study Cybersecurity Unit 1?
Read the 3 lessons below first — about 55 minutes — then work practice questions on these topics. Finish with practice questions and read the explanation for every one you get right by elimination as well as the ones you miss.
All 5 units of AP Cybersecurity
Unit names, topics and exam weights follow the published College Board course framework for AP Cybersecurity. AP® is a trademark registered by the College Board, which does not endorse this site.