Securing Devices
What this unit covers
The topics below follow the published Cybersecurity course framework for Unit 4. Cybersecurity publishes no per-unit weighting, so there is no percentage to chase here.
Lessons in this unit
- Device Hardening and Malware Detection18 min · 3 objectivesIdentify common endpoint vulnerabilities · Choose appropriate device-hardening controls · Use event clues to classify suspicious device behavior
- Patching, Configuration, and Least Privilege18 min · 3 objectivesExplain vulnerability reduction through secure configuration · Apply the idea to evidence from a realistic technology scenario · Justify a decision using security, reliability, cost, and user impact
- Malware, Persistence, and Recovery18 min · 3 objectivesExplain malware behavior and evidence-based recovery · Apply the idea to evidence from a realistic technology scenario · Justify a decision using security, reliability, cost, and user impact
What examiners penalize here
- For a scenario about **vulnerability reduction through secure configuration**, identify the decisive evidence before naming a response. A defensible conclusion here is: Reduce privilege and patch exposure; either control alone leaves a major part of the risk untreated.
- For a scenario about **malware behavior and evidence-based recovery**, identify the decisive evidence before naming a response. A defensible conclusion here is: Contain first, investigate scope, eradicate the cause, then recover from trusted backups and monitor for recurrence.
Practice Cybersecurity
Our practice bank is drawn from across the whole course rather than filtered to one unit, which is closer to how the exam asks anyway — it will not tell you which unit a question is testing.
Questions about this unit
How much of the AP Cybersecurity exam is Unit 4?
The Cybersecurity course framework does not publish a per-unit weighting, so there is no percentage to quote for Unit 4 and anyone who gives you one is guessing. Spread your time by where your own errors are instead.
What topics are covered in Cybersecurity Unit 4?
Securing Devices covers Device vulnerabilities, Authentication, Anti-malware and Endpoint logs.
How should I study Cybersecurity Unit 4?
Read the 3 lessons below first — about 55 minutes — then work practice questions on these topics. Finish with practice questions and read the explanation for every one you get right by elimination as well as the ones you miss.
All 5 units of AP Cybersecurity
Unit names, topics and exam weights follow the published College Board course framework for AP Cybersecurity. AP® is a trademark registered by the College Board, which does not endorse this site.