Securing Applications and Data

What this unit covers

The topics below follow the published Cybersecurity course framework for Unit 5. Cybersecurity publishes no per-unit weighting, so there is no percentage to chase here.

Lessons in this unit

• Applications, Data, and Cryptography20 min · 3 objectivesExplain how access controls protect confidentiality and integrity · Distinguish encryption, hashing, and authentication · Recognize common application attack evidence
• Secure Application Design18 min · 3 objectivesExplain input handling, authorization, and safe failure · Apply the idea to evidence from a realistic technology scenario · Justify a decision using security, reliability, cost, and user impact
• Cryptography, Backups, and Data Governance18 min · 3 objectivesExplain data protection across storage, transit, use, and recovery · Apply the idea to evidence from a realistic technology scenario · Justify a decision using security, reliability, cost, and user impact

What examiners penalize here

• For a scenario about **input handling, authorization, and safe failure**, identify the decisive evidence before naming a response. A defensible conclusion here is: This is an authorization flaw; hiding or randomizing the URL is not a substitute for server-side access checks.
• For a scenario about **data protection across storage, transit, use, and recovery**, identify the decisive evidence before naming a response. A defensible conclusion here is: Separate and restrict key management; encryption without protected keys does not meaningfully reduce disclosure risk.

Practice Cybersecurity

Our practice bank is drawn from across the whole course rather than filtered to one unit, which is closer to how the exam asks anyway — it will not tell you which unit a question is testing.

Questions about this unit

All 5 units of AP Cybersecurity

1. Unit 1 · Introduction to Security
2. Unit 2 · Securing Physical Spaces
3. Unit 3 · Securing Networks
4. Unit 4 · Securing Devices
5. Unit 5 · Securing Applications and Data