🔐

Cybersecurity · FRQ Trainer

Free-response 1 of 8 · Introduction to Security

6 pts our rubric

The real Cybersecurity Section II is 1 free-response question in 50 minutes, 30% of your score. One scenario question: given firewall rules, logs, file permissions, and a device policy from the same machine, students diagnose attacks, configure protections, and recommend hardening. This prompt is ours, written to the same skills — score it against the rubric below, not against that structure.

Prompt

A school district stores student records on a single server. The server runs an operating system version for which the vendor released a patch nine months ago closing a flaw that is known to be exploited in the wild, and the district has not applied it. There are no offline backups.

aDefine confidentiality, integrity, and availability, and identify which of the three a ransomware attack on this server would most directly damage.1 pt

bUsing this scenario, distinguish among a threat, a vulnerability, and a risk.1 pt

cExplain how likelihood and impact combine to produce a risk rating, and give a qualitative rating for this situation with justification.1 pt

dIdentify the four standard responses to an identified risk and recommend one for this situation.1 pt

eExplain the principle of defense in depth and give one example of how it would apply here.1 pt

fExplain why the statement "we have never had a breach" is not evidence that current controls are adequate.1 pt

Keep writing to unlock scoring (0/120)

Write your response first — then grade it with AI or self-score against the rubric.