Welcome to Week 1 of our AP Cybersecurity self-study journey!
Follow these steps to guide your learning and track your progress:
- Read the official topic. Review the relevant topic in the AP Cybersecurity Course and Exam Description (CED), and use this weekly workbook to track your learning.
- Study the key concepts. Learn the required content and review the self-study notes posted immediately after the weekly workbook.
- Demonstrate mastery. Complete each mastery task. Set its Status to Complete only when you can successfully perform the task and clearly explain the underlying concept.
- Rate your confidence honestly. Before the exam, revisit any completed items with a Confidence rating of Low or Medium.
| Unit 1 TOPIC 1.1 Understanding Social Engineering |
1.1.A Identify common indicators of social engineering tactics.
| REQUIRED KNOWLEDGE |
| [ ] Recognize manipulation through phishing or other messages, including requests for sensitive information, malicious links or downloads, intimidation, urgency, unusual sender details, and suspicious context. |
| EVIDENCE OF MASTERY / PRACTICE |
| [ ] Annotate a suspicious message and identify at least three indicators. |
| UNIT 1 – Introduction to Security | SKILL FOCUS Analyze Risk |
| STATUS | CONFIDENCE |
| TARGET DATE ________________ | LAST REVIEWED ________________ |
| SOURCE Fall 2026 CED, Topic 1.1 | SELF-RATING 1 2 3 4 5 |
1.1.B Explain how social engineering tactics influence victims to perform a desired action.
| REQUIRED KNOWLEDGE |
| [ ] Explain how psychological pressure, especially fear and time pressure, reduces careful evaluation and encourages disclosure, clicking, downloading, payment, or another unsafe action. |
| EVIDENCE OF MASTERY / PRACTICE |
| [ ] For each tactic, explain the human response the attacker is trying to trigger. |
| UNIT 1 – Introduction to Security | SKILL FOCUS Analyze Risk |
| STATUS | CONFIDENCE |
| TARGET DATE ________________ | LAST REVIEWED ________________ |
| SOURCE Fall 2026 CED, Topic 1.1 | SELF-RATING 1 2 3 4 5 |
1.1.C Describe possible impacts for victims of social engineering attacks.
| REQUIRED KNOWLEDGE |
| [ ] Connect successful social engineering to credential theft, malware infection, financial loss, identity theft, privacy loss, unauthorized access, and wider organizational compromise. |
| EVIDENCE OF MASTERY / PRACTICE |
| [ ] Given a phishing scenario, trace immediate and downstream impacts. |
| UNIT 1 – Introduction to Security | SKILL FOCUS Analyze Risk |
| STATUS | CONFIDENCE |
| TARGET DATE ________________ | LAST REVIEWED ________________ |
| SOURCE Fall 2026 CED, Topic 1.1 | SELF-RATING 1 2 3 4 5 |
SELFSTUDY NOTES
Top-tier adversaries often do not attack the system directly: they attack human behavior. Social engineering is a frequently tested concept on the AP Cybersecurity Exam. Below is a summary of the essential information to review.
i. What Is Social Engineering?
Social engineering occurs when an adversary uses psychological tactics to manipulate a target into:
- Revealing sensitive information
- Downloading a malicious file
- Clicking a malicious link
Key idea: An adversary may compromise even a highly secure system by persuading a user to disclose a password or other authentication information.
ii. Six Common Psychological Tactics
- Intimidation: Using fear or threatening negative consequences to force compliance.
Example: “Your account will be locked unless you verify it within 12 hours.” - Urgency: Creating time pressure so the target acts quickly without carefully evaluating the request.
Example: “Act now! This offer expires in 30 minutes.” - Authority: Impersonating an executive, administrator, or IT employee.
Example: “I am from IT support. Please provide your password so I can repair a security vulnerability.” - Scarcity: Creating a false impression that a resource or opportunity is extremely limited.
Example: “Only four spots remain—claim your reward now.” - Familiarity: Pretending to be someone the target knows or trusts.
Example: “I’m your uncle. Can you transfer $1500 to me?” - Consensus: Using social proof or group behavior to influence the target.
Example: “Ninety-six percent of employees have already updated their credentials.”
iii. Three Serious Consequences
- Credential theft: Disclosure of a password, one-time password (OTP), or authentication code may allow an adversary to take over an account.
- Exposure of personal information: Information such as a birthdate or pet’s name can be used to answer account-recovery or security questions.
- Malware installation: Clicking a malicious link may install malware, such as a Trojan horse or ransomware.
iv. Exam Practice: How to Identify a Phishing Email
An exam question may present an email and ask you to identify its red flags:
- Spoofed or look-alike sender address: For example, g00gle.com, where the letter o has been replaced with the number 0.
- Urgency and intimidation: The subject line says “Urgent!” and the message warns, “You will be unable to complete your assignment unless you click this link.”
- Impersonated authority or organization: The sender claims to be “The Google Drive Team.”
- Vague or nonspecific information: The message does not identify the student or provide the document’s specific name.
Study Tips:
When analyzing a phishing scenario:
- Look for several social engineering tactics being used together.
- Inspect the sender’s address character by character.
- Consider the action the adversary is attempting to make the target perform.
- Identify the possible consequences if the target complies.
Official framework: https://apcentral.collegeboard.org/media/pdf/ap-cybersecurity-course-and-exam-description.pdf
Leave a Reply