DEFEND · Cybersecurity Essentials
Recognize the risk. Understand the control.
From the idea to the “I get it”.
A public preview of your learning journey. The complete course is in development.
01Understand+
Recognize the risk. Understand the control.
02Investigate+
Which combination uses two different authentication factor categories?
03Practise+
Protect the next sign-in.
04Explain+
The password is knowledge; the security key is possession. Two secrets are still the same factor category.
Layeratek learning is independent. A completion certificate, when available, is not university credit or external professional accreditation.
A closer look inside.
Digital learning. Something you can actually try.
- 01
A password is exposed.
A phishing message tricks someone into entering a password on a fake page. The attacker now knows a secret, but has not necessarily satisfied every sign-in requirement.
- 02
Add a different factor.
Multi-factor authentication asks for factors from different categories. A password and another password are both knowledge factors; adding more secrets is not the same as adding a possession factor.
- 03
Make phishing harder.
A properly deployed FIDO2 security key binds authentication to the legitimate site. Combine it with least privilege, monitoring and a tested account-recovery process.
Protect the next sign-in.
A stolen password should not be enough to open the door.
A password is exposed.
A phishing message tricks someone into entering a password on a fake page. The attacker now knows a secret, but has not necessarily satisfied every sign-in requirement.
Why learn this?
Security decisions affect identities, information and the systems organizations rely on.
Understand the idea.
Recognize the risk. Understand the control.
Apply your judgment.
Protect the next sign-in. Explore the evidence and explain your next step.
Connect it to practice.
The password is knowledge; the security key is possession. Two secrets are still the same factor category.