Authentication, authorization, cryptography, secure coding, network security, common attack classes and defensive controls. Use this page to understand the concept before attempting focused practice.
Authentication versus authorization and the principle of least privilege.
Confidentiality, integrity and availability as the CIA triad.
Cryptography basics: encryption, hashing and digital signatures.
Application and network threats: injection, phishing, malware and misconfiguration.
Defence: patching, segmentation, logging, backups and secure coding.
Common exam traps
Calling hashing encryption.
Treating authentication as authorization.
Assuming a single security control eliminates all risk.
How to study it on ExamCracker
Read the core concepts and examples.
Attempt the focused public practice on the related exam hub.
Review every incorrect answer instead of only checking the score.
Return to the topic before moving to a full-length mock.
Quick check
Quick check: Which control is primarily about proving that a user is who they claim to be?
A. Authentication
B. Authorization
C. Accounting
D. Compression
Answer: Authentication Why: Authentication verifies identity; authorization determines what an authenticated user is allowed to access.
Why this page exists
This is a focused learning page, not a keyword-only article. It connects an exam concept to practice, related resources and the broader ExamCracker preparation flow.