WA Computer Science ATAR Unit 2 Word Scramble: Cyber Security (Modules 125–266)
Name:
Date:
Class:
🔤
Word scramble
Unscramble the letters and write each key term on the line.
1
PLEXOIT
A method or piece of code that takes advantage of a vulnerability (the weakness) to attack a system. The vulnerability is the flaw; the ______ is the tool that uses it.
2
HTTERA CRTOA
A person or group that carries out a cyber attack, described by their motive (money, cause, grievance, spying) and skill, such as cybercriminals, hacktivists, insiders and nation-state groups.
3
TATCAK ECARSFU
All the points where an attacker could try to get into a system or take data out, such as open ports, running services and user accounts. A smaller surface means fewer ways in.
4
SUIRV
Malware that attaches to a host file and spreads by replicating itself when a user runs the infected file
5
ATTAIIGLNG NDA GNTABII
Physical social engineering: tailgating follows an authorised person through a secure door, while baiting leaves an infected USB drive for someone to plug in.
6
TTPNEONREAI STET
An authorised, simulated attack on a system by an ethical (white-hat) hacker to find vulnerabilities before real attackers (black-hat) do, so the weaknesses can be fixed.
7
NWIERTT TOURHTIAIONAS
Written permission from the system owner that sets the scope: which systems, methods and time window a tester may use. Testing outside it is illegal.
8
RUPMTCOE EEOFCNF
A crime under the Cybercrime Act 2001 (Cwlth) and the WA Criminal Code: accessing, changing or impairing computer data or systems without authorisation. Authorisation is a defence.
9
ODCE FO HSTEIC
A set of rules for professional conduct, such as the ACS ______: be honest, keep client data confidential, avoid harm, declare conflicts of interest and act in the public interest.
Answer Key
WA Computer Science ATAR Unit 2 · Modules 125–266
1PLEXOIT → exploit — A method or piece of code that takes advantage of a vulnerability (the weakness) to attack a system. The vulnerability is the flaw; the exploit is the tool that uses it.
2HTTERA CRTOA → threat actor — A person or group that carries out a cyber attack, described by their motive (money, cause, grievance, spying) and skill, such as cybercriminals, hacktivists, insiders and nation-state groups.
3TATCAK ECARSFU → attack surface — All the points where an attacker could try to get into a system or take data out, such as open ports, running services and user accounts. A smaller surface means fewer ways in.
4SUIRV → Virus — Malware that attaches to a host file and spreads by replicating itself when a user runs the infected file
5ATTAIIGLNG NDA GNTABII → tailgating and baiting — Physical social engineering: tailgating follows an authorised person through a secure door, while baiting leaves an infected USB drive for someone to plug in.
6TTPNEONREAI STET → penetration test — An authorised, simulated attack on a system by an ethical (white-hat) hacker to find vulnerabilities before real attackers (black-hat) do, so the weaknesses can be fixed.
7NWIERTT TOURHTIAIONAS → written authorisation — Written permission from the system owner that sets the scope: which systems, methods and time window a tester may use. Testing outside it is illegal.
8RUPMTCOE EEOFCNF → computer offence — A crime under the Cybercrime Act 2001 (Cwlth) and the WA Criminal Code: accessing, changing or impairing computer data or systems without authorisation. Authorisation is a defence.
9ODCE FO HSTEIC → code of ethics — A set of rules for professional conduct, such as the ACS Code of Ethics: be honest, keep client data confidential, avoid harm, declare conflicts of interest and act in the public interest.