Which Client Risk Is It? — TechKnowSurge

About this interactive

A client is a machine that asks for a service; a server provides it. Most applications on a client now talk to some outside server, at the very least to fetch their own updates, and every one of those connections is a way in. The lesson names four areas to protect. Installed software: every program on the machine is a possible hole, so control what gets installed and remove what is not needed. Web browsing: the browser connects to servers you have never visited and runs the code they send. Name lookups: we type names, not addresses, so a wrong answer sends us to the wrong server however carefully we typed. Incoming mail: a message can carry malicious code or a forged sender, and plain mail protocols carry it in the open. To sort a card, ask which route the risk takes to reach the machine.

What you'll learn

Sort a client-side security risk into the area it comes through: installed software, web browsing, name lookups or incoming mail
Recognize that applications connecting to outside servers, for content or only for updates, add risk to the client machine

Aligned to

CompTIA Security+

2.2 Explain common threat vectors and attack surfaces.

Key terms

Client-Server Model: A computing architecture in which a client device requests services or resources from a remote server over a network.
Application Control: A security mechanism that restricts which applications are permitted to execute on a system, typically using allowlists or blocklists. Application control prevents unauthorized or malicious software from running even if it reaches the endpoint.
Web Browser: A client application that retrieves web pages from servers using HTTP or HTTPS, interprets HTML, CSS, and JavaScript, and renders the results as an interactive visual display for the user.
Domain Name System: A hierarchical naming system that translates human-readable domain names into IP addresses.
Phishing: A social engineering attack that uses deceptive emails or messages to trick users into revealing sensitive information.

Topics

Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →