1-A 2-A 3-A 4-A | 5 phishing 6 firewall 7 = Attaches to files; self-spreads over network; disguises as legit app 8 = Strong passwords/SSH, disable unused services/ports, patch, banner, AAA 9 = Detect, trace and prove what happened | 10 = Multiple overlapping layers - no single point of protection