AP Cybersecurity Tutoring for the May Exam
AP Cybersecurity is a new course, first examined in May 2027, and it tests students as working analysts: they read logs, firewall rules, file permissions and network data, decide what is happening and say how to stop it. There is no long run of past papers, so preparation has to be built from the course framework and College Board’s own sample questions.
Short answer
AP Cybersecurity is offered online, one-to-one or in a group class.
A private lesson runs 90 minutes and starts at USD 65 per lesson; the group course runs 50 lessons of 90 minutes for USD 1,755, and a class never takes more than 6 students.
Group classes next begin on 27 September 2027.
From USD 65 per lesson
- 2 scored components, from AP Central
- Live online lessons of 90 minutes
- From USD 65 per lesson
How AP Cybersecurity is assessed
Set and scored by College Board and reported on the 1–5 AP scale. Each university sets its own rule on which scores earn credit or placement. Component names are as College Board prints them.
College Board
AP Cybersecurity · AP Central exam page
| Component | Share of score | Length | What it involves |
|---|---|---|---|
| Section I: Multiple Choice | 70% | 1 hour 20 min | 60 questions in 1 hour 20 minutes, standalone or in sets of 2, 3 or 4. You analyse scenarios and digital evidence, such as logs and network data, to identify vulnerabilities, recommend mitigations and detect potential attacks, and explain key cybersecurity concepts. |
| Section II: Free Response | 30% | 50 min | 1 question in 50 minutes, a Device Security Analysis built on several sources from the same device: a set of firewall rules, system and application logs, a list of files with their permissions and a device policy. You explain parts of the policy, find signs of attacks in the logs, configure file permissions and firewall rules, and use the evidence to suggest how to harden the device. |
- The whole exam is taken in College Board’s Bluebook app.
- 2027 exam date: 5 May 2027.
Checked on 8 October 2026
College Board revises individual exams between years. The exam page linked above is the authority for your sitting.
The AP Cybersecurity syllabus
Topic names are left in English, as they appear on the paper and in the mark scheme.
Unit 1: Introduction to Security
Social Engineering · The Impact of AI in Cybersecurity · Types of Cyber Adversaries
Unit 2: Securing Physical Spaces
Physical Vulnerabilities and Attacks · Protecting Physical Spaces · Detecting Physical Attacks
Unit 3: Securing Networks
Network Vulnerabilities and Attacks · Wireless Network Security · Network Segmentation · Firewalls · Detecting Network Attacks
Unit 4: Securing Devices
Device Vulnerabilities and Attacks · Authentication · Anti-malware · Detecting Attacks on Devices
Unit 5: Securing Applications and Data
Application and Data Vulnerabilities and Attacks · Access Controls · Cryptography · Detecting Attacks on Applications and Data
Where AP Cybersecurity marks are usually lost
Naming the attack without the evidence
Questions present a scenario or a set of logs and ask what is happening. Students who recognise a familiar attack often name it from the shape of the story, without pointing to the log entry, address or timestamp that shows it. College Board expects answers to cite evidence from the sources and explain the reasoning behind every claim about an attack, a permission or a configuration change.
A mitigation that does not fit the risk
Recommending “install antivirus” or “use a strong password” for every scenario is the classic weak answer. The course asks for controls that address the specific vulnerability in front of the student and, where needed, layered controls across physical spaces, networks, devices, applications and data. A firewall rule that blocks the wrong traffic, or a permission change that locks out a legitimate user, is a wrong answer, not a cautious one.
Firewall rules read in the wrong order
The free-response question asks students to configure firewall rules and file permissions, not only to describe them. As the course teaches, rules are checked in order and the first match decides, so students who read the list as independent statements predict the wrong outcome. Permissions need the same precision: read, write and execute, set separately for the owner, the group and everyone else, exactly as the policy requires.
How we teach AP Cybersecurity
A tutor teaches the course as a series of investigations. After the introduction to security, each unit — physical spaces, networks, devices, then applications and data — starts from a scenario such as an office building, a small network, a laptop or a web application. The student identifies the assets and vulnerabilities, chooses layered controls, then reads logs or alerts to decide whether an attack has happened. Lessons use the kinds of evidence the exam uses: firewall rule tables, system and application logs, file permission lists and written device policies. Because the course is new, practice comes from College Board’s course and exam description and AP Classroom material, extended with exercises written to the same pattern. Every answer is explained in writing and backed by evidence, as the free-response question requires.
There is no separate diagnostic, because there is no single test that stands in for two years of a school syllabus. The first lesson is the assessment: the tutor works through your recent marked work, past-paper questions from your own specification, and the units your school has already covered, and reads current level, gaps, exam technique and where school work stands. It is a normal paid lesson and it teaches as it assesses.
Related subjects and pages
AP Computer Science Principles
Live online AP Computer Science Principles tutoring: the Create performance task, written responses on your own code, College Board pseudocode, big ideas.
AP Computer Science A
AP Computer Science A tutoring in Java, live online: hand-tracing code, ArrayList and 2D arrays, classes, and free-response code typed in Bluebook.
AP Business with Personal Finance
AP Business with Personal Finance tutoring, live online: financial statements, business decisions and the exam-day question on the Business Canvas Project.
AP Tutoring
Online AP tutoring for the May 2027 exams: calculus, sciences, economics, history, English and more, for American-curriculum students across Africa.
AP prices
AP tutoring from USD 65 per 90-minute lesson. Compare lesson packages, group courses and self-study products.
AP Cybersecurity: reviews from our students
Students and parents who prepared with us write these reviews themselves. We check each one before publishing it and never change its words or its star rating.
Nobody has reviewed this programme here yet. If you prepared with us, tell other students across Africa how it went.
Frequently asked questions
Short, direct answers. If yours is not here, ask us.
Talk to us about AP Cybersecurity
Tell us your board or level, your predicted grade and when you sit it. We will tell you honestly whether you need a tutor, and which one.