network threats

Question 1

what is malware

Answer 1

software that replicates and fills up disk space and causes damage to data

Question 2

4 types of malware

Answer 2

trojan, worm, ransomware and spyware

Question 3

what does the trojan do

Answer 3

o Trojan – malware disguised as legitimate software and once installed, they damage data.

Question 4

what does the worm do

Answer 4

o Worm – software that replicates across a network and uses up all the bandwidth.

Question 5

what does ransomware do

Answer 5

o Ransomware – encrypts user’s data until money is paid for a decryption key.

Question 6

what does spyware do

Answer 6

o Spyware – secretly monitors user’s actions.

Question 7

what is social engineering

Answer 7

Social Engineering - using deception to manipulate users to gain personal data:

Question 8

2 types of social engineering and description

Answer 8

o Phishing – fake emails are sent to a person so that they give away personal data.
o Shoulder Surfing – watching a person entering a password and using it to access an account.

Question 9

what is brute force attack and what can happen to the user’s account

Answer 9

Brute Force Attack:
 Uses automated software to crack passwords by trying all the possible combinations.
 Gains access to a user’s account so they can view/edit/delete private data.
 They can install malware or block your access to your account.

Question 10

how to prevent brute force attack

Answer 10

 To prevent this, you can use firewalls, strong passwords, and two-step verification.

Question 11

what does (DOS/DDOS) stand for and what does it do

Answer 11

Distributed) Denial of Service
 A server is flooded with more requests than it can process.
 Server cannot respond so it crashes.

Question 12

Data Interception and Theft

Answer 12

data that is sent is intercepted by a third-party.

Question 13

what is SQL injection and how can it be prevented

Answer 13

 Uses SQL commands typed into a websites input box to gain access to databases in that network.
 websites use input validation that don’t permit characters used in SQL injections.

Question 14

what is penetration testing

Answer 14

Penetration Testing:
 Organisations employ specialists to simulate potential attacks on their network.
 Used to identify weaknesses/vulnerabilities in the network’s security so that they can be addressed.

Question 15

what is the anti malware software and how does it prevent vulnerabilities

Answer 15

 Scans the computer for malware and alerts the user.
 Requests actions such as stopping the download of malware to protect data.

Question 16

what is encryption and how does this prevent vulnerabilities

Answer 16

Encryption:
 Scrambles data using an algorithm that cannot be understood if intercepted.
 Only authorised users can access personal data as a key is needed to decrypt it.
 Required to follow Data Protection Act.

Question 17

what are used access levels and how what do they prevent

Answer 17

 Different users have restricted access to data eg only read and not write which prevents accidental changes

Question 18

how do passwords prevent vulnerabilities and what happens after a set number of failed attempts

Answer 18

must be correctly entered to gain access so stronger passwords make it harder for a brute-force attack to succeed.
 Account/device is locked

Question 19

what is physical security

Answer 19

Physical Security:
o e.g. Locks, Alarms, Security guards, CCTV, Keycard entry, Passcode/Biometric entry to a room.

Question 20

what do firewalls do to prevent vulnerabilities

Answer 20

Firewalls:
 Examines ingoing and outgoing traffic on a network and blocks unauthorised access.