Menu
Qualifications Pearson BTEC Digital Information Technology B3 Policy

Defining security parameters

Card 1 of 22 0 got it 0 still learning
Question
TapClick or press space to see the answer
Answer
All 22 cards in this set
Why does a password policy set a minimum number of characters for passwords?
Longer passwords take more time to crack by brute force
Which password rule is about creating a password rather than protecting it?
Include a mixture of upper and lower case letters and numbers
Why is it a risk for staff to reuse the same password across several accounts?
If one password is compromised, a hacker can access every account
Why do organisations put an acceptable software policy in place?
To stop unapproved software introducing malware to the network
An employee needs software that is not installed on their computer. What should they do?
Ask the IT manager to approve and install the software
What is the purpose of a software audit?
To check which software is installed and whether it is licensed
Which action is part of hardening a device?
Disable unused ports and reset the default passwords
Two members of staff share one login so they can cover each other's shifts. Why does this go against a password policy?
Anyone who learns the password can access the organisation's data
A password policy says that staff must not use their pet's name or their date of birth in a password. Why is this?
These details can be found online, so they are easy to guess
How does an acceptable software policy help to protect an organisation from legal action?
It makes sure only licensed software is installed on its computers
Why are most staff who use an organisation's network not given administrative rights?
So they cannot install software that has not been approved
A software audit finds that a database program is installed on twenty computers but is only needed by the finance team. Why is this a problem?
The organisation may be paying for licences it does not need
Why does device hardening include removing the software and services that a user does not need?
Each one could contain a weakness that an attacker could use
Why do password policies usually require staff to change their passwords at regular intervals?
A discovered password can only be used for a short time
Which term describes the rules an organisation sets for how staff should create and protect their login details?
Password policy
What is meant by an acceptable software policy?
A set of rules that explains what will be done to prevent the installation and use of unapproved software
What is the name for the process of checking which programs are installed on the computers owned by an organisation?
Software audit
What is meant by device hardening?
Applying measures such as firewalls, software updates and encryption to make a device harder to attack
Which term describes the permissions given to a member of staff that control what they are allowed to see and do on a digital system?
User access rights
What is meant by the principle of least privilege?
Users should be given only the minimum rights they need to carry out their job
Staff are told what they are allowed to do with the organisation's computers, network and data. What is this set of rules called?
Acceptable use policy
What is meant by a password checker?
A tool that shows how weak a password is and how to improve it