Menu
Qualifications Edexcel GCSE Computer Science 4.2 Network security

Network Security Risks

Card 1 of 20 0 got it 0 still learning
Question
TapClick or press space to see the answer
Answer
Network Security Risks exam questions18 questions with mark schemes and example answers
All 20 cards in this set
Why do organisations invest in network security?
To protect data from unauthorised access
What is penetration testing?
Deliberately trying to find security weaknesses in your own system
Which of the following is a goal of penetration testing?
To identify possible entry points for an attack
A penetration tester is given a username, password and network diagram before testing a system. What type of penetration testing is this?
White box testing
A company wants to simulate an attack from an external hacker with no inside knowledge. Which type of penetration testing should they use?
Black box testing
What is ethical hacking?
Gaining access to a system with the owner's permission to find weaknesses
What distinguishes white hat hacking from black hat hacking?
White hat hacking is done with the owner's permission
After a penetration tester finds a security weakness, what should they do?
Report the findings to the organisation
What is meant by white box penetration testing?
Simulating an attack by an insider who has knowledge of the system
What is meant by black box penetration testing?
Simulating an attack from outside by someone with no inside knowledge
What is meant by black hat hacking?
Gaining unauthorised access to a computer system or its data
Which term describes a weakness in a computer system that an attacker could exploit?
Vulnerability
A user is tricked into revealing their password by an email that pretends to be from their bank. Which type of threat is this?
Social engineering
Why is it important for an organisation to protect data sent across its network?
To stop it being intercepted and read by attackers
During a penetration test, why might the tester try to break into the system?
To prove the weakness is real
Why might an organisation use both white box and black box penetration testing?
To test insider and external attacks
Which term describes an attack that floods a network with so much traffic that it cannot respond to genuine users?
Denial of service attack
Which term describes an attack that uses software to try many possible passwords until one is accepted?
Brute-force attack
Why do organisations usually keep the results of a penetration test confidential?
So that attackers cannot use the weaknesses found
A person breaks into a company's computer system without permission and demands payment to keep quiet about it. Which term describes this person?
Black hat hacker