What is meant by a vulnerability in a computer system?
A weakness that an attacker could take advantage of
Which term describes authorised experts deliberately attacking a system to find weaknesses that can then be fixed?
Penetration testing
What is meant by a firewall?
Software or hardware that checks network traffic and blocks anything its rules do not allow
Which term describes changing data into a form that cannot be read without a key?
Encryption
What is meant by a password?
A secret string of characters that proves a user's identity when they log in
Which term describes using locks, key cards and CCTV to protect computer hardware?
Physical security
What is meant by user access levels?
Each user is given only the access they need for their job
Which of these is an example of a vulnerability that an attacker could exploit?
Out-of-date software on a server
Why do organisations use several different prevention methods together?
No single method stops every type of attack
Which method is designed to detect, block and remove malware?
Anti-malware software
Staff are tricked into revealing their login details over the phone. Which method would limit what an attacker can access with that account?
Setting user access levels
An attacker tries thousands of password guesses against a user account. Which combination of methods best limits this brute-force attack?
Strong passwords and locking accounts after a few failed attempts
A website is made unavailable by a flood of traffic from a small number of addresses. Which method best reduces the effect of this denial of service attack?
A firewall blocking the attacking addresses
Customer data is sent over the internet and could be intercepted. Which method keeps the data unreadable if it is intercepted?
Using encryption to scramble the data
A database is at risk from SQL injection. Which method would find this weakness so that it can be fixed?
Using penetration testing to find the weakness
A company employs authorised experts to attack its own network and they find a weakness. Why does the company still have to take further action?
The experts only find weaknesses, so the company must fix them
Staff at a company can install any software they like on their computers. Which method would reduce the risk of malware being installed?
Setting user access levels for staff accounts
An employee writes their password on a note stuck to their monitor so they do not forget it. Why does this create a vulnerability?
Anyone who sees the note can log in to that account
We use cookies to enhance your experience. You can manage your preferences or learn more in our Cookie Policy.