Which term describes a weakness in a system that an attacker could take advantage of?
Vulnerability
What is meant by penetration testing?
Security experts are given permission to attack an organisation's own systems to find weaknesses
Which term describes hardware or software that monitors data going in and out of a network and blocks traffic that the rules do not allow?
Firewall
What is meant by encryption?
Data is scrambled using a key so that it cannot be read if it is intercepted
Which term describes software that scans files and compares them with a database of signatures to detect, block and remove malicious programs?
Anti-malware software
What is meant by ciphertext?
Data that has been scrambled into an unreadable form
Which term describes malware that has been isolated so that it cannot run?
Quarantined
Which term describes turning ciphertext back into readable plaintext?
Decryption
A company receives a penetration test report. What must happen for the test to reduce the risk of an attack?
The weaknesses it identified must be fixed
How does anti-malware software recognise a known virus?
It compares the file with a database of code patterns from known malware
Why must anti-malware software be updated regularly?
So its database includes details of the newest malware
Why might anti-malware software fail to stop a brand new piece of malware?
The new virus does not match any pattern in the database
How can a firewall reduce the effect of a denial of service attack?
It can block packets sent from the addresses carrying out the flood
A laptop holding customer records is stolen. How does encryption reduce the harm caused?
The thief cannot read the records without the correct key
A web server is running an old version of its software with a known weakness. Which action removes this vulnerability?
Install the software update that fixes the weakness
Security experts test a company's network twice. For the second test they are given a staff account and knowledge of how the network is set up. What kind of attacker does this test imitate?
An insider who already has an account on the network
A firewall blocks all traffic that its rules do not allow. Which attack can the firewall not stop?
A user opening an attachment in a phishing email
A computer is already infected with malware. Which action will remove the malware?
Running anti-malware software that detects and removes it
A company uses firewalls, anti-malware software, encryption and penetration testing. Why does it not rely on just one of these?
No single method stops every kind of attack
A new program is not in the anti-malware database, but the software blocks it when the program tries to change hundreds of files at once. How did the software detect the malware?
By watching for suspicious behaviour
Malware on a computer is trying to send customer records to an attacker over the internet. How can a firewall reduce the harm?
It blocks the connection being used to send the records
We use cookies to enhance your experience. You can manage your preferences or learn more in our Cookie Policy.