1.4 Network Security

Question 1

Define malware

Answer 1

. A network threat
. Malicious software is installed without knowledge or consent.
. Has the intentions to cause damage or steal information
. Defence- anti virus

Question 2

Define spyware

Answer 2

. Network threat
. Logs keystrokes to gain information unlawfully
. Defence- anti spyware

Question 3

Define social engineering

Answer 3

. Network threat
. Where someone from inside the company steals or causes damage to data
. Often done innocently
. Defence- clear network security policies

Question 4

Define brute force attack

Answer 4

. Network threat
. A specialist automated software is used to try out combinations of characters and likely passwords in order to access a network through trial and error
. Defence- strong, complex passwords

Question 5

Define denial of service attacks

Answer 5

. Network threat
. A hacker floods a network with useless date traffic.
. Makes network slow
. Prevents legitimate users from being able to access network
. Defence- firewall

Question 6

Define data interception and theft

Answer 6

. Network threat
. Data is monitored whilst travelling across a network
. Packet sniffing software is used to check the packets of data being sent for predefined parameters
. Defence- encryption

Question 7

Define SQL injection

Answer 7

. An attack when SQL script is entered into the input box by the user to change the way the scripts will run
Defence- validation

Question 8

Define penetrative testing

Answer 8

. Method of identifying and preventing vulnerabilities
. When a controlled attack is made on a network to mimic the possible impact of a real attack. Help identify vulnerable areas of the network and also test the ability to recover after an attack

Question 9

Define network forensics

Answer 9

. Method of identifying and preventing vulnerabilities
. When investigations are made to find the cause of an attack. Data packets are captured as they enter the network. If an attack had occurred, these packets can be analysed to help discover how the attack happened

Question 10

Define network policies

Answer 10

. Method of identifying and preventing vulnerabilities
. Documented procedures that clearly explains who can do what, how, when and why when using the network

Question 11

Define firewalls

Answer 11

. Method of identifying and preventing vulnerabilities
. These can be hardware or software placed between the networks and the Internet to prevent harmful requests from the Internet reaching the network. Incoming and outgoing data packets are analysed and if they meet the requirements set within the firewall, they are allowed through to the network, if not they’re blocked

Question 12

Define user access levels

Answer 12

. Method of identifying and preventing vulnerabilities
. When permissions are allocated to user accounts. These restrict or allow access to data, applications and resources to the network

Question 13

Define passwords

Answer 13

. Method of identifying and preventing vulnerabilities
. Requirement should be set to ensure that passwords need to be complex

Question 14

Define encryption

Answer 14

. Method of identifying and preventing vulnerabilities
. When data is scrambled before being transmitted across the network. The intended recipient for the data is provided with the key to decrypt the data when it is received. If the data is intercepted, it cannot be understood