5a - AV, Firewalls, and NAT

Question 1

What is AV real time protection?

Answer 1

AV software that runs in the background and scans files as they are downloaded

Question 2

Define signature detection

Answer 2

Identifying common attributes associated with malware when scanning files.

Question 3

Define heuristic detection

Answer 3

Heuristic detection analyses data within context in order to find common traits of malware

Question 4

Define file cleaning in AV software

Answer 4

Removing the malware from the file, not always possible

Question 5

Define quarantining malware

Answer 5

Moving the malware to a secure place of storage to prevent execution and spreading

Question 6

Benefits of software firewalls

Answer 6

Closer control over the way a device can interact with the internet both internally and externally

Question 7

List the three states of data in a firewall

Answer 7

Accept (into network), reject (return the data), drop (delete packet)

Question 8

Define packet filtering

Answer 8

Allowing and rejecting specific data packets instead of enable or disabling ports. Eg: block YouTube

Question 9

What is NAT

Answer 9

Network address translation converts private internal IP addresses to public IPs over the internet