8.1.4 Potential physical vulnerabilities to systems, data and information

Question 1

Fill The Blank:

Some companys run vulnerability testing (aka …………………… testing) when the digital system is being created and ………………

Answer 1

Vulnerability, Penetration, Installed

Question 2

Fill The Blank:

………………….. testing when the computer system is running to identify …………………. and steps can be taken to close them before an attack is successful

Answer 2

Vulnerability, Vulnerability

Question 3

Fill The Blank:

The biggest threat to digital systems is the ………… so they must be made aware of the vulnerabilities so that they do not become the start of any issues

Answer 3

User

Question 4

State:

The 2 categories that physical threats can be split into

Answer 4

• Internal
• External

Question 5

Explain:

Two factors affecting the location of physical systems and how these could be mitigated against

Internal Threats

Answer 5

• Area with limited flammable material to limit fire risk (fire alarm system should be installed)
• Low humidity/ventilation because heat can become humidity and components can corrode or be damaged to the point of not working as intended - Climate controlled area to regulate humidity and temperature

Question 6

Fill The Blanks:

The ………….. of digital systems should also be considered as this can also be a ……………………..

Internal Threats

Answer 6

Layout, Vulnerability

Question 7

State:

3 examples of physical threats to a system that link to the layout

Internal Threats

Answer 7

3 of:
* Door access codes not being updated regularly
* Using simple access codes such as 1234
* Reusing access codes on a rotation basis
* Lack of monitoring of access to secure areas
* Unnecessary access to secure areas

Question 8

Fill The Blank:

When a digital system is installed it can be assumed the hardware and software will be up to date and can be classed as ……………..

Internal Threats

Answer 8

Robust

Question 9

Fill The Blank:

Over a systems lifetime …………….. must be carried out. Eventually software will be become …………….. or (possibly earlier on) be classed as ……………….. software because there is limited support for interaction with ……………… applications

Internal Threats

Answer 9

Maintenance, Obsolete, Legacy, Modern

Question 10

Fill The Blank:

If software has become legacy software, it may be chosen to replace it with an up-to-date …………….. which will impact the business; how will ………. be stored during the transfer?

Internal Threats

Answer 10

Version, Data

Question 11

Fill The Blank:

Hardware can become outdated because of outdated ………………… or a reduction in ……………………

Internal Threats

Answer 11

Firmware, Performance

Question 12

Define:

Mitigate

Internal Threats

Answer 12

If you mitigate against something, you take steps to reduce the likelihood of it happening, or to reduce its impact if it does happen

Question 13

Define:

Humidity

Internal Threats

Answer 13

Amount of water vapour in the air. Higher humidity means more water in the air

Question 14

Define:

Firmware

Internal Threats

Answer 14

Code, added at time of manufacturing, written to a hardware device’s non-volatile memory - software that allows hardware to run

Question 15

Fill The Blank:

How a digital system and ……….. are used could lead to a …………..

Internal Threats

Answer 15

Data, Threat

Question 16

Fill The Blank:

Using business devices on unsecured …………. can leave employees vulnerable to attacks

Internal Threats

Answer 16

Hotspots

Question 17

Fill The Blank:

Some risk is mitigated through an …….. (if employees follow it) but there is the risk that a ……………………… employee could pose a threat to the hardware and software of the digital system.

Internal Threats

Answer 17

AUP, Disgruntled

Question 18

Expain:

2 natural disasters and briefly how they could impact digital systems

External Threats

Answer 18

• Earthquake could stop internet
• Floods or tsunamis could destroy and wash away buildings
• Lightning strikes cause surge or spike in electricity supply

Question 19

State:

2 potential impacts of a natural disaster on digital systems

Answer 19

• Any natural disaster could destroy backups
• Power failure as potential after affects limiting access to data

This is not an extensive list