CH11 Flashcards

Question

Password Complexity?

Answer 1

Always use a Strong Password, one too complicated for bad guys to crack easily. That means not using any words you'd find in the dictionary or encyclopedia, anything that a password-cracking program might try. A strong password is atleast: - 8 or more characters long. - Both Uppercase and Lowercase Letters - Has Numbers and Symbols

Answer 2

Even a strong password is no good if you don't keep it confidential. Don't use the same password for multiple services or web sites. You can use a Password Manager software such as LastPass to securely generate and store passwords in a vault; the password manager itself uses a master password to the vault, don't forget the vault password though.

Answer 3

Network administrators usually setup up password expiration to force users to change their passwords regularly at certain intervals. This helps with overall security because the older the password is, the more likely someone unauthorized has gotten a hold of it and cracked it. Similarly, the password change policies may prohibit the users from reusing the same passwords they have used in the past.

Answer 4

Most companies have a password management policy that establishes rules for severl aspects of password usage. Includes Complexity, Expiration, and Confidentiality. You can create your own password management policies for yourself and your home or small business by thoughtfully creating rules in each of those areas.

Answer 5

On some computer systems, password use is simplified by a Single Sign-On. That means you sign in once, and then that same authentication is used for multiple purposes. When you sign into Windows using a Microsoft Account, for example, you are also automatically signed into the OneDrive online file storage system. Similarly, many websites allow you to sign in using your Facebook credentials so that you don't have to create separate accounts. SSO systems can be convenient and can relieve you of the responsibility of remembering multiple passwords. They can also pose a big security risk, however, because if the single password is compromised, all it's other uses are compromised.

Answer 6

User Account Control - Windows uses this to prevent malware or rogue web sites from making system changes without your knowledge and consent. When UAC is enabled, you attempt to make a system change that would affect other user accounts, UAC opens a prompt that asks you if you really want to do it. You must click YES to continue.

Answer 7

Software that displays unsolicited ads on your computer. It may come to you in the form of a program that seems helpful, such as a toolbar for your browser, but instead of whatever it purports to do, it causes ads to display. These ads are usually in the form of Pop-Ups although the ad can also show up in other ways. 3 Main Systems of Adware Presence: 1. Home Page Redirection 2. Search Engine Redirection 3. Constant Pop-Ups

Answer 8

Monitors your computer usage habits and reports the information to the program's owner. The data collected might be used for minimally intrusive purposes such as to gather anonymous data about which websites or browsers are most popular, but some types of spyware go considerably beyond that level of simple collection.

Answer 9

Email that comes into your Inbox from a source that's not a friend, family member, or colleague, and you didn't ask for, can create huge problems for your computer and you. Spam amounts for a huge percentage of traffic on the Internet. Spam comes in many flavors from real businesses trying to sell real products to scammers who just want to take your money.

Answer 10

Is the process of using or manipulating people to gain access to that network from the outside - which covers the many ways humans can use other humans to gain unauthorized information. It can include situations that have nothing to do with computers, such as a Phone Call, that claims to be from your credit card company and asks you to verify your Social Security Number. SOcial Engineering attacks aren't Hacking, at least in the classic sense of the word, although the goals are the same. Social Engineering means people attacking an organization through the people in the organizations or physically accessing the organization to get the information they need.

Answer 11

Infiltration - Attackers can physically enter your building under the guise of someone who might have legitimate reasons for being there. Telephone Scams - are probably the most common social engineering attack. The attacker makes phone calls to gain information. The attacker attempts to come across as someone inside a trusted organization and uses this to get the desired information. The most famous is "I forgot my password" scam. Email Phishing - Phishing is the Act of trying to get people to give their usernames, passwords, or other security information by pretending to be someone else electronically. A classic example is when a bad guy sends you an email that's supposedly from Twitter or Instagram saying that your account is on hold for some violation, and you need to Click the Login Link provided in the email to straighten out the problem. Banking scams are also very popular.

Answer 12

Is a piece of malicious software that gets passed from computer to computer. Designed to attach itself to a program on your computer and execute when the program executes. It could be your email program, your word processor, or even a game. Whenever you use the infected program, the virus goes into action and does whatever it was designed to do. They can wipe your email, erase your hard drive, or even steal your information and send spam email to everyone in your address book.

Answer 13

Freestanding programs that do something other than what the person who runs the program thinks they will. You invite these programs in, unaware of what lurks inside. An example is a program that a person thinks is an antivirus program but is actually a virus.

Answer 14

Similar to a Trojan, a worm is a complete program that travels from machine to machine, usually through computer networks. Most worms are designed to take advantage of security problems in OS and install themselves on vulnerable machines that might not have the latest updates applied. They can copy themselves over and over again on infected networks, potentially creating so much activity that they overload the network by consuming bandwidth. A fast-spreading worm might even bring chunks of the entire Internet to a halt.

Answer 15

A nasty type of malware, locks down your computer and holds it for Ransom, displaying some threatening warning that if you don't pay up, usually by sending money via wire transfer, your files will be deleted. Some smoke-and-mirrors ransomware doesn't actually harm your PC beyond locking it down until you pay or remove the ransomware; other versions actually do delete files.

Answer 16

Scareware - Ransomware that just scares you and tries to manipulate you with bogus antivirus or cleaning tools to fix the problem that doesn't exist. You can still use your PC but you might be bombarded with pop-ups or you might be prevented from running programs - these are the easiest to remove. Lock-Screen - Doesn't allow you to use your PC in any way. It shows a full-size window warning you that you have violated the law and must pay a fine. Encrypting - This is the worst stuff because it encrypts and locks your personal files until you pay. Even if you manage to remove the malware, your files are useless without decryption key, which you can't get without paying.

Answer 17

1. Keeping your OS Patched and Updated. 2. Having Anti-Malware Software and keeping it Up-to-Date. 3. Use a Firewall either with Network Hardware or Software Program.

Answer 18

The secret to preventing damage from malicious software attack is to keep from getting malware in the first place. - Know the source of any software before you load it. - Be careful with email attachments and hyperlinks. - Keep your anti-malware program updated. - Periodically update the core antivirus software programing called the Engine - to employ the latest refinements the developers have included.

Answer 19

1. Recognize - First step is to Recognize that a potential malware outbreak has occurred. 2. Quarantine - Malware can spread, you need to quarantine the infected computer to cut it off from the rest of the network. 3. Search and Destroy - Once you've isolated the threat, you need to find the malware using an anti-malware app and allow the application to remove it. 4. Remediate - Malware can do alot of damage, especially to sensitive files needed to load Windows, so you might need to remediate formerly infected systems after cleaning off the drive or drives. Simply, fix things that malware harmed. Usually means replacing corrupted or destroyed files with your backups. 5. Educate - Best way to keep from having to deal with malware is education. Educate other people in your home or office who may be inadvertently putting your own computer and others at risk.

Answer 20

Eavesdropping - Packet Sniffing/Capturing tools such as Wireshark, you can capture network traffic and then analyze it for troubleshooting, performance, or security reasons. Man-in-the-Middle Attacks - Capturing existing network conversations is often the first step in this type of attack where the system impersonates or assumes the identity of one machine in the network conversation. The attack could then potentially modify and then reply to captured traffic. Denial-of-Service Attacks - Intentionally preventing the legitimate use of an IT service is considered (DoS). This could be as simple as crashing a remote server by sending it a specially crafted network packet, or even just intentionally unplugging the power cord if you have local access. Some DoS attacks can even brick hardware devices. Multiple Systems under attackers' control are often called (Botnet or Zombienet) used to render a service such as public web site unresponsive by flooding it with large volumes of network traffic. (DDoS) Distributed Denial of Service Attacks, can target a single host or a group of hosts or an entire corporate network, or even a cloud-based service such as Google Apps. These attacks often become Ransomware attacks and demand payment to cease the DDoS attack.

Answer 21

One that you trust will not do anything illegal or unethical with the information you provide.

Answer 22

TLS - Transport Layer Security is the modern update to the older SSL (Secure Sockets Layer) protocol. A website address that uses SSL or TLS starts with HTTPS:// which stands for Hypertext Transfer Protocol over SSL/TSL instead of HTTP://. Another clue that a website is Secure is a Lock Symbol in or near the address bar.

Answer 23

Small text file containing information about you. Data stored in cookies is used for a variety of purposes. - To authenticate or identify you as a registered user of a website so it will remember you on future visits and be faster - To track items in your shopping basket or cart - To present different content to different users - To style or theme the site based on your preferences - To track your access to websites, including what products you look at, even if you don't buy them. Not all cookies are Happy and Friendly though. Malicious cookies installed by some type of malware can track your Internet activities and report to its creator. This information is often sold to advertisers so that they can better target you. The best way to defend against these bad cookies is to guard against all malware. Some browsers and browser addons can be set to partially or completely block cookies.

Answer 24

First-Party Cookies - Comes from the website you are actually visiting. They can be helpful. Third-Party Cookies - comes from another source, such as an advertisement on the webpage you're viewing. Third-party cookies have no benefit to you as a user. Browser Privacy Settings will have options on how to handle first party and third-party cookies. Allow Them, Block Them, or get prompt each time one tries to write to your had drive.

Answer 25

Are devices or software that protect computers from unauthorized access to and from the Internat at large. Hardware firewalls use a number of methods to protect networks, such as hiding IP addresses and blocking TCP/IP ports. Most small/home office networks use Hardware Firewalls built into the router. Windows comes with an excellent software firewall called Windows Firewall. It can also handle the heavy lifting of port blocking, security logging, and more.