cyber security

Question 1

define cybersecurity

Answer 1

the practice of protecting systems/ networks , and programs from digital attacks., damage or unauthorised access

These cyberattacks are usually aimed at accessing, changing, or destroying sensitive information; extorting money from users via ransomware; or interrupting normal business processes.

Question 2

what is the threat of weak and default passwords

Answer 2

• stronger passwords are less easily guessed
  -8 or more characters
  text, numbers, upper case and lower case , symbols
• easy to guess default passwords

Question 3

definition and threat of misconfigured access rights

Answer 3

• permissions assigned to each individual user of a cs
• determines which network locations the user has access to
  -access rights depend on users position or role in the company

Question 4

removable media definition and threats

Answer 4

• external storage devices such as USB flash drives
• ability to transfer malware such as viruses between devices

Question 5

what is and the threat of unpatched software

Answer 5

• all software has bugs and security loopholes especially when first released
• software can become outdated quick

Question 6

what is penetration testing

Answer 6

• to find out whether there are any security vulnerabilities in à network
  -stimulate potential attacks
• people who do this are called white-hat hackers

Question 7

what are biometric measures

Answer 7

authentication methods which verify users by their physical characteristics

Question 8

what are password systems role

Answer 8

securing a network
to factor authentication should be used

passwords are often stored as hash

Question 9

what is CAPTCHA

Answer 9

Completely Automated Public Turing test to tell Computers and Humans Apart

Question 10

role of email confirmation

Answer 10

more secure

Question 11

role of automatic software updates

Answer 11

fixes vulnerabilities in each individual piece of software , but not as quickly as pen testing

Question 12

white-box testing

Answer 12

assumes knowledge of the internals of the system
stimulates attack from someone with detailed insider knowledge

Question 13

black box testing

Answer 13

stimulates full on cyberattack
overwhelming the system with assumed system knowledge

Question 15

brute-force attack

Answer 15

guessing every possible combination to get to the passwords