Lesson 6 - Chapter 2: Configuring Web Browser Settings Flashcards
You should only download and install apps from trusted sources such as…?
the manufacturer’s website or well-known app stores (Apple App, Microsoft Store, Ninite, Softpedia)
What’s one of the most commonly used methods of verifying a download can be trusted?
Run a checksum or hashing total on the file
(a hash total is available from the trusted source most often)
How do you use a hashing total?
You compare the string available from the trusted source (MD5 or SHA256) to a hashing total generated on the downloaded file
On a Windows system, the PowerShell command _____ will generate a hash total for comparison with the hash value provided by the trusted source.
Get-FileHash
According to Microsoft, what is an untrusted source?
any source that is not from the Microsoft store or sites Microsoft has listed as trusted
According to Android, what is an unknown source?
apps or content not obtained from Google Play
According to Android, what are unknown developers?
Files not from the App store
Browser extensions are also called what?
Plug-ins, add-ons
(all mean the same thing)
What is a browser extension/add-on?
a feature enhancement for the browser or enables an existing feature
What is a plug-in?
It can provide support for certain tasks like viewing videos, opening PDF files, working with spreadsheets, etc
What’s a word of caution when it comes to extensions and plug-ins?
there are malicious ones, and can be very difficult to remove once installed
What’s the difference between a browser extension and a browser plug-in?
an extension runs outside of the browser to which it’s attached, a browser plug-in runs inside the browser
(Browser extension adds features or enhancements to features and plug-ins add support for certain tasks or features)
What’s a trusted source where you could install extensions and plug-ins?
application store of each OS provider
What password managers are available for Win 10/11 and macOS?
Win10/Win11: Credential Manager in the Control Panel
macOS: Keychain (web and OS credentials)
(apart from the browser password managers available)
What is a secure connection?
encrypts network traffic before it is transmitted over a communication medium
What type of secure connections do web browsers provide for the requests it sends to web servers over an HTTPS link?
they apply SSL or TLS encryption for the requests to web servers
SSL/TLS provide what 3 layers of encryption for the web page transmitted back to the user?
- Encryption
- Authentication
- Integrity
What does encryption mean?
it keeps the data private
What does authentication mean?
ensures the data is from the same site the user requested it from
What does integrity mean?
ensures the data isn’t altered in transit
What’s another way besides SSL/TLS encryption to validate that a site is real/not a fake?
with a security certificate
Why is a security certificate another way to be secure?
the certificate itself can be verified (which validates and authenticates a site’s ownership and its domain name)
How do you view the security certificate for a website?
click the padlock icon on a browser’s address bar
What is a pop-up?
Generally a nuisance, an object that displays over the top of a web page (may or may not be associated with the page)
(some legit sites require pop-ups for the site to function)
