LOGICAL PROTECTION

Question 1

Usernames and passwords

1a. Describe why usernames and strong passwords are necessary. [2]
1b. State 3 rules for choosing a strong password. [3]

Answer 1

usernames must be matched with a secure password to minimize the chances of unauthorized users accessing a system.
passwords should contain a mix of uppercase and lowercase letters, punctuation and numbers.
passwords should be a substantial length and should be regularly changed

Question 2

Anti - malware

Describe the purpose of anti-virus and anti-spyware software. [4]

Answer 2

anti virus system scans a system and removes viruses. if left to infect a system, a virus could delete data or permit access to unauthorized users

anti spyware software removes spyware on an infected system so that hackers cannot view personal data or monitor users.

organizations should install and regularly update anti virus or anti spyware programs.

Question 3

firewall

Describe the roles of a firewall. [4]

Answer 3

Firewalls prevent unauthorised access to or from a network.

Firewalls filter data packets and block anything that is identified as harmful to the computer system or network.
Firewalls can also be used to block access to specific websites and programs.
A firewall can be in the form of a physical device which is connected to the network, or software installed on a computer system.

Question 4

Encryption

Explain what encryption is. What are the two types? [4]

Answer 4

Encryption is the conversion of data (plaintext) into an unreadable format (ciphertext) so it cannot be understood if intercepted.
Encrypted data can only be understood by an authorized system with a decryption key.
There are two types of encryption.
Encryption at rest is when data is encrypted while it is being stored on a system or storage drive.
Encryption in transit is to secure the data as it being transferred between systems on a network.

Question 5

Tiered levels of access

Why would an organization use tiered levels of access? What are the 3 levels of file access? [5]

Answer 5

The purpose of tiered levels of access is to grant different types of permission to certain users.
Managing levels of file access ensures that only authorized people can access and change certain files.
There are different levels of file access:
No access
Read-only - Allows a user to view but not edit.
Read/write - Allows a user to view and edit.

Question 6

obfuscation

What is obfuscation? State a scenario in which it would be used. [3]

Answer 6

Obfuscation is when data is deliberately changed to be unreadable to humans but still understandable by computers.
Program code might be obfuscated to stop rival programmers from viewing and stealing it if they were able to access it.
Specialist software can be used to obfuscate data and convert it back into a human-readable format.