Objective 2.0: Security

Question 1

What is the difference between a firewall and an antivirus?

Answer 1

A firewall controls incoming and outgoing network traffic based on security rules, while antivirus software detects, prevents, and removes malware.

Question 2

What is a UAC (User Account Control) in Windows?

Answer 2

UAC helps prevent unauthorized changes to the operating system by prompting for administrative approval when making system changes.

Question 3

What is the purpose of BitLocker in Windows?

Answer 3

BitLocker provides full disk encryption to protect data from unauthorized access if a device is lost or stolen.

Question 4

Name three types of authentication factors.

Answer 4

Something you know (password), something you have (smart card), and something you are (fingerprint).

Question 5

What is the principle of least privilege?

Answer 5

It means granting users only the permissions they need to perform their job functions, reducing the risk of accidental or malicious actions.

Question 6

What is social engineering?

Answer 6

Social engineering is the manipulation of people into divulging confidential information or performing actions that compromise security.

Question 7

What are two common methods of data encryption?

Answer 7

Symmetric encryption (same key for encryption and decryption) and asymmetric encryption (public and private keys).

Question 8

How can you protect against phishing attacks?

Answer 8

Be cautious of unsolicited emails, verify the sender’s identity, avoid clicking on suspicious links, and use email filtering tools.

Question 9

What is multi-factor authentication (MFA)?

Answer 9

MFA requires two or more independent authentication factors to verify a user’s identity.

Question 10

What is the purpose of a security policy in an organization?

Answer 10

It defines the organization’s approach to securing its information systems, including rules and procedures for handling sensitive data.