Objective 6.0: Security

Question 1

What is the principle of least privilege?

Answer 1

The principle of least privilege means giving users only the minimum level of access necessary to perform their job functions.

Question 2

What are the differences between a virus, a worm, and a Trojan?

Answer 2

A virus requires user action to spread, a worm can self-replicate and spread without user action, and a Trojan disguises itself as legitimate software but contains malicious code.

Question 3

What is two-factor authentication (2FA)?

Answer 3

2FA is a security process where the user provides two different authentication factors to verify their identity, such as a password and a mobile device code.

Question 4

What is the purpose of a firewall?

Answer 4

A firewall monitors and controls incoming and outgoing network traffic based on predetermined security rules, protecting against unauthorized access.

Question 5

Define social engineering in the context of cybersecurity.

Answer 5

Social engineering is the manipulation of individuals into divulging confidential information or performing actions that compromise security.

Question 6

What are some common practices for securing a wireless network?

Answer 6

Use WPA3 encryption, disable SSID broadcasting, change the default router password, enable MAC address filtering, and use a strong passphrase.

Question 7

What is encryption, and why is it important?

Answer 7

Encryption is the process of converting data into a code to prevent unauthorized access. It ensures data confidentiality and integrity.