system vulnerabilities

Question 1

network vulnerabilities

Answer 1

• firewall ports ( can be used as a way of spreading malware. could be exploited to gain access to data on system)
  use firewalls to block unused ports
• external storage devices ( e.g. USB. could bring malicious software into organisation unknowingly)
  set rule of no external devices

Question 2

organisational vulnerabilities

Answer 2

• file permissions and privileges (assign staff access levels. total permissions is a risk. could cause damage. someone else could log into their account and have total permissions)
  only assign permissions to staff that they require to perform their role.
• password policy ( rules to ensure passwords are secure)
  upper&lower case, nums, special char

Question 3

software vulnerabilties

Answer 3

• software from untrustworthy sources (could download malware)
• illegal copies of software ( can infect computers
• SQL ( on legitimate software, user enters SQL statement, runs against database. can delete/ extract data from database)
• zero day ( flaws in software that developers don’t know about- unpatched)

Question 4

OS vulnerabilities

Answer 4

• these are caused by poor maintenance
• using older OS. not longer supported by developer, not being updated