1.4 Network Security

Question 1

What are networks ?

Answer 1

A group of interconnected computers/devices.

Question 2

What are the forms of network attacks ?

Answer 2

• Active
• Eavesdropping(Passive)
• External
• Internal

Question 3

What is an Active network attack ?

Answer 3

attempts to modify or delete data, or to prevent a network from operating correctly

Question 4

What is an Eavesdropping (Passive) network attack ?

Answer 4

hacker monitors a network in order to gain information

Question 5

What is an External network attack ?

Answer 5

someone outside of an organisation attempts to hack its network.

Question 6

What is an Internal network attack ?

Answer 6

someone within an organisation attempts to hack its network.

Question 7

What is Malware ?

Answer 7

Malware is malicious software that is designed to hack a system.

Question 8

What is a virus ?

Answer 8

• Programs embedded within other files
• replicate themselves and become part of other programs

Question 9

What are worms ?

Answer 9

• they are not hidden within other files
• often spread through emails.

Question 10

What are Trojans ?

Answer 10

• Programs which act to be legitimate but are malware
• cannot spread by themselves

Question 11

What is spyware ?

Answer 11

• Programs that monitor user activities
• send the information back to a hacker.

Question 12

What is ransomware ?

Answer 12

• Programs that attempt to blackmail a user into making a payment to a hacker
• encrypt documents and won’t decrypt them

Question 13

What is phishing ?

Answer 13

Emails that try to trick users into giving away personal details

Question 14

What is a brute force attack ?

Answer 14

a program is used to find a password by trying all possible combinations of characters

Question 15

What is a Denial of Service (DOS) attack ?

Answer 15

Where a computer is used to prevent a server from performing its tasks

Question 16

What is a data interception and theft attack ?

Answer 16

• Where data is intercepted during transmission
  -using software called a packet sniffer

Question 17

What is a SQL injection attack ?

Answer 17

Where SQL code is entered as a data input

Question 18

What is poor network policy ?

Answer 18

Where a network does not have security rules in place for users to follow.

Question 19

What are features that poor network policies tend no to have ?

Answer 19

• Levels of access
• stopping the connection of external devices
• regulation regarding secure passwords
• Restriction on websites
• Preventing wireless connection/remote access
• Formal backup procedure
• Maintenance program

Question 20

What are the methods to keep a network safe ?

Answer 20

• Penetration testing
• network forensics
• User access levels
• secure passwords
• encryption
• anti-malware software
• firewalls

Question 21

What is penetration testing ?

Answer 21

probing the network for potential weaknesses and attempt to exploit them

Question 22

What is network forensics ?

Answer 22

• monitoring the traffic on a network
  -At regular intervals transmitted data packets are copied
• stored for later analysis

Question 23

What are user access levels ?

Answer 23

Determine the facilities a user has access to

Question 24

What is a secure password ?

Answer 24

• one that is not easy to guess
• that requires at least eight characters
• at least one uppercase letter
• one number
• one special character

Question 25

What is encryption ?

Answer 25

- process of disguising data so that it cannot be understood

Question 26

What is anti malware software ?

Answer 26

scanning through all the files on a computer and checking them against a list of known malware

Question 27

What are the three purposes of anti malware ?

Answer 27

- to detect malware that has been installed - to prevent malware from being installed - to remove malware from the system

Question 28

What are firewalls ?

Answer 28

- tool that monitors traffic going into and out of a computer or network - allows the traffic to pass through or blocks it.

Question 29

Why can anti malware be ineffective ?

Answer 29

If not updated as it's only reactive to what it knows.

Question 30

Can firewalls be hardware-based or software based ?

Answer 30

YES