Preventing vulnerabilities *

Question 1

List the 8 techniques for preventing vulnerabilities

Answer 1

• penetration testing
• network forensics
• network policies
• user access levels
• secure passwords
• encryption
• anti-malware software
• firewalls

Question 2

What is penetration testing? (2 points)

Answer 2

• determine how resilient a network is against an attack
• probe network for potential weaknesses and attempt to exploit them

Question 3

What is network forensics?

Answer 3

• monitoring the traffic on a network
• at regular intervals transmitted data packets are copied
• these are stored for later analysis
• information gathered can help identify invasive traffic (from hackers)

Question 4

What are network policies? (10 points)

Answer 4

policies that ensure:

• users have secure, hard-to-guess passwords
• users change their passwords on a regular basis
• users cannot connect unauthorised equipment to a network
• levels of access are given
• regular backup procedure is in place
• disaster recovery procedure in place
• regular penetration testing
• regular maintenance
• maintaining high level of security - firewalls, anti-virus software
• preventing physical access to servers

Question 5

What are user access levels?

Answer 5

determine the facilities a user has access to

Question 6

What is encryption?

Answer 6

the process of disguising data so that it cant be understood

Question 7

What are the three purposes of anti-malware

Answer 7

• to detect malware
• to prevent malware from being installed
• to remove malware from the system

Question 8

What are firewalls?

Answer 8

a tool that monitors traffic going into and out of a computer or a network and either allows traffic to pass or blocks it, based on the firewall policy