Unit 1.4. Network Security

Question 1

Malware

Answer 1

Software programs designed to cause damage to a computer system and steal information

Question 2

Viruses

Answer 2

A type of malware that attaches itself to legitimate files and programs, spreading. This can cause harm to files, altering them and slowing down computer performance but also compromising sensitive data.

Question 3

Worms

Answer 3

A type of self-replicating malware that spreads across networks by exploiting security vulnerabilities, without needing to attach itself to another program to spread

Question 4

Trojan Horses

Answer 4

A type of malware that disguises itself as a harmless program, to trick users into installing it onto their computers. This can extort sensitive data

Question 5

Ransomware

Answer 5

A type of malware designed to seize access to your files and computer system, holding them for ransom to extort money from the user

Question 6

Spyware

Answer 6

A type of malware that enters a user’s computer, gathers data from the device and user, and sends it to third parties without their consent.

Question 7

Pharming

Answer 7

A type of online fraud that uses malicious code to direct victims to spoofed websites, to steal private details (e.g. account number, login password etc.)

Question 8

Social Engineering

Answer 8

Methods used to trick people into divulging sensitive information, by preying on human fears and instincts.

Question 9

Phishing

Answer 9

A type of fraud in the form of fake emails and messages from supposedly ‘legitimate’ companies, designed to extort private information by tricking the user

Question 10

Pretexting/ blagging

Answer 10

A social engineering tactic where a person uses a convincing but fake story or scenario to deceive someone into compromising sensitive information

Question 11

Shouldering

Answer 11

A social engineering tactic where someone looks at a person’s private information, like a PIN or password, by looking over their shoulder

Question 12

Brute Force Attacks

Answer 12

A trial-and-error method used by hackers to guess login credentials by systematically trying all possible combinations.

Question 13

Distributed Denial of Service (DDoS)

Answer 13

A coordinated attack with the intention of disrupting the normal functioning of a network, website or server by using an army of compromised machines, a botnet, to send many simultaneous requests to overload network.

Question 14

Packet Sniffing

Answer 14

The interception and examination of data packets as they travel across a network, in order to collect private and sensitive information.

Question 15

Man In The Middle (MITM) attacks

Answer 15

A cyberattack where an attacker intercepts communication between two parties to eavesdrop or tamper with the data being exchanged

Question 16

SQL injections

Answer 16

An active cyber attack where a malicious SQL command is entered into a website’s input fields (like a login or search box) to gain unauthorized access to data from a database, in order to delete, view or modify it

Question 17

Penetration testing

Answer 17

The process of using “ethical hacking” methods to find and exploit vulnerabilities in a system, in order to test its resilience if faced with malicious hackers or malware

Question 18

Anti Malware Software

Answer 18

A program designed to prevent, detect, and remove malware from your computer or network, scanning the network for worms, viruses and trojans.

Question 19

Firewalls

Answer 19

A network security system that acts as a barrier between a network and the internet by monitoring incoming and outgoing network traffic. It blocks and filters inappropriate content.

Question 20

User Access Levels

Answer 20

A hierarchy of permissions that determine what files, software, and other resources a user can interact with on a computer or network.

Question 21

Encryption

Answer 21

The process of encoding a message/information, which can only be decoded using a key, so only authorised persons can access and understand it