Unit 1: Protect Data and Systems (Section D: AAQ)

Open Ended

Can you recall a few organizational weaknesses that can lead to security breaches, like excessive permissions or weak password practices?

Open Ended

What are some common network vulnerabilities we discussed, such as issues with firewall ports, external storage, or cloud/BYOD policies?

Multiple Choice

Which of the following actions can be performed with 'Write' permissions?

• View file contents

• Modify existing files

• Run programmes

• Copy files

Multiple Choice

Which of the following is NOT a primary reason why file permissions matter in cybersecurity?

• Preventing data breaches

• Maintaining system integrity

• Improving computer speed

• Compliance requirements

Multiple Choice

Which of the following statements about operating system differences in managing file permissions is correct?

• Windows uses command-line tools like chmod for permissions.

• Linux uses a graphical user interface for setting permissions.

• Windows uses a graphical user interface for permissions, while Linux uses command-line tools.

• Both Windows and Linux use the same method for managing permissions.

Open Ended

Compare how file permission inheritance and the Principle of Least Privilege contribute to efficient and secure folder management.

Open Ended

Explain how the Principle of Least Privilege helps reduce security risks when setting file permissions.

Multiple Choice

Based on the learning objectives and introduction, which concept best explains why antivirus software should be part of a layered security strategy?

• It can detect all threats perfectly

• It is not 100% effective on its own

• It only works for known malware

• It does not require updates

Multiple Choice

Which of the following is NOT a key feature of antivirus software?

• Real-time scanning

• Signature-based detection

• Heuristic analysis

• Firewall management

Open Ended

Explain how multi-layered protection in antivirus software helps safeguard your data.

Multiple Select

Select all functions that are typically performed by antivirus software to keep users safe.

• Scheduled scans

• Web protection

• Network monitoring

• Password management

Open Ended

Why is the quarantine function important in handling false positives?

Open Ended

Explain the importance of layered security in protecting against sophisticated threats like zero-day attacks.

Multiple Choice

Which of the following best explains why antivirus software struggles to detect zero-day attacks?

• Zero-day attacks use outdated malware signatures.

• Zero-day attacks are already known to antivirus databases.

• Zero-day attacks exploit unknown vulnerabilities not yet identified by antivirus software.

• Zero-day attacks only target hardware vulnerabilities.

Multiple Select

Which of the following are strategies used to minimize the performance impact of antivirus scans?

• Running scans during off-peak hours

• Using only real-time scanning

• Disabling antivirus software

• Scanning only new files

Open Ended

Describe how packet filtering and stateful inspection work together to protect a network from unauthorized access.

Multiple Choice

Which of the following is NOT a function of hardware firewalls?

• Filter traffic before it reaches any device

• Provide network-wide protection

• Alert users to suspicious activity

• Handle high traffic volumes efficiently

Multiple Choice

Which essential firewall function is responsible for monitoring and controlling network ports to prevent attackers from exploiting vulnerable entry points?

• Access Control

• Port Management

• Traffic Logging

• Intrusion Prevention

Open Ended

Explain the difference between whitelisting and blacklisting in firewall strategies. What are the potential risks and benefits of each approach?

Multiple Choice

Which of the following statements about encryption is correct?

• Encryption makes data permanently unreadable.

• Only those with the correct decryption key can convert encrypted data back to its original form.

• Encryption is only used for data stored on devices.

• Encryption is not important for modern digital security.

Multiple Select

Match the following encryption methods for stored data with their descriptions: Full Disk Encryption, File-Level Encryption, Database Encryption.

• Encrypts entire hard drive and requires authentication before booting.

• Encrypts individual files or folders for selective protection.

• Protects information stored in databases from unauthorized access.

Open Ended

Describe the process of protecting data during transmission. What roles do the sender and recipient play in ensuring secure communication?

Open Ended

Reflecting on today's lesson about techniques used to protect data and systems, what is one concept or strategy you found most valuable, and why?