BTEC DIT C3 LAB - Device Hardening & Encryption

What does the term "Vulnerable" mean?

• It describes a set of rules that allow users to use specific components or access data folders or files

• It describes a flaw or weakness in the design, implementation or configuration of a system. These can be exploited by 'black hats' to attack a digital system.

• It describes additional settings or program codes that fix vulnerabilities in applications, operating systems and evice firmware, and are usually downloaded from the manufacturer.

• It means that information or data has been converted to a type of code that cannot be understood without a translation key

What does the term "Encrypted" mean?

• It describes a set of rules that allow users to use specific components or access data folders or files

• It describes a flaw or weakness in the design, implementation or configuration of a system. These can be exploited by 'black hats' to attack a digital system.

• It describes additional settings or program codes that fix vulnerabilities in applications, operating systems and evice firmware, and are usually downloaded from the manufacturer.

• It means that information or data has been converted to a type of code that cannot be understood without a translation key

What does the term "Security Patches" mean?

• It describes a set of rules that allow users to use specific components or access data folders or files

• It describes a flaw or weakness in the design, implementation or configuration of a system. These can be exploited by 'black hats' to attack a digital system.

• It describes additional settings or program codes that fix vulnerabilities in applications, operating systems and evice firmware, and are usually downloaded from the manufacturer.

• It means that information or data has been converted to a type of code that cannot be understood without a translation key

What does the term "Privilege" mean?

• It describes a set of rules that allow users to use specific components or access data folders or files

• It describes a flaw or weakness in the design, implementation or configuration of a system. These can be exploited by 'black hats' to attack a digital system.

• It describes additional settings or program codes that fix vulnerabilities in applications, operating systems and evice firmware, and are usually downloaded from the manufacturer.

• It means that information or data has been converted to a type of code that cannot be understood without a translation key

Which of the following are device hardening techniques? (Click all that apply)

• Closing unused network ports

• Opening unused network ports

• Removing non-essential programs or services

• Installing a firewall

Identify the benefits of encrypting data?

• Its quick

• It scrambles data so others cannot easily read it.

• It ensures organisations comply with data protection laws

• It stops data from being stolen

What are the drawbacks of encryption? (Click all that apply)

• Encryption does not stop data from being stolen

• Encryption scrambles data so that others cannot easily read it.

• Encryption methods need to continually 'evolve' and change as attackers find new ways to access data

• Encrypting a large amount of data takes time

Which of the following are useful methods of protecting stored data? (Click all that apply)

• Encrypting a complete disk drive.

• Checking a website has a padlock and the HTTPS prefix on the website address

• Encrypting data in a database

• Using a digital signature, transmitted to a web browser to prove a file's identity.

Which of the following are useful methods of protecting transmitted data? (Click all that apply)

• Encrypting a complete disk drive.

• Checking a website has a padlock and the HTTPS prefix on the website address

• Encrypting data in a database

• Using a digital signature, transmitted to a web browser to prove a file's identity.

Which of the following are device hardening techniques? (Click all that apply)

• Applying security patches and updates

• Restricting user access

• Storing unencrypted data

• Installing anti-virus and anti-spyware software