P3M1- Security methods (Network) Part 3

What is a common method for ensuring network security in a bank?

• Removing all passwords

• Allowing unlimited access to the network

• Banning the use of computers

• Installing firewalls and antivirus software

Which policy is crucial for managing who can access specific software or data in a bank's IT system?

• Open access policy

• Unlimited data usage policy

• Policies and procedures on access rights

• Unrestricted software installation policy

How can a bank limit the risk of unauthorized hardware being connected to its network?

• Offering free USB drives to employees

• Disabling CD drives or flash drives

• Mandatory installation of games on work computers

• By encouraging the use of personal devices

What policy helps to control external access to a bank's network via mobile technology?

• Banning the use of smartphones and tablets

• Policies on external access via mobile technology

• Unlimited mobile data plan for all employees

• Encouraging the use of public Wi-Fi

Which of the following is NOT a recommended security method for protecting IT systems and data in a bank?

• Regularly updating network security policies

• Implementing patch management processes

• Allowing all employees to install software at will

• Using antivirus software

What technique is most effective for preventing phishing attacks in a bank's email system?

• Encouraging the use of personal email accounts

• Training employees to recognize phishing attempts

• Removing email systems entirely

• Allowing all emails without scanning

Which of the following best describes a method to secure online transactions for bank customers?

• Disabling all online transactions

• Implementing two-factor authentication

• Allowing transactions over public Wi-Fi without restrictions

• Requiring transactions to be done in person only

What is a key strategy for protecting sensitive customer data stored in a bank's database?

• Storing all data in a single, central database

• Using simple, easy-to-remember passwords for database access

• Encrypting data both at rest and in transit

• Allowing all employees unrestricted access to databases