Security VI

Which practice might lead to a user writing down their password, potentially exposing it to others?

• Password Expiration

• Artificial Complexity

• Password Length

• Password reuse across sites

Answer explanation

Artificial complexity can make a password hard to remember, leading users to write them down or have to reset them often. While reusing passwords across sites can lead to other security vulnerabilities, it typically does not lead to users writing down their passwords. Password expiration, or changing the password periodically, does not inherently lead to users writing down their password. While long passwords can be more difficult to remember, the term artificial complexity refers specifically to adding a variety of character types (such as symbols, numbers, uppercase and lowercase letters) to a password.

Which of the following is a recommended approach to creating strong and memorable passwords?

• combining random words with numbers and special characters

• repeating the same password for different accounts

• Choosing common dictionary words or passwords

• Using personal information such as birthdates or names

Answer explanation

Combining random words with numbers and special characters is a recommended approach to creating strong and memorable passwords. This technique, known as passphrase or password phrase, creates longer passwords that are more resistant to brute-force attacks. Using a combination of unrelated words along with numbers and special characters adds complexity to the password and makes it harder to guess. Using personal information such as birthdates or names as passwords is not recommended as they are easily guessable or can be obtained through social engineering. Personal information should be avoided when creating passwords. Repeating the same password for different accounts is a risky practice as it increases the potential impact if one account is compromised. If an attacker gains access to one account, they can potentially access all other accounts using the same password. It is advisable to use unique passwords for each account to enhance security. Choosing common dictionary words as passwords is also not recommended as they are vulnerable to dictionary-based attacks or brute-force cracking. Hackers often use automated tools that can quickly try different combinations of common words.

Which of the following security measures is designed to control incoming and outgoing network traffic for a specific device, providing an added layer of protection against unauthorized access?

• Host Firewall

• Patching Updates

• Changing Default Passwords

• Antivirus/ Anti-malware

Answer explanation

A host firewall is designed to control incoming and outgoing network traffic for a specific device. It acts as a barrier between the device and the network, regulating communication and providing an added layer of protection against unauthorized access. Host firewalls can be configured to allow or block specific network connections based on predefined rules. Antivirus and anti-malware software are essential for detecting and removing malicious software. However, they focus on identifying and eliminating malware, rather than controlling network traffic for a specific device. Patching updates involve applying software updates and security patches to address known vulnerabilities in software. While important for maintaining overall security, it is not directly related to controlling network traffic or providing an added layer of protection against unauthorized access. Changing default passwords is a good security practice to prevent unauthorized access to devices or systems. However, it does not specifically pertain to controlling network traffic or providing an added layer of protection against unauthorized access.

Which type of backup is performed on critical data that needs to be restored quickly in case of a system failure?

• Redundancy backup

• OS backup

• File Back Up

• Database Back Up

Answer explanation

Database backup specifically focuses on creating copies of databases, which often contain critical data. Database backups are designed to capture the entire database or specific components of it, allowing for efficient restoration of critical data. File backup involves creating copies of individual files or folders. While it is a common backup method, it may not be the most suitable for critical data that needs to be restored quickly in case of a system failure. "Redundancy backup" is not a recognized term in the context of data backup. Redundancy typically refers to the practice of having duplicate resources or systems in place to ensure fault tolerance, rather than a specific backup method. OS backup involves creating copies of the operating system (OS) files and configurations. While OS backups are essential for system recovery, they do not necessarily target critical data restoration.

Which term refers to a system's ability to operate continuously without failure, even if a component breaks down?

• Replication

• Fault Tolerance

• Contingency Planning

• Redundancy

Answer explanation

Fault tolerance is a system’s ability to continue functioning even if a component fails. This is often achieved through redundancy or backup components. Redundancy is a part of fault tolerance. It refers to the practice of duplicating components or systems to prevent failure but is not equivalent to the broader concept of fault tolerance. While contingency planning is an important part of maintaining operations during disruptions, it is a broader concept that includes strategies like alternate work procedures or backup resources, not just system component reliability. Replication is a process often used in fault tolerance and involves synchronizing data between servers or sites. However, it is a specific process within fault tolerance, not the overall concept.

Which cryptographic method is used to confirm that a digital message or document has not been altered, providing proof of data integrity?

• Symmetric Encryption

• Asymmetric Encryption

• Public Key Infrastructure (PKI)

• Cryptographic Hashes

Answer explanation

Cryptographic hashes are used to verify the integrity of data or a document. By comparing the hash of the received data with the hash of the original data, it can be confirmed whether the data was altered during transmission. Symmetric encryption is primarily used to protect confidentiality of the data, not to confirm that the data has not been altered. Asymmetric encryption is mainly used to secure data in transit and for digital signatures, it's not specifically used to confirm that a digital message or document has not been altered. PKI is a method of securely exchanging data over networks, it doesn't directly confirm that a digital message or document has not been altered.

What type of data encryption is applied to protect data stored on a mobile device?

• Disk level Encryption

• Mobile Device Encryption

• Network level Encryption

• File Level Encyption

Answer explanation

Mobile device encryption refers to the encryption of data stored on a mobile device such as a smartphone or tablet. It provides protection for the entire device's storage, including the operating system, applications, and user data. Network level encryption refers to the encryption of data transmitted over a network, such as through secure protocols like HTTPS or VPN. It does not specifically apply to protecting data stored on a mobile device. Disk level encryption refers to the encryption of an entire disk or storage device, including the operating system and all data stored on it. While it can be applied to mobile devices, it is not the specific type of encryption commonly used for protecting data on mobile devices. File level encryption refers to the encryption of individual files and folders, typically on a computer or storage device. It does not specifically apply to the protection of data stored on a mobile device.

Which authentication method requires users to provide two or more factors to verify their identity?

• Two-Factor Authentication

• Role Based Authentication

• Multi factor

  Authentication

• Single-Factor Authentication

Answer explanation

Multifactor authentication is a method that requires users to provide two or more factors to verify their identity. These factors can include something the user knows (e.g., password), something the user has (e.g., hardware token), or something the user is (e.g., biometrics). Single-factor authentication refers to a method where users provide only one factor (such as a password or PIN) to verify their identity. It does not require multiple factors. Role-based authentication is not directly related to the requirement of multiple factors for verifying identity. Role-based authentication is a method that grants access privileges based on the user's assigned role or responsibilities. Two-factor authentication is a specific type of multifactor authentication that requires users to provide exactly two factors to verify their identity. It is a subset of multifactor authentication but does not encompass all possible combinations of multiple factors.

Sarah, a system administrator at Dion Training, wants to implement a security measure to prevent unauthorized access to company devices. She decides to enforce a requirement for users to authenticate using a unique username and password. Which of the following security measures is Sarah implementing?

• Firewall protection

• Biometric Identification

• User Access Control

• Data Encyption

Answer explanation

Explanation

User access control is the security measure Sarah is implementing. It involves requiring users to authenticate using a unique username and password before accessing company devices. This measure helps prevent unauthorized access and ensures that only authorized users can use the devices. Data encryption involves converting information into a secret code to protect its confidentiality. While it is a valuable security measure, it does not directly relate to enforcing unique username and password authentication. Biometric authentication refers to the use of unique physical characteristics, such as fingerprints or facial recognition, to authenticate users. While biometric authentication can be a strong security measure, the scenario explicitly mentions implementing a unique username and password, not biometric features. Firewall protection is a security measure that monitors and controls network traffic, allowing or blocking specific connections based on predefined rules. While it is an important security measure, it is not specifically related to enforcing unique username and password authentication.

What feature of an antivirus software is responsible for isolating and removing detected malware from infected systems?

• Scheduled Scans

• Heuristics Analysis

• on-access scanning

• Quarantining and remediating infected systems

Answer explanation

Quarantining and remediating infected systems is responsible for isolating and removing detected malware from infected systems. When malware is detected, it is placed in quarantine, preventing it from causing further harm, and the antivirus software then proceeds to remediate the infected system by removing or repairing the malware. Heuristic analysis is a technique used by antivirus software to detect previously unknown or zero-day malware based on behavioral patterns. While an important feature, it is not directly related to the process of isolating and removing detected malware from infected systems. Scheduled scans allow users to configure the antivirus software to perform regular scans at specific times or intervals. While important for detecting malware, it does not specifically refer to isolating and removing malware from infected systems. On-access scanning is the feature of an antivirus software that automatically scans files and programs in real-time as they are accessed or downloaded. It provides immediate protection against malware threats but does not specifically refer to isolating and removing detected malware.