Learning Aim A IT Systems Security Quiz

What does B.M2 analyse in the context of cryptography?

• The impact of cryptography on data security

• The effectiveness of protection techniques

• The principles of information security

• The legal requirements for IT systems

Answer explanation

B.M2 focuses on how cryptography enhances data security, making it crucial for protecting sensitive information. This choice directly addresses the role of cryptography in safeguarding data.

What is the focus of A.P3 in IT systems security?

• Explain why organisations must adhere to legal requirements

• Assess the impact of IT security threats

• Investigate cryptographic techniques

• Implement strategies to protect IT systems

Answer explanation

A.P3 focuses on the importance of legal compliance in IT systems security, ensuring organizations understand and adhere to laws and regulations to protect data and avoid legal repercussions.

What is the primary threat posed by malware?

• It improves computer speed

• It enhances software capabilities

• It poses a serious threat to computer systems

• It increases data storage capacity

Answer explanation

The primary threat posed by malware is that it can compromise the security and functionality of computer systems, leading to data loss, unauthorized access, and system damage, making the correct choice "It poses a serious threat to computer systems."

What does ransomware do?

• It displays pop-up ads.

• It encrypts files and demands a ransom.

• It collects browsing data.

• It provides free software.

Answer explanation

Ransomware is a type of malicious software that encrypts files on a victim's device and demands a ransom payment to restore access. This distinguishes it from other options like pop-up ads or data collection.

What is a logic bomb?

• A type of virus

• Malware that activates under specific conditions

• A network protocol

• A type of adware

Answer explanation

A logic bomb is a type of malware that activates under specific conditions, such as a certain date or event, making the correct choice 'Malware that activates under specific conditions'.

What is the main vulnerability exploited in a structured query language (SQL) injection?

• Buffer overflow

• Poorly written code

• Input that changes application behavior

• Weak passwords

Answer explanation

The main vulnerability in SQL injection is 'input that changes application behavior'. Attackers manipulate input to execute unauthorized SQL commands, compromising the database's integrity and security.

What is a common tool that uses ICMP?

• Ping

• Traceroute

• Netstat

• Wireshark

Answer explanation

Ping is a common tool that uses ICMP (Internet Control Message Protocol) to test the reachability of a host on a network by sending echo request messages and waiting for echo replies.

What is the main goal of an attacker using SQL injection?

• To encrypt the database

• To access data not intended for them

• To improve database performance

• To create new user accounts

Answer explanation

The main goal of an attacker using SQL injection is to access data not intended for them. This technique exploits vulnerabilities in a database to retrieve sensitive information, bypassing normal access controls.

What is a common threat to computer systems mentioned in the text?

• Increased software costs

• Cyberattacks

• Reduced internet speed

• Hardware failure

Answer explanation

Cyberattacks are a prevalent threat to computer systems, targeting data and infrastructure, making them a significant concern compared to other options like software costs or hardware failure.

What does server redundancy involve?

• Using digital signatures

• Duplicated hardware in case of hardware failure

• Encrypting data

• Backing up data

Answer explanation

Server redundancy involves having duplicated hardware to ensure that if one component fails, another can take over, minimizing downtime and maintaining service availability.