Network Security - Preventing vulnerabilities - OCR CraignDave

Which of the following helps protect a system against malicious software (malware)?

• Disabling operating system updates

• Using firewalls and anti-malware tools, along with regular software updates

• Opening email attachments from unknown sources

• Storing backup copies on the same drive as original files

Which practice best helps protect users from phishing scams?

• Relying on multiple internet browsers

• Training individuals to identify suspicious emails and websites

• Only using mobile devices for online communication

• Browsing the internet in private/incognito mode

How can organizations limit the success of brute-force attacks?

• Allowing unlimited login attempts for convenience

• Implementing account lockout or timeout policies after repeated failed passwords

• Disabling all password complexity requirements

• Avoiding the use of CAPTCHAs on login forms

Which method is especially useful for minimizing damage caused by ransomware and other malware?

• Installing multiple antivirus programs simultaneously

• Regularly backing up files to secure, removable storage

• Using only public Wi-Fi networks for sensitive data transfers

• Ensuring all passwords are short but memorable

Which of the following measures can help block large-scale traffic aimed at overwhelming a server (DoS attack)?

• Ignoring the issue until traffic subsides

• Using default network configurations provided by the operating system

• Employing firewalls with packet filtering and monitoring incoming traffic

• Turning off all website access during peak hours

What is a common technique for preventing hackers from injecting malicious code into database queries (SQL injection)?

• Allowing direct database access for all employees

• Using input validation and parameterized queries

• Generating brute-force login attempts to test database performance

• Providing default admin credentials to everyone

Which method helps safeguard data from interception when transmitted or stored?

• Relying on plain-text communication for simplicity

• Avoiding the use of passwords altogether

• Encrypting data so that only authorized parties can read it

• Broadcasting all sensitive information publicly to ensure transparency

Which of the following is considered a valuable form of physical security?

• Storing computer servers in unlocked cabinets for quick access

• Installing only software-based solutions to protect hardware

• Using locks, cameras, and controlled entry points to prevent unauthorized access

• Displaying all login credentials on a notice board

How can staff training help reduce network security vulnerabilities?

• It forces employees to memorize complicated system protocols

• It teaches employees to identify, avoid, and report suspicious activities

• It replaces the need for antivirus software

• It prevents operating system updates from installing automatically

Which measure can confirm that a website user is a human rather than an automated script trying to log in repeatedly?

• Adding CAPTCHAs that require user interaction

• Allowing repeated login attempts with no delays

• Storing all passwords in plain text

• Displaying a public list of all registered usernames