Module 2 Midterms Intro to Computing

What is digital security?

Digital security encompasses protective measures across three main components: Host Security, Data Security, and Network Security. Each plays a distinct role in creating a secure environment.

Define host security.

Host security is the suite of protective measures and protocols aimed at securing individual computing devices (desktop computers, laptops, servers, and mobile devices) against cyber threats, unauthorized access, and data breaches.

What are four important practices for host security?

Consistent Software Updates (patch vulnerabilities), Robust Password Policies (strong unique passwords), User Awareness Training (educate on cybersecurity threats), and Adoption of Encryption Technologies (encrypt data in transit and at rest).

Define data security.

Data security refers to the protection of digital data from unauthorized access, corruption, or theft. It encompasses measures and protocols to ensure confidentiality, integrity, and availability of sensitive information.

What are the three key pillars of data security?

Confidentiality (maintain privacy and comply with regulations like GDPR and HIPAA), Integrity (prevent unauthorized access and modifications through backups and access controls), and Availability (ensure data can be restored in case of loss or corruption).

Define network security.

Network security encompasses measures to protect the integrity, confidentiality, and availability of computer networks and data.

What are five proactive steps for maintaining strong network security?

Regular Updates and Patch Management, Comprehensive Access Control Policies (principle of least privilege), Data Encryption (protect data at rest and in transit), Security Awareness Training, and Advanced Security Technologies (NGFW, EDR, secure web gateways).

Define malware.

Malware is malicious software designed to cause harm to computer systems, networks, or users. It gets into systems without user consent to steal private and confidential data including bank details and passwords.

What can malware do?

It can steal sensitive information like passwords and credit card numbers, disrupt system operations, and allow attackers to gain unauthorized access to devices.

List the six different types of malware.

Botnets (makes your PC into a zombie), Worms (spreads across computers), Trojans (sneaks malware into your PC), Adware (spams advertisements), Spyware (steals data from your PC), and Ransomware (locks your computer and blackmails you).

Define a virus/Botnet.

A virus is a malicious executable code attached to another executable file that, once active, will infect other programs on the computer, turning it into a zombie.

Define a worm in the context of malware.

Worms replicate themselves on the system, attaching themselves to different files and looking for pathways between computers, such as networks that share common file storage areas.

Define a Trojan horse.

A Trojan horse is a type of malware that carries out malicious operations under the appearance of a desired operation (like playing an online game). It binds itself to non-executable files such as image and audio files.

Define adware.

Adware is malware that displays unwanted ads and pop-ups on the computer. It comes along with software downloads and packages and generates revenue for the software distributor by displaying ads.

Define spyware.

Spyware is malware whose purpose is to steal private information from a computer system for a third party. It collects information and sends it to the hacker.

Define ransomware.

Ransomware is a type of malware that encrypts a victim's data where the attacker demands a ransom or payment to restore access to files and the network.

List five signs that your device may be infected with malware.

Performing poorly during execution, browser redirects to unintended websites, warnings about infections with offers to buy products, trouble starting or shutting down the computer, and persistent pop-up ads.

List five ways to protect yourself from malware.

Keep operating system and software updated, avoid clicking on pop-up links (close them instead), limit app installations to only those needed, be cautious online and don't click suspicious links, and always access bank accounts directly through official websites.

How can malware be removed from a system?

Use security software programs known as antivirus to detect and stop malware and eliminate it from infected systems. An example is Malwarebytes.

Define physical security.

Physical security is the protection of personnel, hardware, software, networks, and data from physical actions and events that could cause serious loss or damage to an enterprise, including protection from fires, burglary, floods, theft, natural disasters, terrorism, and vandalism.

List five common physical threats to an organization.

Employee Accidents (careless mistakes), Internal Bad Actors (individuals who intentionally engage in fraud), Equipment Failure (power outages, broken surveillance systems), Theft (cash, computers, electronics, sensitive documents), and Vandalism (damaged infrastructure).

List four additional common physical threats.

Weather (unplanned downtime, equipment failure, supply-chain disruptions), Natural Disaster (earthquakes, tsunami, floods), Civil Unrest or Violence (protests or riots affecting operations), and Terrorism.

Define troubleshooting in the context of computing.

Troubleshooting is a systematic approach to problem-solving used to find and correct issues with complex machines, electronics, computers, and software systems.

List the six steps of the troubleshooting process.

1) Identify the problem, 2) Establish a Theory of Probable Causes, 3) Test the Theory to Determine Cause, 4) Establish a Plan of Action and Implement the Solution, 5) Verify Full System Functionality and Implement Preventive Measures, 6) Document Findings, Actions, and Outcomes.

What are examples of open-ended questions when identifying a problem?

What problems are you experiencing? When did the problem start?

What are examples of close-ended questions when identifying a problem?

Has anyone used your computer? Is your antivirus up to date? Have you ever had this problem before? Did you see any error messages? Have you shared your password with anyone?

List five common causes of security problems.

The user account is disabled, the user is using an incorrect username or password, the user does not have correct folder or file permissions, firewall configurations are incorrect, and the user's computer has been infected by a virus.

List six common steps to determine the cause of a security problem.

Verify user account settings, reset the user's password, verify user permissions for folders and files, check firewall logs for errors, verify firewall settings, and scan and remove viruses from the computer.

List seven resources for further research when solving a problem.

Helpdesk Repair Logs, Other Technicians, Technical Websites, Computer Manuals, Device Manuals, Online Forums, and Internet Search.

List five verification steps to confirm full system functionality after resolving a problem.

Reboot the computer, log on to the computer, connect to the network using wireless, verify file and folder access, and verify that no virus is found with a virus scan.

List five documentation steps when completing troubleshooting.

Discuss the solution with the customer, have the customer verify the problem is solved, provide the customer with all paperwork, document the steps taken in the work order and technician's journal, and document components used in the repair and time spent.

Why is troubleshooting essential in software development?

It saves time and energy by locating the root cause, improves user experience and satisfaction, enhances system performance, and prevents future issues by identifying potential problems before they occur.