Cyber Security
Học bằng cách chơi
Trả lời những câu hỏi này để kiếm năng lượng, rồi câu cá và khám phá. Không cần tài khoản.
Ghi chú bài học
Cyber Security Threats
- Brute-force attack: repeatedly tries password/PIN combinations; dictionary attack tries common words/phrases.
- Data interception & theft: uses a packet sniffer to capture network data and steal usernames/passwords.
- DDoS attack: floods a server with requests from many bots (compromised computers), making it unusable.
- Hacking: exploits weaknesses (unpatched software, outdated anti-malware) to gain unauthorised access.
- Malware: malicious software including virus (replicates, corrupts files), worm (spreads across network), Trojan (disguised as legitimate), spyware (records activity), adware (displays ads), ransomware (encrypts files, demands ransom).
- Pharming: redirects user to a fake website by altering DNS settings or browser settings; protect with anti-malware, check URLs, look for padlock icon.
- Phishing: sends fraudulent emails/SMS claiming to be from a reputable company to trick users into revealing details.
- Social engineering: exploits human weaknesses (e.g., fraudulent phone calls, pretexting) to gain confidential data.
Keeping Data Safe – Access Control & Authentication
- Access levels: set based on role – full access (create/edit/delete), read-only, no access.
- Authentication: verifies user identity via usernames/passwords, multi-factor authentication, CAPTCHA, or biometrics (fingerprint, facial recognition, iris scan).
- Biometrics are more secure than passwords: cannot be guessed, faked, recorded by spyware, or shoulder-surfed.
Keeping Data Safe – Software & Network Defences
- Anti-malware: scans files/emails/websites for known malware signatures; includes anti-virus, anti-spam, anti-spyware; updates automatically.
- Firewall: monitors incoming/outgoing traffic, filters based on rules; can be hardware (protects whole network) or software (protects individual devices).
- Proxy server: hides user's IP address/location, filters web traffic, blocks malicious content.
- SSL (Secure Socket Layer): encrypts data transmitted over the internet; uses digital certificate with public key for authentication.
- Automatic software updates: ensure vulnerabilities are patched quickly without user intervention.
Keeping Data Safe – User Practices & Communication
- Privacy settings: control personal information shared online; review regularly to prevent identity theft.
- Check URLs: verify links before clicking (e.g., `amaz.on.co.uk` vs `amazon.co.uk`) to avoid phishing.
- Monitor communication: phishing emails often have spelling/grammar errors, urgent tone, or lack professionalism.
- User vigilance: lock devices, log off when not in use, do not share passwords, encrypt data, keep software up to date.
DDoS attack: attacker controls botnet to flood server with requests, denying service to legitimate users.
Slide
Sign up free to view the lesson slides
Step through every slide for this topic — plus flashcards and revision notes — with a free account.
Câu hỏi luyện tập
Xem trước miễn phí — 8 trên 52 câu hỏi. Đăng ký để xem tất cả.
1.What is the term for a type of malware that locks a user's computer and demands payment to unlock it?
Easy- ARansomware
- BSpyware
- CAdware
- DTrojan
2.Which of the following is a method used to prevent unauthorised access by monitoring and filtering network traffic based on a set of rules?
Easy- AFirewall
- BProxy server
- CAnti-malware
- DSSL
3.A company's website becomes slow and eventually crashes because a large number of requests are sent to it from multiple compromised computers. What type of attack is this?
Medium- ADDoS attack
- BBrute-force attack
- CPhishing attack
- DData interception
4.Which security measure uses unique physical characteristics such as fingerprints or iris scans for authentication?
Easy- ABiometrics
- BCAPTCHA
- CMulti-factor authentication
- DEncryption
5.A user receives an email that appears to be from their bank, asking them to click a link and enter their login details. The email contains several spelling mistakes. What type of threat is this?
Medium- APhishing
- BPharming
- CSocial engineering
- DSpyware
6.An attacker repeatedly tries different combinations of a user's password to gain unauthorised access. Which type of attack is this?
Easy- ABrute-force attack
- BDictionary attack
- CDDoS attack
- DData interception
7.Which of the following is a type of malware that can replicate itself and spread to other computers on a network without needing to attach to a host file?
Easy- AWorm
- BVirus
- CTrojan
- DSpyware
8.What is the purpose of a proxy server in network security?
Medium- ATo hide a user's IP address and location
- BTo encrypt data transmitted over the internet
- CTo scan for malware in email attachments
- DTo manage user access levels
Unlock all 52 questions & more
Tạo tài khoản miễn phí để xem mọi câu hỏi, slide, thẻ ghi nhớ và ghi chú ôn tập cho chủ đề này.