System Security Online Quiz

In a school network, students are typically restricted to accessing only their own document folders and the internet to prevent unauthorized access to sensitive administrative files. Giving full access or access to all folders would pose a major security risk.

A Caesar cipher is a substitution cipher where each letter in the plaintext is shifted by a fixed number of positions down the alphabet. To decrypt the message, the recipient must shift the letters back by that same shift number.

Decryption is the process of converting encrypted data back into its original, readable format. This process requires a specific cryptographic key that matches the encryption algorithm used.

Encryption is the process of scrambling plaintext data into ciphertext so that it cannot be understood by unauthorized users. Only individuals who possess the correct decryption key can restore the data to its readable form.

Strong password security relies on multiple layers of defense, including password complexity, multi-factor authentication, and limiting login attempts to prevent brute-force attacks. Therefore, all of the listed options are valid security requirements.

User access levels are settings that define what files, folders, and system resources a specific user is authorized to view or modify. This ensures that users only have access to the data necessary for their roles.

A security policy is a formal document that outlines the rules, guidelines, and procedures required to protect an organization's assets and systems. It defines how security measures should be implemented and enforced.

A firewall acts as a protective barrier between a computer or local network and external networks like the internet. It monitors incoming and outgoing traffic and blocks unauthorized access based on predefined security rules.

The Computer Misuse Act 1990 is a UK law that makes unauthorized access to computer systems, including hacking and data interception, illegal. The Data Protection Act focuses on how personal data is processed, rather than unauthorized hacking.

The Investigatory Powers Act is a UK law that provides a framework for the use of investigatory powers by law enforcement and intelligence agencies, including the interception of communications. The Computer Misuse Act and Data Protection Act cover unauthorized hacking and data privacy, respectively.

Packet sniffing is a network forensic technique where data packets traveling across a network are captured and analyzed to detect suspicious activity or security breaches. Other options like running antivirus or updating software are general maintenance tasks rather than forensic investigation techniques.

Network forensics is a sub-branch of digital forensics that specifically deals with the monitoring and analysis of network traffic to gather evidence or detect security incidents. It focuses on data in transit across a network rather than data stored on individual local devices.

A penetration tester, also known as an ethical hacker, is hired to legally probe systems and networks to find and report security vulnerabilities before malicious hackers can exploit them. Systems administrators and network managers focus on maintaining and operating systems rather than dedicated vulnerability testing.

A botnet is a network of private computers infected with malicious software and controlled as a group without the owners' knowledge, often used to perform large-scale cyberattacks. A virus is a single self-replicating program, and Stuxnet is a specific historical worm.

SQL injection is an attack technique where malicious SQL statements are inserted into entry fields of a web application to manipulate the backend database. This allows attackers to bypass authentication and access, modify, or delete database records.

The primary effect of a successful SQL injection attack is unauthorized access to the application's database, allowing the attacker to view, edit, or delete sensitive data. It does not typically grant direct control over the entire operating system or local files of the server.

Installing software patches is a key way organizations protect their database management systems and web servers from known vulnerabilities that could be exploited by SQL injection. While input validation in code is the primary defense, keeping software updated with patches is a crucial administrative safeguard.

A Distributed Denial of Service (DDoS) attack uses a network of multiple compromised systems (a botnet) to flood a target website or server with traffic, causing it to crash or become unavailable to legitimate users. SQL is a database language, while USB and WLAN are hardware/networking standards.

Data transmitted over a network is broken down into small, manageable units called packets, which are routed individually and reassembled at the destination. Bytes and nibbles are units of data storage size, not the transmission units used by network protocols.

A Distributed Denial of Service (DDoS) attack involves using multiple hijacked machines (often a botnet) to send a massive volume of requests to a single target server, overwhelming its resources. Phishing is a social engineering technique, while viruses and worms are types of self-replicating malware.

Hackers use viruses for a wide variety of malicious purposes, including disrupting system functionality, stealing personal credentials, and harvesting financial information. Therefore, all of the listed options represent common ways viruses are utilized by attackers.

Computer viruses are malicious software programs that can affect various components of a computer system. They can corrupt files on the hard drive, occupy space in the RAM to slow down performance, and intercept keystrokes from the keyboard. Therefore, they can affect all of these components.

A Trojan Horse is a type of malware disguised as legitimate software to deceive users into downloading and executing it. Unlike viruses or worms, they do not replicate or attach themselves to other files.

Computer worms are standalone malware programs that replicate themselves in order to spread to other computers, typically without needing to attach themselves to a host program.

A computer virus is a type of malware that propagates by inserting its code into other computer programs. Because it cannot run independently, it must attach itself to a host program to execute and replicate.

Malware, short for malicious software, is an umbrella term that covers various digital threats to computer systems, such as viruses, worms, and spyware. It is designed to cause harm, steal data, or gain unauthorized access, making it illegal and highly prevalent on the internet.

An Acceptable Use Policy (AUP) is a set of rules applied by a network manager or organization that restricts the ways in which the network or system may be used. Phishing, viruses, and data theft are security threats or incidents, not administrative policies.

Social engineering involves manipulating people into performing actions or divulging confidential information. Telephone phishing, also known as vishing, is a prime example where attackers use phone calls to trick individuals into giving up sensitive data.