Network Issues (Cambridge (CIE) IGCSE ICT): Flashcards
Exam code: 0417 & 0983
1/490Still learning
Know0
Why does transferring data across a network pose a security risk?
Was this flashcard helpful?
Cards in this collection (49)
Why does transferring data across a network pose a security risk?
Transferring data poses potential security risks of unauthorised access and data manipulation.
How do hackers create a data transfer risk?
Hackers exploit network weaknesses and then access, delete or steal confidential data.
Define insider threat.
An insider threat is someone intentionally or unintentionally compromising network security policies, leading to data interception or theft.
How does social engineering create a data transfer risk?
Social engineering manipulates network users into giving away confidential information or clicking links which install malware, leading to the compromise of data.
True or False?
Using HTTP rather than HTTPS for sensitive information is an insecure protocol risk.
True.
Using HTTP instead of HTTPS when dealing with sensitive information is an insecure protocol risk.
Give the two encryption-related causes of data transfer risk.
Unencrypted transfers, where no encryption protocols are used for sensitive data, and weak encryption, where weak or outdated encryption protocols are used.
Define password.
A password is a digital lock to prevent unauthorised access to an account.
How are passwords stored in a database, and why?
Passwords are stored as an encrypted or ciphered text entry, so that even with unauthorised access to the database a hacker would not be able to gain access to the individual passwords.
Give the four features of a strong password.
A strong password has a mixture of upper and lower case, contains at least one number, contains at least one symbol, and is a minimum of eight characters.
A strong password should be a minimum of characters long.
A strong password should be a minimum of eight characters long.
Why should anti-spyware software be used to help keep passwords safe?
Anti-spyware software is used to ensure that keyloggers are not used to capture passwords.
Why should passwords be changed periodically?
Passwords should be changed periodically to ensure they have not been compromised.
Define authentication.
Authentication is the process of ensuring that a system is secure by asking the user to complete tasks to prove they are an authorised user of the system.
Why is authentication needed?
Authentication is needed because bots can submit data in online forms.
Name the four authentication methods.
The four methods are zero login and biometrics, magnetic stripe, smart cards, and physical and electronic tokens.
Define zero login.
Zero login allows a user to log in without using a username and password, using biometric data to create a profile so they do not have to authenticate each time.
Give one advantage and one disadvantage of zero login and biometrics.
It is convenient for devices where users log in frequently, but if compromised, biometric data cannot be changed, and recognition can be less than perfect, leading to failed logins.
How does a magnetic stripe card authenticate a user?
The magnetic stripe contains unique data such as ID, name and date of birth. When swiped through a magnetic card reader, those details are used to identify the user.
Give two advantages of magnetic stripe cards.
They are easy and cheap to set up, can be used to access multiple systems, and can be remotely deactivated.
How does a smart card improve on a magnetic stripe card?
A smart card adds a microchip to create a contactless card. The microchip stores additional information such as a PIN for an extra layer of security, and the data is encrypted.
True or False?
Smart cards are less secure than magnetic stripe cards.
False.
Smart cards are more secure than magnetic stripe cards, because the data is encrypted and the microchip can store a PIN.
Define physical token.
A physical token is a physical device used to authenticate a user remotely, which generates a random one time password (OTP) that the user must type in.
How does an electronic token differ from a physical token?
An electronic token is a software token generated by an app. The user authenticates in the app, for example with a fingerprint, and an OTP is generated. It is more convenient than carrying a physical device.
One time passwords generated by a physical token after a few minutes.
One time passwords generated by a physical token change after a few minutes.
Define anti-malware software.
Anti-malware software is a combination of different software used to prevent computers from being susceptible to viruses and other malicious software.
Name the three types of software that anti-malware includes.
Anti-malware includes anti-virus, anti-spam and anti-spyware.
What does anti-malware software scan?
Anti-malware scans through email attachments, websites and downloaded files to search for threats.
What is a malware signature used for?
Anti-malware holds a list of known malware signatures so that it can block them immediately if they try to access the device in any way.
Why does anti-malware software check for updates?
It checks for updates to ensure its database of known issues is up to date.
Define quarantine in the context of anti-malware.
Quarantining is isolating infected files, which allows threats to be automatically deleted and lets the user decide whether the file is a genuine threat.
Define heuristic checking.
Heuristic checking is the identification of potential threats within a file from behavioural patterns and characteristics.
True or False?
Heuristic checking relies only on a database of known viruses.
False.
Heuristic checking identifies threats from behavioural patterns and characteristics, rather than relying only on a database of known viruses.
Anti-malware software will scan storage media when it is connected to the device.
Anti-malware software will scan external storage media when it is connected to the device.
Why is quarantining a file better than deleting it immediately?
Quarantining allows the user to determine if the file is a legitimate threat and not a false positive.
Define video-conferencing.
Video-conferencing is a way of enabling real-time audio and visual communication between geographically separated parties.
What hardware is required to host a video-conference?
A video-conference requires a webcam, a large output display such as a projector, screen or TV, a microphone and speakers.
What specialist software is required for video-conferencing?
Video-conferencing requires drivers to control the output of the webcam and a codec to encode and decode the data being transmitted.
Define codec.
A codec is software that encodes (compresses) and decodes (decompresses) data being transmitted.
Give three advantages of video-conferencing.
It offers convenience and cost saving, is better for the environment, means attendees do not have to travel, lets anyone within the company attend regardless of location, allows events at short notice, and some software allows record and playback.
Give three disadvantages of video-conferencing.
The initial equipment purchase can be costly, there are time zone issues across locations, users may need training, it requires a strong and stable network connection, picture and sound quality can be poor, and delays can disrupt the flow of the meeting.
Define audio-conferencing.
Audio-conferencing is a way of enabling real-time audio only communication between geographically separated parties, using standard phone lines.
How is an audio-conference set up and joined?
The phone company gives the host a personal PIN and a participant PIN. The host starts the conference with their personal PIN, and participants dial in using the participant PIN.
What can be used on computers to hold audio-conferences?
Voice over Internet Protocol (VoIP) can be used on computers to hold audio-conferences.
Give two advantages of audio-conferencing.
It is cheaper than video-conferencing because less hardware is required, is more accessible because less training is needed, and lets participants focus only on voice without visual distraction.
Give two disadvantages of audio-conferencing.
Participants can lose focus through lack of visual interaction, a lack of visual clues may lead to miscommunication, audio quality can be poor, and it does not suit collaboration.
Define web-conferencing.
Web-conferencing is a way of enabling real-time audio and visual communication between geographically separated parties on the internet.
True or False?
Web-conferencing is ideal for small groups of users.
False.
Video-conferencing is ideal for small groups. Web-conferencing is ideal for large groups, and is typically used for webinars, lectures and presentations.
What is the key difference between web-conferencing and video-conferencing?
Video-conferencing focuses on face to face communication, whereas web-conferencing focuses on interaction and collaboration, such as document sharing and virtual whiteboards.
To host a web-conference, the emphasis is placed on a high-speed, stable connection.
To host a web-conference, the emphasis is placed on a high-speed, stable internet connection.
Sign up to unlock flashcards
or