D488 Cybersecurity Architecture and Engineering - Set 4 - Part 1

Correct Answer: To block unauthorized access

A firewall serves as a barrier between trusted and untrusted networks, filtering traffic to prevent unauthorized access.

Correct Answer: DDoS (Distributed Denial of Service)

DDoS attacks flood a target with excessive traffic, rendering it unable to respond to legitimate requests.

Correct Answer: Psychological manipulation to obtain sensitive information

Social engineering exploits human psychology to trick individuals into divulging confidential information.

Correct Answer: Combining uppercase, lowercase, numbers, and symbols

A strong password incorporates various character types, making it harder to guess or crack.

Correct Answer: To detect and remove malware

Antivirus software scans for, detects, and removes malicious software to protect systems from harm.

Correct Answer: Users should have only the necessary permissions to perform their jobs

The principle of least privilege minimizes potential damage by restricting user access to the minimum necessary.

Correct Answer: To secure remote connections to a network

A VPN encrypts data between a user's device and the network, enhancing security for remote access.

Correct Answer: HTTPS

HTTPS encrypts data exchanged between a web browser and server, securing communication over the internet.

Correct Answer: To monitor and analyze network traffic for suspicious activities

An IDS identifies potential threats by monitoring network traffic and generating alerts for anomalies.

Correct Answer: It enhances system performance

Ransomware is malicious software that disrupts access to files by encrypting them, typically demanding a ransom for decryption.

Correct Answer: Unauthorized access to data

A data breach occurs when unauthorized individuals access sensitive information, often leading to data theft or exposure.

Correct Answer: To identify, manage, and recover from security incidents

Incident response involves a systematic approach to addressing and managing security breaches or attacks.

Correct Answer: A hidden method for bypassing security measures

A backdoor allows unauthorized access to systems, circumventing normal authentication methods.

Correct Answer: To fix vulnerabilities in software

Security patches address known vulnerabilities in software, helping to prevent exploitation by attackers.

Correct Answer: Multiple users sharing the same physical infrastructure while maintaining data isolation

Multi-tenancy allows different customers to share resources while keeping their data secure and separate.

Correct Answer: To define permissions for users and groups

An ACL specifies which users or groups can access particular resources, enhancing security by controlling permissions.

Correct Answer: It displays unwanted advertisements and can lead to data collection

Adware is designed to display advertisements, often compromising user privacy by tracking browsing habits.

Correct Answer: A device that tracks keystrokes to capture sensitive information

Keyloggers record keystrokes, allowing attackers to capture passwords and other sensitive information without detection.

Correct Answer: To provide a buffer between a trusted internal network and untrusted external networks

A DMZ separates external services from the internal network, reducing the risk of attacks on internal resources.

Correct Answer: It enhances security by requiring two forms of verification

2FA requires users to provide two different forms of verification, making unauthorized access more difficult.