1.5 - System Security & Malware Quiz

1. 1Fill in the Blanks: The definition for a type of Malware is below.
   A [blank_start]worm[blank_end] is similar to a virus as they [blank_start]copy[blank_end] themselves, but the user doesn't have to do anything for them to multiply. It often sends [blank_start]emails[blank_end] to all addresses saved to spread itself.

   1. Aworm
   2. Btrojan
   3. Ccopy
   4. Ddelete
   5. Eedit
   6. Finfected emails
   7. Gdata
   8. Hharmless emails
   9. Ispyware
2. 2Select all the characteristics of Trojan Viruses.

   1. AIt pretends to be a legitimate program.
   2. BIt is a form of malware.
   3. CIt is a form of spyware.
   4. DIt sends infected emails to all email addresses saved.
   5. EIt is a way of encrypting data to stop viruses.
3. 3True or False: Spyware is usually considered conspicuous / easy to discover.

   1. AVerdadeiro
   2. BFalso
4. 4Fill in the Blanks: The definition for a Virus is below.
   Attach themselves to [blank_start]files[blank_end] and copy themselves when the user copies or opens a file. It can [blank_start]delete[blank_end] your files or slow your device down.
   

   1. Afiles
   2. Bdelete
5. 5Complete the definitions of some types of attacks below.
   Passive - Network traffic is monitored, [blank_start]then data is intercepted[blank_end].
   Active - Someone [blank_start]deliberately[blank_end] attacks a network with malware.
   Insider - Someone with [blank_start]network access[blank_end] abuses this to steal data.

   1. Athen data is intercepted
   2. Bthen data is modified
   3. Cdeliberately
   4. Daccidentally
   5. Epassively
   6. Fnetwork access
   7. Ga fake identity
6. 6Select all the types of attacks that have correct definitions.

   1. AInsider: When a person manipulates someone else into handing over personal data.
   2. BDoS: Network is flooded with useless data to slow the network down to an unusable level.
   3. CBrute Force: Trial and error until a password is attack.
   4. DPhishing: Emails with links that trick people into entering their personal data.
   5. ESocial Engineering: Someone with network access abuses this to steal data.
7. 7Fill in the Blanks: The definition of SQL Injection is below.
   SQL [blank_start]commands[blank_end] are typed into the input boxes on [blank_start]websites[blank_end] to access data / [blank_start]alter the database[blank_end].

   1. Acommands
   2. Binjections
   3. Cedit the database
   4. Ddelete the database
   5. Erun SQL commands
   6. Fdatabases
   7. Gwebsites
   8. Hdatabases
   9. Idevices
8. 8Select the method of countering Brute Force attacks.

   1. AMaking passwords difficult to guess & locking accounts after X failed attempts.
   2. BMaking passwords easy to guess & opening accounts after X failed attempts.
   3. CMaking passwords easy to guess & locking accounts after X failed attempts.
   4. DMaking passwords difficult to guess & opening accounts after X failed attempts.
9. 9Fill in the Blanks: Match the types of attack to the methods to counter them.
   [blank_start]Active[blank_end] - A firewall & antivirus software.
   [blank_start]DoS[blank_end] - Difficult to defend, but a firewall can help.
   [blank_start]Phishing[blank_end] - Looking for signs that an email isn't from a real person / company.

   1. AActive
   2. BPassive
   3. CDoS
   4. DSQL Injection
   5. EPhishing
10. 10Fill in the Blanks: The counters of 2 types of attacks are detailed below.
    Social Engineering: Policies and rules for [blank_start]staff[blank_end] about handing over data & [blank_start]training[blank_end] staff.
    Insider: [blank_start]User access levels[blank_end] to control how much data people can access.

    1. Astaff
    2. Btraining
    3. CUser access levels

11. 11True or False: A way to defend against SQL Injections are having strong validation on all input boxes so that only expected data can be entered.

    1. AVerdadeiro
    2. BFalso
12. 12What is the important difference between defending against Passive and Active attacks?

    1. APassive requires encryption, which doesn't help defend well against Active attacks.
    2. BPassive attacks use viruses to defend, while active attacks are viruses.
    3. CActive attacks don't need an antivirus software, as opposed to Passive attacks.
    4. DActive requires encryption, whereas passive attacks need a firewall.
13. 13True or False: Malware is malicious software intended to cause harm.

    1. AVerdadeiro
    2. BFalso
14. 14Fill in the Blanks: The definition of Penetration Testing is below.
    Organisations employ professionals to try and hack [blank_start]their[blank_end] network so that they can find areas of [blank_start]weakness[blank_end].

    1. Atheir
    2. Bweakness
15. 15Which of the following statements accurately describe the definition for Encryption?

    1. AData is scrambled so that it cannot be understood if intercepted. It can only
       be decrypted with the correct key.
    2. BData is edited so that if its intercepted, it spreads a virus.
    3. CData is repeatedly copied and pasted into the same database to overclock the server.
16. 16Fill in the Blanks: The definitions for Network Forensics and User Access Levels are below.
    [blank_start]Network Forensics[blank_end] - Data packets are captured as they enter the [blank_start]network[blank_end] and [blank_start]analysed[blank_end] to find out the cause of a network attack.
    [blank_start]User Access Levels[blank_end] - Different employees have [blank_start]different[blank_end] levels of access to programs, [blank_start]websites[blank_end] and data.

    1. ANetwork Forensics
    2. BUser Access Levels
    3. Cdifferent
    4. Dthe same
    5. Ewebsites
    6. Flevels
    7. Gnetwork
    8. Hdatabase
    9. Ianalysed
    10. Jdeleted

Descrição

18 minutes to complete the 36 mark quiz. All information is in my mind-map named the same thing (just minus the 'Quiz'). Good luck!

Autor

Josh Burnett

Idioma

English

Visualizações

1

Histórico

Criado em 23 mar 2025 · atualizado em 24 mar 2025

Etiquetas

computer sciencepaper 1gcse

Avaliação

Ainda sem avaliações

Avalie este quiz

Avalie este quiz

Mais sobre Network Threats and Protection