6 Core 2: Security Free Online FlashCards

What does least privilege mean?

Least privilege gives each user or process only the permissions needed for its work.

What makes authentication multi-factor?

MFA requires at least two different factor types, such as something you know and something you have. Two passwords alone do not count.

How do authentication, authorization, and accounting differ?

Authentication proves an identity; authorization determines what that identity may do; accounting or auditing records activity for review.

What distinguishes a worm from a virus?

A worm spreads between systems, often across a network, without needing to attach itself to another file.

What does ransomware do?

Ransomware blocks access to data or systems, commonly by encrypting files, and demands payment.

What is smishing?

Smishing is phishing delivered through text messages.

How should you verify an unusual request to send money or disclose information?

Verify unusual requests through a separate, trusted communication channel rather than replying to the message or using its contact details.

Which permissions govern access to a network-shared NTFS folder?

When a network-shared folder has both share and NTFS permissions, the more restrictive effective access governs the result.

How do a firewall and antimalware tools differ?

A firewall filters network traffic according to rules; antivirus and antimalware tools detect or block malicious software. They address different risks.

What most directly protects files on a stolen, powered-off laptop?

Full-disk encryption protects data at rest if a device or drive is lost or stolen.

What is a sensible immediate response to suspected malware?

Isolate or quarantine the device to limit spread, then follow organizational policy and incident-response procedures.

Which wireless security configuration is preferred when supported?

WPA3 with a strong, unique passphrase is the preferred choice when supported by the access point and client devices.