Cybersecurity Principles Quiz

Study Notes

Ensures only authorized users access the system.
Methods include password protection, biometrics, and multi-factor authentication (MFA).

Limits user and program actions on a system.
Techniques include Role-Based Access Control (RBAC) and Mandatory Access Control (MAC) to assign specific permissions.

Protects data by converting it into unreadable formats.
OS-level encryption like BitLocker (Windows) or FileVault (macOS) secures sensitive data in storage and transit.

Keeps records (logs) of system events, including access attempts, user activities, and OS changes.

Anti-malware and antivirus software scan the system for malicious software like viruses, trojans, and ransomware, to remove or quarantine threats.

Windows Defender is a built-in antivirus program.
BitLocker provides full disk encryption.
User Account Control (UAC) prevents unauthorized system changes by requiring user consent for administrative tasks.
Windows Firewall filters network traffic and blocks malicious access attempts.
Active Directory (AD) allows centralized user and security management in enterprise environments.
Group Policy helps enforce security rules across multiple machines.

SELinux (Security-Enhanced Linux) enforces strict access controls for system processes, limiting potential damage from vulnerabilities.
Linux file permissions and ownership ensure only authorized users or processes can access specific files.
SSH provides encrypted remote access to Linux systems, reducing the risk of man-in-the-middle attacks.
Linux firewalls like iptables and ufw create rules to filter network traffic and block malicious connections.

FileVault is macOS’s built-in encryption system providing full-disk encryption.
Gatekeeper prevents unauthorized apps from running by only allowing apps downloaded from the App Store or identified developers.
XProtect is a built-in malware detection tool that scans and blocks known malicious software.
System Integrity Protection (SIP) limits the actions the root user can perform on protected parts of the system.

Key Steps:
- Vulnerability Identification: Identify potential vulnerabilities using scanning tools or vendor alerts.
- Patch Deployment: Roll out patches to fix identified vulnerabilities, either manually or through automated systems.
- Testing and Validation: Test patches in a non-production environment before deployment.
- Automation and Scheduling: Automate the patching process and establish regular schedules to stay current.
Challenges:
- Compatibility issues: Patches may cause compatibility problems with existing software or hardware.
- Downtime: Applying patches might require system restarts or maintenance windows.
- Delays: Failure to apply patches quickly increases the risk of cyberattacks exploiting unpatched vulnerabilities.