Brainlag PlusFirewalls, anti-malware, access levels, strong passwords and authentication, biometrics, updates, backups, penetration testing, and the weak points attackers look for.
Layers of defence
| Defence | Protects against |
|---|---|
| Firewall: checks traffic in and out against rules | unauthorised access, some DoS |
| Anti-malware, kept updated | viruses, worms, trojans, spyware |
| User access levels: only what each job needs | insiders and stolen accounts doing damage |
| Strong passwords, lockout, two-factor authentication | brute force and stolen passwords |
| Input validation and parameterised queries | SQL injection |
| Encryption | interception |
| Software updates (patches) | attacks on known security holes |
| Backups | ransomware, deleted or damaged data |
| Staff training and policies | phishing, blagging, shouldering |
| Physical security (locked rooms) | theft and tampering |
Penetration testing: authorised experts attack the system on purpose to find weaknesses before criminals do.
The rest of this lesson and its 12 practice questions are in Plus.
Screen 1 of 4, free to read.
- 12 exam-style questions, marked as you go, each with a worked solution
- Anything you get wrong is saved to your flashcards