Safe Computing - AP Computer Science Principles

1. What is the primary purpose of a firewall in computing?

   To block unauthorized access to or from a private network. Acts as a barrier between trusted internal and untrusted external networks.

2. Identify the term for unauthorized access to a computer system.

   Hacking. Gaining access to systems without permission to steal or damage data.

3. What is a digital certificate?

   An electronic document used to prove identity. Cryptographically signed document verifies identity and public key ownership.

4. What action protects data by converting it into a secure format?

   Encryption. Converts readable data into coded format to prevent unauthorized access.

5. What is a sandbox in computing security?

   An isolated environment to run untested code safely. Isolated execution prevents malicious code from affecting the main system.

6. What is a brute force attack?

   A trial-and-error method to decode encrypted data. Systematically tries all possible combinations to crack passwords or keys.

7. Which protocol is used to secure data transmission over the internet?

   HTTPS. HTTP Secure encrypts data between browser and server using SSL/TLS.

8. What is the main function of antivirus software?

   To detect, prevent, and remove malware. Software that protects computers by identifying and eliminating malicious programs.

9. What is the significance of a 'least privilege' policy?

   To limit user access rights to the minimum necessary. Reduces attack surface by granting only essential permissions needed.

10. What is a strong password characteristic?

    Includes a mix of letters, numbers, and symbols. Complexity makes passwords harder to crack through brute force attacks.

11. Which type of malware encrypts files and demands a ransom?

    Ransomware. Encrypts victim's files and demands payment for the decryption key.

12. Which term describes malicious software designed to harm or exploit?

    Malware. Software designed to damage, disrupt, or gain unauthorized access to systems.

13. What is the purpose of multi-factor authentication?

    To enhance security by requiring multiple verification steps. Combines something you know, have, and are for stronger authentication.

14. What is two-factor authentication (2FA)?

    A security process requiring two separate authentication methods. Combines password with second factor like SMS or authenticator app.

15. Which term describes a network of infected devices under remote control?

    Botnet. Compromised computers controlled remotely to perform coordinated attacks.

16. What is the function of a proxy server in network security?

    To act as an intermediary for requests from clients. Hides client identity and can filter malicious content.

17. What is the main purpose of intrusion detection systems (IDS)?

    To monitor for suspicious activities and policy violations. Detects unauthorized access attempts and security policy violations in real-time.

18. Which concept involves restricting access based on user identity?

    Access Control. Determines who can access what resources based on authentication and authorization.

19. What is social engineering in the context of security?

    Manipulating individuals to divulge confidential information. Psychological manipulation exploits human trust rather than technical vulnerabilities.

20. What does the term 'data breach' refer to?

    Unauthorized access to confidential information. Security incident where protected data is accessed without authorization.

21. What does the acronym 'VPN' stand for?

    Virtual Private Network. Creates secure, encrypted connections over public internet networks.

22. What is phishing?

    A method to steal sensitive information through deceptive emails. Fraudsters impersonate trusted entities to trick users into revealing data.

23. What is the primary goal of a security policy?

    To establish guidelines for protecting information assets. Formal document outlines security procedures and responsibilities for organizations.

24. Identify the component that isolates internal networks from external access.

    Firewall. Controls network traffic flow based on predetermined security rules.

25. Identify a method of encrypting internet communications.

    SSL/TLS. Cryptographic protocols secure data transmission over internet connections.

26. Identify the term for unsolicited bulk email.

    Spam. Unwanted email sent in bulk, often for advertising or malicious purposes.

27. Identify the practice of regularly backing up data.

    Data Backup. Creates copies to restore data after corruption, deletion, or attacks.

28. Identify a tool used to protect against data interception.

    Encryption. Converts data into unreadable format to prevent eavesdropping attacks.

29. What is a Trojan horse in computing?

    Malware disguised as legitimate software. Appears harmless but contains hidden malicious code that activates later.

30. What does 'zero-day vulnerability' refer to?

    A software flaw unknown to the vendor. No patch exists yet, making systems vulnerable until fix is released.

31. Which practice ensures data is recoverable after loss?

    Data Backup. Protects against data loss from hardware failure or attacks.

32. Which type of attack involves overwhelming a system with traffic?

    DDoS (Distributed Denial of Service). Multiple compromised computers flood target with traffic to cause outages.

33. Which practice involves updating software to fix vulnerabilities?

    Patching. Updates fix security holes that could be exploited by attackers.

34. What is the purpose of a security audit?

    To assess the effectiveness of security measures. Systematic review identifies weaknesses and ensures compliance with policies.

35. What is the function of a CAPTCHA?

    To differentiate between human and automated access. Prevents automated bots from accessing systems meant for humans only.

Study these flashcards