9618 · 6.1
Data Security — FAQ
Frequently asked questions for 9618 Data Security. Direct answers first, then deeper explanation — then practise with marking.
What is the real difference between a virus and a worm?
The key difference is how they spread. A virus needs a host program and typically requires human action to propagate (e.g., you opening an infected email attachment). A worm is a standalone piece of malware that can replicate and spread by itself across a network, exploiting vulnerabilities without any human intervention.
Is a firewall enough to protect my computer?
No. A firewall is an essential part of security, but it's not a complete solution. It primarily protects against network-based threats by filtering traffic. It won't protect against malware introduced via a USB drive or a user being tricked by a phishing email. A good security strategy is 'defence in depth', using multiple layers like a firewall, anti-virus software, strong passwords, and user education.
Why is 'human error' considered a major security risk?
Because humans can be tricked or make mistakes that bypass even the most sophisticated technical defences. An employee falling for a phishing scam and giving away their password, using a weak password like '123456', or losing an unencrypted laptop can all lead to major data breaches. This is why staff training is a critical component of data security.