9618 · 6.1
Data Security flashcards
Revision flashcards for Cambridge 9618 Data Security (syllabus 6.1). Flip, recall, then mark a real past-paper question.
Card
What is Data Security?
The practice of protecting digital data from unauthorised access, corruption, or theft throughout its entire lifecycle. It encompasses confidentiality, integrity, and availability.
Card
What is Data Integrity?
The maintenance and assurance of the accuracy and consistency of data. It ensures data has not been accidentally or maliciously altered.
Card
What is the difference between a Virus and a Worm?
A virus requires a host file (e.g., an executable) and human action to spread. A worm is a standalone program that can replicate and spread across a network automatically without a host.
Card
Define Phishing.
An attack where a threat actor sends fraudulent communications, typically email, disguised as a trustworthy source to trick individuals into revealing sensitive information like passwords or credit card numbers.
Card
What is the primary function of a Firewall?
To act as a barrier between a trusted internal network and an untrusted external network (like the internet), monitoring and controlling incoming and outgoing traffic based on a set of security rules.
Card
Explain Symmetric Encryption.
A type of encryption that uses a single secret key to both encrypt the plaintext and decrypt the ciphertext. It is fast, but the secure distribution of the single key is a major challenge.
Card
Explain Asymmetric Encryption.
A type of encryption that uses a pair of keys: a public key (shared with everyone) for encryption, and a private key (kept secret) for decryption. It is more secure for key exchange but slower than symmetric encryption.
Card
What are User Access Levels (or Access Rights)?
A security measure that restricts user access to files and systems based on their role or identity. For example, a user might have 'read-only' access while an administrator has 'read/write' access.
Card
What is a Denial of Service (DoS) attack?
A cyber-attack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services, typically by flooding the target with superfluous requests.
Card
Authentication vs. Authorisation: What's the difference?
Authentication is the process of verifying who you are (e.g., with a password). Authorisation is the process of verifying what you are allowed to do (e.g., granting you permission to open a file).
Card
What is Pharming?
A cyber-attack that redirects a website's traffic to a different, fraudulent site by compromising the Domain Name System (DNS). It is more insidious than phishing as it can happen even if the user types the correct URL.