Practice Flashcards: T Level Digital: Security Threats and Controls | Zestly

Question 1

SQL injection

Accepted Answer

An attack where malicious code is inserted into input fields to manipulate database queries. The common mistake is assuming that only external users can trigger this, ignoring internal applications.

Question 2

DDoS attack

Accepted Answer

A distributed denial-of-service attack uses multiple compromised systems to overwhelm a target with traffic. The mistake is confusing this with a single-source attack that can be blocked by a simple IP ban.

Question 3

Insider threat

Accepted Answer

A security risk posed by individuals with authorised access to an organisation's systems. The mistake is assuming all threats must involve an external hacker breaking through a firewall.

Question 4

Multi-factor authentication

Question 5

Software patching

Question 6

Least privilege

Question 7

Encryption at rest

Question 8

Encryption in transit

Question 9

Social engineering

Question 10

Incident containment

Question 11

Zero-day exploit

Question 12

Password policy