Protecting Devices
Introduced| English | Meaning |
|---|---|
| acceptable use policy/əkˈseptəbl juːs ˈpɒlɪsi/ | Rules defining permitted and prohibited uses of an organisation's systems or resources. |
| anti-malware software/ˈænti ˈmælweə ˈsɒftweə/ | anti-malware software |
| patch/pætʃ/ | A software update intended to correct defects, close vulnerabilities or improve behaviour. |
| host-based firewall/həʊst beɪst ˈfaɪəwɔːl/ | A firewall operating on an individual device to control its incoming or outgoing network traffic. |
Policies for devices
- An acceptable use policy 可接受使用政策 lists what users may and may not do.
- A password policy sets length and reuse rules.
- A software installation policy controls what can be installed.
Anti-malware and updates
- Anti-malware software 反恶意软件 quarantines files matching known signatures.
- Keeping the OS and apps updated installs each patch 补丁.
- Patches close known holes before adversaries use them.
Anti-malware software scans files against a database of malware signatures and quarantines any matches— here it has flagged two threats
Which control protects the device here?
Anti-malware catches known malware; patching closes known holes; a host firewall blocks unneeded ports; a policy sets rules.
Why does keeping software updated make a device safer?
Difficulty 1/5 · 100 coins + a small bonus on first completion today
A patch closes a known hole.
A firewall that controls traffic for just one device is a...
Difficulty 1/5 · 100 coins + a small bonus on first completion today
A host-based firewall guards one device.
The policy listing what users may and may not do on a device is the ____ use policy.
Difficulty 1/5 · 100 coins + a small bonus on first completion today
The acceptable use policy sets the rules.
Which protect a device? (Choose all)
Difficulty 2/5 · 140 coins + a small bonus on first completion today
Leaving all ports open increases risk.
Host-based firewall
- A host-based firewall 主机防火墙 controls traffic for one single device.
- It blocks ports and services the device does not need.
- This adds a layer even on a compromised network.
An unpatched device is an open door. When vendors release a patch, they publicly reveal the hole it fixes — so adversaries immediately target anyone who has not updated. Patch promptly.
Anti-malware software uses a database of signatures to spot malicious files.
Difficulty 1/5 · 100 coins + a small bonus on first completion today
It quarantines files matching a signature.
A host-based firewall on a laptop blocks all outbound FTP traffic. If malware later infects the laptop and tries to send stolen files out over FTP, the host firewall stops it — even though the network firewall allowed FTP.
Protect devices with policies (acceptable use, password, software installation), anti-malware that matches signatures, prompt patching of the OS and apps, and a host-based firewall that guards one device by blocking unneeded ports.