Protecting Devices
Introduced| English |
|---|
| acceptable use policy/əkˈseptəbl juːs ˈpɒlɪsi/ |
| anti-malware software/ˈænti ˈmælweə ˈsɒftweə/ |
| patch/pætʃ/ |
| host-based firewall/həʊst beɪst ˈfaɪəwɔːl/ |
Policies for devices
- An acceptable use policy 可接受使用政策 lists what users may and may not do.
- A password policy sets length and reuse rules.
- A software installation policy controls what can be installed.
Anti-malware and updates
- Anti-malware software 反恶意软件 quarantines files matching known signatures.
- Keeping the OS and apps updated installs each patch 补丁.
- Patches close known holes before adversaries use them.
Which control protects the device here?
Anti-malware catches known malware; patching closes known holes; a host firewall blocks unneeded ports; a policy sets rules.
Why does keeping software updated make a device safer?
A patch closes a known hole.
A firewall that controls traffic for just one device is a...
A host-based firewall guards one device.
The policy listing what users may and may not do on a device is the ____ use policy.
The acceptable use policy sets the rules.
Which protect a device? (Choose all)
Leaving all ports open increases risk.
Host-based firewall
- A host-based firewall 主机防火墙 controls traffic for one single device.
- It blocks ports and services the device does not need.
- This adds a layer even on a compromised network.
An unpatched device is an open door. When vendors release a patch, they publicly reveal the hole it fixes — so adversaries immediately target anyone who has not updated. Patch promptly.
Anti-malware software uses a database of signatures to spot malicious files.
It quarantines files matching a signature.
A host-based firewall on a laptop blocks all outbound FTP traffic. If malware later infects the laptop and tries to send stolen files out over FTP, the host firewall stops it — even though the network firewall allowed FTP.
Protect devices with policies (acceptable use, password, software installation), anti-malware that matches signatures, prompt patching of the OS and apps, and a host-based firewall that guards one device by blocking unneeded ports.