ITPEC IP April 2023 Question 38

Topic: SecurityAlso asked in March 2018 and November 2021

Among the countermeasures A through D concerning information security, which of the following is the list that contains all and only the appropriate countermeasures for virus infections?

A:Installing antivirus softwareB:Applying a security patch (i.e., update module)C:Setting a password for the hard diskD:Encrypting files

Explanation

A and B — antivirus software stops known malware, and security patches close the holes malware uses to get in.

  • •A — antivirus software scans files, e-mail and downloads and blocks known malicious code before it runs, provided its pattern files are kept up to date
  • •B — many viruses and worms infect through vulnerabilities in the OS or applications; the patch removes the vulnerability
  • •C — a hard-disk password stops someone else using a stolen disk; it does nothing against a virus arriving while the legitimate user works
  • •D — encryption keeps file contents confidential; a virus running with the user's rights can still infect or destroy the files

Answer (a)

Why not others:

  • •(b) A, B, C — adds C, a countermeasure against theft, not infection
  • •(c) A, D — adds D, which protects confidentiality, and omits B, patching
  • •(d) B, C — omits A, antivirus software, and adds C

Key rule: Match each control to its threat: infection is prevented by detecting malicious code and removing vulnerabilities, while passwords and encryption guard against unauthorized access and disclosure.

Security · AI-written, may contain errors

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.