ITPEC IP October 2024 Question 45

(2) only — disabling JavaScript is the one practice that lowers risk; the other two raise it.

• •(1) Storing the user ID and password in the browser lets anyone with access to the PC, or malware that reads the browser profile, obtain them: risk increases.
• •(2) Disabling JavaScript stops malicious scripts on web pages from running, closing a common attack route at the cost of some site features: risk decreases.
• •(3) Browsing with administrator privileges lets malware delivered through the browser take full control of the PC: risk increases.

Answer (c)

Why not others:

• •(a) (1), (2) — includes (1), which exposes the saved credentials
• •(b) (1), (3) — both practices increase risk, and it omits (2), the one that reduces it
• •(d) (2), (3) — includes (3), which gives any browser-borne malware administrator rights

Key rule: A practice reduces risk when it removes an attack route or limits the damage; convenience features such as saved passwords and extra privileges widen exposure, so browse with a standard account.

Security · AI-written, may contain errors