IT Essentials v8.0: Chapter 13 Security Cheat Sheet

This cheat sheet covers essential security concepts for IT professionals, including malware prevention, network attack types, social engineering tactics, security policies, physical security, data protection, workstation hardening, firewall configuration, wireless security, and basic security troubleshooting.

Core Principles

• Malware can disrupt systems, steal data, or deny service; use anti-malware software and keep it updated.
• Network attacks exploit vulnerabilities; employ a layered security approach (defense-in-depth).
• Social engineering manipulates users; be cautious of unsolicited requests and verify identities.
• Security policies define organizational security objectives and procedures.
• Physical security protects hardware and infrastructure from theft and damage.
• Data protection involves backups, encryption, and proper destruction methods.
• Workstation security includes BIOS/UEFI passwords, strong login credentials, and OS/firewall configuration.
• Firewalls control network traffic, preventing unauthorized access.
• Wireless security uses encryption (WPA2/WPA3) and strong authentication.
• Troubleshooting security issues requires a systematic approach: identify, theorize, test, implement, verify, and document.

Action Steps

• Install and regularly update reputable anti-malware software.
• Implement a defense-in-depth strategy for network security.
• Educate users about social engineering tactics and safe practices.
• Develop and enforce a comprehensive security policy.
• Secure physical access to facilities and equipment.
• Regularly back up critical data and encrypt sensitive information.
• Configure strong passwords for BIOS/UEFI and user accounts.
• Enable and configure host-based and network firewalls.
• Use WPA2 or WPA3 for wireless network encryption.
• Follow the six-step troubleshooting process for security incidents.

Key Terms

• Malware: Malicious software designed to disrupt, damage, or gain unauthorized access to computer systems.
• Virus: Malware that attaches itself to legitimate code and requires human action to propagate.
• Trojan Horse: A program that appears useful but contains malicious code.
• Ransomware: Malware that encrypts files and demands a ransom for decryption.
• Worm: Self-replicating malware that spreads automatically without user intervention.
• DoS (Denial of Service): An attack that overwhelms a target device with false requests, denying service to legitimate users.
• Social Engineering: Manipulating individuals into divulging confidential information or performing actions.
• Security Policy: A set of objectives and rules to ensure the security of an organization's network, data, and computers.
• Physical Security: Measures taken to protect hardware and infrastructure from theft, damage, or unauthorized physical access.
• Encryption: Transforming data into a coded format to prevent unauthorized access.
• BitLocker: Windows feature for encrypting entire hard drives.
• Firewall: A network security system that monitors and controls incoming and outgoing network traffic.
• WPA2/WPA3: Strong encryption protocols used to secure wireless networks.
• SSID (Service Set Identifier): The name of a wireless network.
• Zero-Day: A vulnerability that is unknown to the vendor, leaving systems exposed until a patch is available.