Cyber Security 面试题与答案
问题 26. What is the concept of two-factor authentication (2FA)?
Two-factor authentication requires users to provide two separate authentication factors, typically something they know (password) and something they have (security token or mobile device).
问题 27. Define the term 'phishing' and explain how to prevent it.
Phishing is a social engineering attack where attackers trick individuals into providing sensitive information. Prevention measures include user education, email filtering, and implementing anti-phishing technologies.
问题 28. What is the concept of a security policy?
A security policy is a set of rules and practices established to regulate and secure an organization's information systems. It defines the organization's approach to security.
问题 29. Explain the term 'sandboxing' in the context of security.
Sandboxing is an isolated environment where untrusted code can be executed without affecting the rest of the system. It is often used for testing and analyzing potentially malicious software.
问题 30. What is the concept of a Security Operations Center (SOC)?
A Security Operations Center (SOC) is a centralized unit responsible for monitoring and managing an organization's security posture. It includes people, processes, and technology to detect and respond to security incidents.
用户评价最有帮助的内容：
- What is the concept of a security patch?
- What is the CIA triad in information security?
- Explain the concept of zero-day vulnerability.
- What is the difference between symmetric and asymmetric encryption?
- What is a firewall and how does it work?