1. What is a User Account?
User accounts are the primary means of access for real people to the system, and
these accounts insulate the user and the environment, preventing the users from
damaging the system or other users, and allowing users to customize their
environment without affecting others. Every person accessing your system should
have a unique user account.
A user account is a digital identity that:
Provides personalized access to a system (e.g., Windows).
Defines access rights, desktop layouts, and private folders (e.g., "My Documents").
Ensures accountability by tracking user activities.
Is unique to each user to prevent unauthorized changes to system-wide settings.
2. Explain Standard User Account
A standard user account lets you use most of the capabilities of the computer. You
can use most programs that are installed on the computer and change settings that
affect your user account. However, you can't install or uninstall some software and
hardware, you can't delete files that are required for the computer to work, and you
can't change settings that affect other users or the security of the computer.
A standard user account (limited account) allows:
Use of installed software and personal customizations (e.g., wallpapers).
Restrictions:
o Cannot install/uninstall software/hardware.
o Cannot delete system-critical files.
o Requires administrator approval for privileged actions (e.g., via UAC prompts).
3. Define Administrator Account
Administrative Account Rights: Only administrative level users have full system
access including access to other user accounts. Account rights are: Install software
and hardware, Create, modify and delete user accounts, Access all files, Create or
change passwords for all user accounts, Modify names, pictures and account types.
An administrator account has full system control:
Rights include:
o Installing software/hardware.
o Creating/modifying/deleting user accounts.
o Accessing all files and changing all passwords.
Best practice: Use sparingly to minimize security risks.
4. Guest Account Rights
Guest User Account Rights: Do not have rights to install software or hardware.
Cannot modify guest account or profile.
The guest account is for temporary users (e.g., visitors):
Restrictions:
o No software/hardware installation.
o Cannot modify account settings or profiles.
Must be manually activated by an administrator.
5. Uses of User Profile
Windows XP lets you [create user profiles], which allows each user on your
computer to have a separate login. It has benefits, such as allowing each user to
have their own document folders and personal settings such as desktop icons, start
menu items, favorites, etc.
A user profile stores personal settings for individual users, such as:
Desktop icons, themes, and Start menu layouts.
Browser favorites and private folders (e.g., "My Documents").
Benefit: Allows multiple users to share a device while retaining personalized
environments.
6. What is Authentication
Authentication verifies a user’s identity before granting access. Common methods:
Username and password.
Biometrics (e.g., fingerprints).
Security tokens or OTPs (One-Time Passwords).
7. Authorization Process Steps
Authorization determines what a user can access after authentication:
1. User requests a resource (e.g., a file).
2. System checks the user’s permissions (e.g., admin vs. standard).
3. Access is granted or denied based on predefined rights.
8. Username and Password Method
Mechanism: A unique username paired with a secret password.
Risk: Static passwords are vulnerable to phishing/brute-force attacks.
Best practice: Use strong passwords (mix of letters, numbers, symbols).
9. Usernames with Dynamic Passwords
Definition: Passwords change periodically or per session (e.g., OTPs via
SMS/apps).
Advantage: Reduces risk of credential theft.
Example: Two-factor authentication (2FA).
10. Usernames with Static Passwords
Definition: Fixed passwords unless manually reset.
Use case: Low-security environments.
Risk: High vulnerability if compromised.
11. User Account Control
Purpose: Windows feature that prompts for administrator approval before system
changes.
Benefit: Blocks unauthorized actions, even from malware.
12. Avast Antivirus
Features:
o Real-time protection against malware, ransomware, and phishing.
o Email/web scanning, firewall, and regular updates.
13. AVG Antivirus
Features:
o Malware detection, web protection, and performance tools.
o Free version available; user-friendly interface.
14. Avira Antivirus
Features:
o Lightweight, cloud-based threat detection.
o VPN integration and minimal system impact.
15. Cancellable Usenet Spam
Cancellable Usenet spam is a single message sent to 20 or more Usenet
newsgroups. (Through long experience, Usenet users have found that any message
posted to so many newsgroups is often not relevant to most or all of them.) Usenet
spam is aimed at 'lurkers', people who read newsgroups but rarely or never post
and give their address away.
Definition: Irrelevant messages posted to 20+ Usenet newsgroups.
Target: "Lurkers" (passive readers).
Mitigation: Users can flag/remove spam posts.
16. Spam Characteristics
Spam is flooding the Internet with many copies of the same message, in an attempt
to force the message on people who would not otherwise choose to receive it.
Types -Advertising: Spam is used to promote an entire spectrum of products and
services.- Malware Delivery: Spam is one of the main distribution channels for
delivering viruses and other types of malware.
Mass distribution: Sent indiscriminately to thousands.
Deceptive content: Fake offers, phishing links, or malware.
Anonymity: Uses spoofed emails or compromised accounts.
17. Email Spam
Email spam targets individual users with direct mail messages. Email spam lists
are often created by scanning Usenet postings, stealing Internet mailing lists, or
searching the Web for addresses.
Mechanism: Unsolicited emails sent in bulk.
Sources: Addresses harvested from websites/databases.
Risks: Spreads malware, scams, or counterfeit promotions.
Prevention: Use spam filters, firewalls, and user education.