Question

In a computer system, describe the role of the following: (a) File and folder permissions (b) Encryption and group policy

Hint:

Remember the distinct security scopes: Permissions protect active data inside the OS; Encryption protects raw data if the storage media is stolen; and Group Policy controls and enforces these settings across the network.

Answer 1

Step 1: Role of File and Folder Permissions (a):
File and folder permissions are access control mechanisms that regulate which users or processes can interact with specific directory directories.

• Role: They establish a security boundary inside the operating system, allowing administrators to define who has Read (r), Write (w), and Execute (x) permissions.
• Importance: This protects sensitive system files from accidental deletion, blocks unauthorized users from viewing confidential data, and prevents malicious software from modifying critical binaries.

Step 2: Role of Encryption (b):
Encryption is the mathematical process of converting readable data (plaintext) into an unreadable scrambled format (ciphertext) using cryptographic keys.

• Role: It ensures data confidentiality even if the physical storage device (like a hard drive or USB) is stolen, or if network packets are intercepted in transit.
• Application: Full-disk encryption (such as Windows BitLocker) protects offline data, while transport-layer encryption (such as HTTPS or SSH) secures active network communications.

Step 3: Role of Group Policy (b):
Group Policy is an Active Directory feature that enables centralized configuration management of computer operating systems and user settings.

• Role: It allows IT administrators to define security baselines (such as password complexity, disabling USB ports, or forcing firewall rules) and deploy them automatically across thousands of domain-joined computers from a single central console.