1.4.2 Identifying and Preventing Vulnerabilities

List and explain two physical security measures that can prevent unauthorised access to computer systems.

Explain how encryption can be used to secure data against threats like interception and unauthorised access.

Discuss how firewalls can be configured to prevent SQL injection attacks. Include an explanation of what SQL injection is.

Explain how anti-malware software can prevent data interception and theft.

Describe the process and purpose of penetration testing in the context of identifying and mitigating system vulnerabilities.