Protecting Devices: Anti-Malware, Patching, Host Firewall | AP Cybersecurity
Protecting Devices: Anti-Malware, Patching & Host Firewalls
Topic 4.3 covers how to keep a device secure: anti-malware software, keeping software and the operating system updated, a host-based firewall, and the managerial policies that require them.
Contents
The core device protections
Anti-malware software scans for and blocks known malicious files, making a device harder to compromise. Keeping the operating system and software updated (patching) closes known vulnerabilities before adversaries can exploit them. A host-based firewall filters traffic on the device itself, not just at the network edge.
These are backed by managerial controls: written policies that require updates, anti-malware, and secure configuration across all devices.
An attacker exploits a known flaw in outdated software. Which single control would most likely have prevented it?
Reveal answer
Patching. Keeping the operating system and software updated closes known vulnerabilities, removing the specific hole the attacker exploited.
Match the control to the threat: known-vulnerability exploit = patching, malicious files = anti-malware, unwanted traffic to the device = host-based firewall.
Why patching matters most against known exploits
Adversaries develop exploits for known vulnerabilities, and unpatched devices stay exposed long after a fix exists. Patching is often the highest-impact control because it removes the exact weakness being targeted.
A host-based firewall complements the network firewall: even if a device moves to another network, its own firewall still filters traffic.
Why is a host-based firewall useful even when the network already has one?
Reveal answer
The device's own firewall protects it everywhere, including on other networks. It filters traffic at the device, so protection travels with the device.
Unpatched systems get hit
Major outbreaks repeatedly spread through devices missing available patches, exploiting flaws that already had fixes. Timely patching would have closed the exact hole the attackers used.
Patching removes known vulnerabilities first.
Key Terms
| Anti-malware | Software that scans for and blocks malicious files. |
| Patching | Updating the OS and software to close known vulnerabilities. |
| Host-based firewall | A firewall that runs on the device itself. |
| Managerial control | A policy requiring updates and protections. |
Match It Up
Common Mistakes
Treating patching as optional
Unpatched software keeps known vulnerabilities open for attackers to exploit.
Thinking anti-malware catches everything
Anti-malware is strong against known threats but can miss novel or fileless malware.
Confusing host and network firewalls
A host-based firewall runs on the device; a network firewall sits at the network edge.
Ignoring managerial controls
Policies are what make protections consistent across all devices.
Check for Understanding
Frequently Asked Questions
Get in Touch
Whether you're a student, parent, or teacher — I'd love to hear from you.
Just want free AP CS resources?
Enter your email below and check the subscribe box — no message needed. Students get daily practice questions and study tips. Teachers get curriculum resources and teaching strategies.
Message Sent!
Thanks for reaching out. I'll get back to you within 24 hours.
Prefer email? Reach me directly at [email protected]