Aliah, untuk soalan Comparison yang markah banyak (4-6 markah), Aliah kena bagi perbezaan yang "kontra" (berlawanan).
Ini adalah "Full Detailed Comparison Table" untuk Chapter 1 sampai 6. Saya dah susun supaya Aliah boleh nampak perbezaan dari 3 sudut: Sifat, Tujuan, dan Contoh.
Chapter | Perbandingan | Point 1: Sifat (Nature) | Point 2: Tujuan (Goal) | Point 3: Contoh (Example) |
|---|---|---|---|---|
1. IR | Containment vs Eradication | Containment is an initial action to isolate, while Eradication is a cleaning process. | Containment is to stop the spread, while Eradication is to remove the virus. Saved assistant message 2026-06-24 01:40 | Containment: Disconnect cable. Eradication: Delete malware. Saved assistant message 2026-06-24 01:40 |
2. Law | PDPA vs CCA (Comp. Crime Act) | PDPA is about data protection, while CCA is about computer crimes. | PDPA is to protect personal data, while CCA is to punish hackers. | PDPA: IC/Phone Number. CCA: Unauthorized hacking. |
3. ISO | Policy vs Procedure | Policy is a high-level rule, while Procedure is a detailed instruction. | Policy tells "What" to do, while Procedure tells "How" to do it. | Policy: "Use strong passwords." Procedure: "Steps to reset password." |
4. VAPT | VA vs PT | VA is a passive/automated scan, while PT is an active/manual attack. Saved assistant message 2026-06-24 01:40 | VA is to list weaknesses, while PT is to exploit/prove a hack. Saved assistant message 2026-06-24 01:40 | VA: Using Nessus. PT: Using Metasploit. |
5. Risk | Mitigate vs Transfer | Mitigate is an internal control, while Transfer is an external sharing. | Mitigate is to reduce the risk, while Transfer is to share the risk. Saved assistant message 2026-06-24 01:40 | Mitigate: Install Firewall. Transfer: Buy Insurance. Saved assistant message 2026-06-24 01:40 |
6. Attack | Passive vs Active | Passive is hard to detect (silent), while Active is easy to detect (visible). | Passive is to monitor/spy, while Active is to modify/damage. Saved assistant message 2026-06-24 01:40 | Passive: Sniffing traffic. Active: SQL Injection. |
Aliah perasan tak? Semua perbandingan ni ada pola (pattern) yang sama:
Satu "Lembut", Satu "Keras":
VA (Lembut/Scan) vs PT (Keras/Serang).
Passive (Lembut/Intip) vs Active (Keras/Rosakkan).
Policy (Lembut/Arahan) vs Procedure (Keras/Langkah).
Satu "Sekat", Satu "Selesai":
Containment (Sekat merebak) vs Eradication (Selesaikan/Buang virus).
Mitigate (Sekat/Reduce) vs Transfer (Selesaikan kos guna insurance).
Kalau soalan tanya: "Compare VA and PT (6 Marks)"
Aliah tulis 3 perenggan pendek guna jadual kat atas:
Point 1: "VA is a passive scan, while PT is an active attack." (2 Markah)
Point 2: "The goal of VA is to list weaknesses, while PT is to exploit them." (2 Markah)
Point 3: "For example, VA uses Nessus, while PT uses Metasploit." (2 Markah)
Total: 6/6 Markah!
Aliah rasa okey tak kalau buat macam ni? Jadual ni dah paling "berisi" tapi ringkas untuk Aliah nampak beza setiap topik. Aliah cuma perlu ingat Keyword yang saya BOLD kan tu je.
Boleh Aliah? Ada satu lagi topik yang Aliah rasa selalu tertukar tak? 🚀Saved as a note! You can find it in your inbox.