Cybersecurity & Networking Fundamentals

A honeypot is a cybersecurity mechanism designed to detect, deflect, and counteract attempts at unauthorized use of information systems. It appears as a tempting target (like fake data or vulnerable systems) to lure attackers, allowing security teams to study their methods and protect real systems.

HTTPS (Hypertext Transfer Protocol Secure) uses port 443 by default for encrypted web communication. Port 80 is used for standard HTTP, port 21 for FTP, and port 139 is used for NetBIOS. The 'S' in HTTPS indicates the secure version operating on the secure port.

SSL (Secure Sockets Layer) and its successor TLS are the standard encryption protocols used for secure online banking transactions. SSL/TLS creates an encrypted channel between your browser and the bank's server, protecting sensitive data like passwords and account details during transmission. MD5 is a hash function, not encryption, and while AES is also used in cryptography, SSL is the protocol layer specifically used for netbanking security.

MAC addresses are hardware addresses assigned to network interfaces. ISPs can bind their service to a specific MAC address. Users can change their computer's MAC address to match the subscribed one (MAC spoofing), allowing multiple devices to share the connection. This works because ISP authentication checks only the MAC address, not the physical hardware itself. Proxy servers and hubs require additional hardware/configuration, and a new connection would cost extra money.

Nmap (Network Mapper) is a security scanner specifically designed to discover hosts and services on a computer network, thus detecting open ports. When you know an IP address, running 'nmap ' will scan the target and list all open ports along with the services running on them. Wireshark and Etherial (now Wireshark) are packet analyzers for capturing network traffic, not port scanning. 'Switch sniffer' is not a standard tool name.

DDOS (Distributed Denial of Service) attacks overwhelm a website with traffic from multiple sources, making it unavailable to legitimate users. This is the only option listed that is a recognized attack type specifically designed to take down websites. 'Echo attack' and 'Botting' are not standard security terms, and 'Unlimited pings' describes a technique but isn't the formal attack category name.

The OSI (Open Systems Interconnection) model has exactly 7 layers: Physical (1), Data Link (2), Network (3), Transport (4), Session (5), Presentation (6), and Application (7). This is a fundamental networking concept that all network professionals memorize. The layers form a stack from hardware (Physical) to user-facing software (Application).

Java 1.5 (also known as Java 5) was codenamed 'Tiger' during development. Sun Microsystems used animal codenames for major Java releases: 1.3 was 'Kestrel', 1.4 was 'Merlin', 1.5 was 'Tiger', and 1.6 was 'Mustang'. This naming convention helps developers and administrators refer to specific versions during discussion and planning.

Digital signatures involve a variable number of parties depending on the signature hierarchy and PKI structure. Basic scenarios involve 2 parties (sender signing, receiver verifying), but with certificate authorities, registration authorities, and timestamp authorities, there can be 3, 4, or more parties. Some implementations use just sender and receiver (2 parties), while enterprise PKI systems involve certificate authorities, registration authorities, policy servers, and timestamp services. Therefore, the number depends on the specific signature hierarchy deployed.

You can track email forwarding through various technical means. Email headers contain 'Received' fields showing forwarding hops, and forwarding services often add 'X-Forwarded-For' or similar headers. Additionally, tracking pixels, read receipts, and forwarded message notifications in email clients can reveal forwarding activity. The question format is unusual with option D being informal, but the statement is technically accurate - email forwarding leaves traceable artifacts.

White Hat hackers are ethical hackers who use their skills to improve security by finding vulnerabilities and helping organizations fix them. They operate with permission and often work as security consultants. This contrasts with Black Hats (malicious hackers), Grey Hats (somewhere between), and government hackers. The term comes from Western movies where 'good guys' wore white hats. White Hats follow responsible disclosure practices.