Network Security and Cybersecurity Fundamentals

FinCEN stands for the Financial Crimes Enforcement Network, a bureau of the United States Department of the Treasury that collects and analyzes information about financial transactions in order to combat financial crimes.

FTP stands for File Transfer Protocol, a standard network protocol used for the transfer of computer files between a client and server on a computer network. The other options are incorrect.

HIDS stands for Host-Based Intrusion Detection System, which monitors and analyzes the internals of a computing system rather than the network packets. The other options are incorrect fabrications.

HIPS (Host-Based Intrusion Prevention System) is a security solution installed on individual hosts (endpoints) to detect and prevent malicious activity. It monitors system behavior, network traffic, and application execution to block threats at the host level before they can cause damage.

IPS stands for Intrusion Prevention System, a network security/threat prevention technology that examines network traffic flows to detect and actively prevent vulnerability exploits. The other options are incorrect.

IDS stands for Intrusion Detection System, a device or software application that monitors a network or systems for malicious activity or policy violations. The other options are incorrect fabrications.

IPSec (IP Security Architecture) is a suite of protocols that secure Internet Protocol communications by authenticating and encrypting each IP packet. It operates at the network layer (Layer 3) and provides security services like confidentiality, integrity, and authentication for IP traffic.

MSSP (Managed Security Service Provider) is a third-party company that manages and outsources security services for organizations. They provide 24/7 monitoring, threat detection, incident response, and security management, allowing organizations to focus on core business while experts handle cybersecurity.

MITM (Man in the Middle) is a cyberattack where an attacker secretly intercepts and possibly alters communications between two parties who believe they're directly communicating. The attacker can eavesdrop, steal sensitive data, or inject malicious content without either party knowing.

POP stands for Post Office Protocol, an application-layer Internet standard protocol used by local e-mail clients to retrieve e-mail from a remote server over a TCP/IP connection. The other options are incorrect fabrications.

PPP (Point to Point Protocol) is a data link layer protocol used to establish direct connections between two network nodes. It's commonly used for dial-up and broadband connections, providing authentication, encryption, and transmission of network packets over point-to-point links.

RAS (Remote Access Server) is a server that provides remote users with access to network resources and services. It handles authentication, authorization, and accounting for remote connections, typically through dial-up, VPN, or other remote access technologies.

Rootkits are typically written in C or C++ because they require low-level system access, direct memory manipulation, and kernel-level operations to hide their presence. Java's managed runtime environment, sandbox restrictions, and lack of direct hardware access make it unsuitable for creating effective rootkits. Some rootkits may use assembly language for maximum stealth.

A rootkit is a collection of software tools designed to grant administrator-level access to a computer while actively hiding its presence and activities from users and security tools.

Firewalls primarily control network traffic and cannot detect keyloggers that operate locally without transmitting data. Hardware keyloggers (physical devices) and software keyloggers that only log locally are invisible to firewalls. Even keyloggers that transmit data can avoid detection if they use allowed protocols or ports. Anti-malware software, not firewalls, is needed to detect keyloggers.

A keylogger is a type of surveillance software or hardware designed to monitor and record every keystroke made on a computer keyboard.

The Brain virus, created in 1986 by two brothers from Pakistan, is widely recognized as the first PC virus found in the wild (spreading outside controlled environments). It was a boot sector virus that infected floppy disks and is considered the first virus to spread naturally among computer users.

A macro language is a programming language built directly into software applications (like VBA in Microsoft Word) to automate repetitive tasks and extend application functionality.