Information Security

Cisco IOS supports comprehensive security: 'service password-encryption' encrypts all passwords in the config, 'enable secret' secures privileged mode, 'password' can be set on VTY/Console lines, and AAA (TACACS+/RADIUS) provides external authentication. Thus, all are true.

The 'netsh' command can be used to manage IPSec policies. Configuring the policy as dynamic ensures that the settings are applied and updated correctly across the domain environment. Static policies are usually manually assigned and less flexible for domain-wide enforcement.

User-level security provides the most granular control by authenticating individual users rather than groups or shares. Each user has unique credentials and permissions that are independently managed, making it more secure than share-level or resource-level models.

Encryption and decryption are primarily presentation layer (Layer 6) functions in the OSI model. The presentation layer handles data translation, encryption, and compression. While encryption can also occur at the application layer, the OSI model specifically assigns it to the presentation layer.

Intrusion Detection Systems (IDS) require system resources (CPU, memory, and I/O) to monitor traffic or log files. This overhead often results in host performance degradation, which is a common security tradeoff for increased visibility.

To answer this question, the user needs to understand the purpose of the security log in Windows 2000 server.

The security log in Windows 2000 server is primarily used for auditing purposes. It records events related to security and authentication, such as successful or failed logon attempts, changes to user accounts and permissions, and other security-related events.

Therefore, the correct option is:

The Answer is: C. auditing.

A written security policy establishes the foundation by defining what needs protection, acceptable use, incident response procedures, and compliance requirements. Technical controls and user training must flow from this documented plan to be effective.

A Trojan horse is malware that disguises itself as legitimate software while secretly opening a backdoor on the infected system for unauthorized remote access. Viruses and worms primarily focus on replication and self-propagation.

IP spoofing involves hackers forging their IP address to appear as a trusted machine on the network, allowing them to gain unauthorized access. Phishing tricks users into revealing credentials, forging is a general term (not specific to IP addresses), ID theft involves stealing personal identity information.

Smart Cards in Windows 2000 use the Extensible Authentication Protocol (EAP) as the RAS authentication protocol. EAP provides a framework that supports multiple authentication methods, including smart card-based authentication via certificate-based credentials. PAP is plain-text (insecure), CHAP and MS-CHAP are challenge-response protocols for passwords, while EAP is specifically designed to accommodate smart cards and other advanced authentication methods.

Application security is indeed a critical business need in today's digital landscape. Data breaches can result in massive financial losses, reputational damage, and legal consequences. Protecting applications is essential for safeguarding customer data and maintaining business continuity.

Application security protects organizations from data breaches, financial losses, and reputational damage. Cyberattacks can cost millions and destroy customer trust. Security is now a core business requirement, not just IT concern, with legal and regulatory implications (GDPR, data protection laws).

An attack is an intentional act attempting to compromise security by exploiting weaknesses, while a vulnerability is a weakness or flaw in a system that could be exploited. They are fundamentally different concepts: one is the potential weakness (vulnerability), the other is the active exploitation attempt (attack).

OWASP (Open Web Application Security Project) is a global nonprofit foundation dedicated to improving software security. It operates as an open community with free resources, projects, and tools. The other options (cgisecurity, ha.ckers.org, securityfocus) are websites or organizations but not the primary worldwide free community OWASP represents.

Browser security settings are the primary defense against drive-by downloads. Setting your browser to at least 'medium' high security helps detect and block unauthorized downloads. Keeping browser software updated ensures you have the latest security patches. Modem indicator lights and surfing speed are not related to security.