Information Security

Security level 0 indicates no authentication is required. This is the lowest security level where users can access the application without signing in. Higher security levels (1, 2, etc.) require various forms of authentication like digital certificates or PINs.

In many web application security frameworks, Security Level '0' represents anonymous access, meaning the user does not need to be signed in to access the application.

Phishing is the most common and effective social engineering technique used to steal sensitive credentials, such as email passwords or bank account details, by mimicking legitimate entities in electronic communications.

A brute force attack is a trial-and-error method used to obtain information, such as user passwords or personal identification numbers, by systematically trying all possible combinations until the correct one is found.

PKI stands for Public Key Infrastructure, which is a system of digital certificates, authorities, and keys used to secure communications and verify identities.

An ISAPI filter can intercept IIS web server responses and modify headers (such as the 'Server' header) to hide or spoof the identity of the web server. Firewalls block traffic but do not natively rewrite application-layer headers in this manner.

DOS in the context of IIS and web servers refers to Denial of Service attacks. These attacks flood the server with malicious requests, making it unavailable to legitimate users. IIS has built-in features to mitigate such attacks.

PKI (Public Key Infrastructure) is the comprehensive system of encryption technologies, services, and software that organizations use to secure data transactions and business communications. It includes certificate authorities, digital certificates, and key management. Encryption and Tunneling are techniques, SSL is a specific protocol, but PKI is the complete infrastructure.

Abstraction focuses on exposing only essential features while hiding implementation details. It's about showing what an object does rather than how it does it. Encapsulation is about bundling data and methods together, while information hiding is a related concept about restricting access to internal details.

Data security encompasses protecting data from accidental or intentional loss, corruption, and unauthorized access. It ensures data confidentiality, integrity, and availability through safeguards like backups, encryption, and access controls.

Data security fundamentally involves protecting data from accidental loss, corruption, and unauthorized access. The other options describe different data management processes: standardizing formats relates to data integration, eliminating irrelevant data is about data pruning, and correcting anomalies belongs to data cleansing.

Data security specifically focuses on protecting data assets from unauthorized access, theft, accidental loss, corruption, or damage. The other options describe different data quality processes: standardizing formats is data integration, eliminating irrelevant data is data cleaning, and correcting anomalies is data quality management - none are security functions.

Firewalls primarily control network traffic and cannot detect keyloggers that operate locally without transmitting data. Hardware keyloggers (physical devices) and software keyloggers that only log locally are invisible to firewalls. Even keyloggers that transmit data can avoid detection if they use allowed protocols or ports. Anti-malware software, not firewalls, is needed to detect keyloggers.

In Cognos 8, the 'Set Policy' permission grants the ability to read and modify security settings (permissions, policies) for an entry in the Content Store. This is a security-specific permission distinct from general 'Write' access. 'Write' permission allows modifying content but not security settings. 'Execute' is for running reports. 'Traverse' only allows viewing the entry in the namespace without accessing content. The question tests precise knowledge of Cognos security model.

The presentation layer (Layer 6) handles data translation, encryption, and compression. Encryption is a classic presentation layer function that ensures data security during transmission. The transport layer handles flow control and reliability, not encryption.