Information Security

A Denial of Service (DoS) attack aims to disrupt or completely shut down a network, service, or server, making it unavailable to its intended users. This is typically achieved by overwhelming the target with a flood of superfluous requests.

Physical security involves measures designed to safeguard personnel, hardware, programs, networks, and data from physical circumstances and events. Requiring a card key to enter a secure area directly controls physical access to the facility, unlike firewalls, encryption, and software updates, which are logical or digital security measures.

Disconnecting the host from the network is an immediate way to isolate the device and observe if the network traffic flood stops. If the network performance improves immediately after disconnection, it confirms that the specific host was the source of the traffic.

Spoofing is a technique where an attacker masquerades as another device or user on a network by falsifying data, such as IP or MAC addresses, to bypass access controls. This allows the attacker to intercept traffic or gain unauthorized access to systems.

Pharming redirects a user to a fraudulent website, often by corrupting DNS entries, even if the user types the correct URL.

A botnet is a network of computers infected with malware that allows an attacker to control them remotely. The infected computers are called 'zombies' or 'bots.' Bot herders are the attackers who control the botnet.

A hoax is a false warning designed to trick users into taking actions that compromise security, like changing settings or revealing credentials. Phishing steals data directly, pharming redirects to fake sites, and vishing uses phone calls - but hoaxes rely on false warnings.

When malware is identified, the first priority is containing the threat by isolating the system from the network to prevent spread or data exfiltration. Moving to a lab with no network connectivity is the immediate containment step. Updates, scans, and user education come after containment.

Spear phishing uses personalized information about specific targets to make attacks more convincing. Unlike generic phishing which casts a wide net, spear phishing tailors messages using the victim's name, role, or other personal details. Spoofing fakes identities, and impersonation pretends to be someone else - but spear phishing is defined by its personalized approach.

Dumpster diving involves searching through trash or recycling bins to find sensitive information like passwords, account numbers, or corporate documents. This physical social engineering attack exploits improper disposal practices. Phishing and spear phishing use electronic messages, while impersonation involves pretending to be someone else.

Keeping your password strictly confidential is fundamental to preventing unauthorized access and interception. Sharing your password or giving out personal information directly compromises your security.

Phishing refers to the practice of sending fraudulent emails that mimic legitimate organizations to trick recipients into revealing sensitive information like passwords or credit card numbers. While it can involve other communication channels, fraudulent emails are the most common form.

A firewall is a security system designed to prevent unauthorized access to or from a private network. It acts as a barrier, filtering incoming and outgoing traffic based on established security rules to block potential threats.

Hacking refers to the practice of manipulating computer systems to gain unauthorized access to data or networks. While hacking is a type of cybercrime, the specific action of gaining unauthorized access is most directly defined as hacking.

Phishing is a cybercrime where targets are contacted by email, telephone, or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data. The spelling in option C is correct, while option D is a common misspelling.