Information Security

Authorization is a server-side mechanism that determines whether an authenticated user has permission to access specific resources or perform certain operations. While authentication verifies identity (can be client-side), confidentiality and data integrity are broader security properties applicable to data in transit and storage, not specifically resource access control.

None of the listed Trojans (Nautical, Delf, Backage) utilize Port 129 (Password Generator Protocol) for their primary attacks, making "None of the above" the correct answer.

Antigen, Barok, and BSE are all Trojans that utilize port 25 (SMTP) to send out stolen information or spam, making "All of the Above" the correct choice.

None of the listed Trojans (Nautical, Delf, Backage) utilize Port 129 (Password Generator Protocol) for their primary attacks, making "None of the above" the correct answer.

Antigen, Barok, and BSE are all Trojans that utilize port 25 (SMTP) to send out stolen information or spam, making "All of the Above" the correct choice.

Input validation is essential regardless of environment. Firewalls don't prevent application-level exploits, taint mode can be bypassed, and trusting any input source creates vulnerabilities. 'Never' is the only safe answer - any unvalidated input is a potential attack vector.

This scenario describes Cross-Site Scripting (XSS), where malicious script is injected into a trusted site's output and executed in a user's browser under the trusted site's context. SQL Injection involves database manipulation, Session Fixation involves session hijacking, and CSRF involves forced actions.

Session Fixation attacks occur when an attacker sets a user's session ID before authentication, then uses that known session after the user logs in. Phishing and injection are different attack vectors.

A Denial of Service (DoS) attack aims to make a service unavailable by overwhelming it with traffic or exploiting vulnerabilities, causing delays, losses, and interruptions. This directly impacts availability as described. Eavesdropping, path traversal, and URL tampering focus on data theft or unauthorized access rather than service degradation.

A Trojan horse is malicious code disguised as legitimate software - it can be injected into benign applications, delivered via email links, or hidden in JavaScript for covert attacks. Spyware monitors activity without masquerading, MITM intercepts communications, and HTTP smuggling exploits request parsing vulnerabilities.

Network eavesdropping (also called sniffing) involves capturing packets from the network to read sensitive data like passwords and tokens. MITM is an active attack that intercepts and potentially modifies communications. Page hijacking and path manipulation are different attack types.

Entire, Round Robin, and Random partitioning methods are keyless - they distribute data without using a key field. Hash and Modulus require key values to determine partition assignment.

HTTP defines specific request methods: GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS, TRACE. ENCRYPT is not a valid HTTP method; encryption is handled at the transport layer via SSL/TLS using the https: scheme, not as an HTTP verb.

Firefox 3.x disabled SSL 2.0 by default due to security vulnerabilities; it only supports SSL 2.0 when users explicitly enable it in about:config advanced settings. Modern browsers use SSL 3.0 and TLS instead.

The Safe Recipients List is designed to allow emails sent to distribution lists or groups you belong to. If you add yourself to this list, Outlook may treat more emails as safe, potentially allowing junk email that would otherwise be filtered.