Information Security

The US military uses AES-192 or higher (typically AES-256) for classified information. While AES-256 is more common, AES-192 meets the minimum military standard requirements. DES is an older, weaker standard, and 'Serpant' (likely 'Serpent') is not the official standard.

A person who specializes in analyzing and breaking cryptographic systems, ciphers, and encrypted text without knowing the key is called a cryptanalyst. While 'hacker' or 'decoder' are informal terms, 'cryptanalyst' is the precise scientific and professional designation.

Blowfish encryption consists of two main components: key expansion (generating subkeys from the encryption key through the Feistel network) and data encryption (the actual encryption process using round keys). These two parts work together - key expansion prepares the cryptographic material, then data encryption applies it to transform plaintext.

Side-channel attacks (often called 'plaintext attacks' in some contexts) exploit implementation weaknesses like timing, power consumption, or electromagnetic leakage rather than mathematical weaknesses in AES itself. These are the most practical successful attacks against AES implementations when not properly protected.

Serpent is famous for its conservative security design with 32 rounds, providing a very high security margin. It was a finalist in the AES competition and is known for being one of the most secure algorithms, though slower than AES. Option C 'Data security mechanism' is the closest match to its security reputation, though the wording is imprecise.

AES uses a Round Key mechanism where a single key is expanded into multiple round keys through key expansion, then each round uses a different round key derived from the original key. This is not variable key (different keys per session) or public key (asymmetric).

Clear role definition and communication is foundational because it establishes accountability and ownership. Without knowing who is responsible for what, other security measures (audits, training, technical knowledge) cannot be effectively implemented.

POST is more secure than GET for sensitive data because POST parameters go in the request body (not logged in URLs/proxy logs), while GET sends data in the URL query string which is visible in browser history, server logs, and referrer headers. TRACE is for diagnostics, SET is not a standard HTTP method, and GET exposes data in URLs.

CardSpace prevents phishing attacks by replacing password-based authentication with information cards, eliminating password theft vectors. Users present cards instead of entering passwords on potentially malicious sites.

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between trusted internal networks and untrusted external networks like the internet. Option A correctly defines this fundamental security function.

Due to browser security sandboxing, client-side scripts running in a secure web browser are restricted to web-related operations and cannot access the local file system or execute system-level commands.

In Report Studio and similar BI tools, a security filter applied to a specific query subject controls data access at the query level, which is referred to as data security. Object security would apply to entire objects like reports or models, while package security applies to entire packages. Data security is the most granular level.