Information Security

The autorun feature automatically executes programs on removable media, which is a common vector for malware propagation. Disabling it prevents malicious code from running immediately upon inserting a USB drive.

User education is a critical component of security. Training users to perform scans and ensure updates are automatic helps maintain a secure environment.

An active attack involves modifying data streams or creating false traffic, such as sending emails from someone else's account without consent. Passive attacks, by contrast, typically involve monitoring or eavesdropping without altering the system.

Using a strong password (combining uppercase and lowercase letters, numbers, and special characters) and changing it regularly is a fundamental security practice to prevent unauthorized access to email accounts.

To prevent misuse, email communication is governed by legal constraints (laws), behavioral standards (acceptable language), intellectual property rights (copyright), and technical protection measures (security).

Information Technology (IT) is the use of computers, storage, networking, and other physical devices, infrastructure, and processes to create, process, store, secure, and exchange all forms of electronic data. Cloud computing is a subset of IT, instant messaging is a communication method, and decryption is the process of decoding encrypted data.

The Computer Misuse Act is designed to prevent unauthorized access to computer systems, unauthorized modification of data, and the distribution of malware. Copying and sharing copyrighted music is a copyright infringement issue, which is governed by intellectual property laws rather than computer misuse legislation.

A firewall acts as a barrier between a trusted internal network and untrusted external networks, monitoring and filtering incoming and outgoing traffic to block unauthorized connections. While it helps secure a system, blocking specific viruses within files is typically the job of antivirus software rather than a network firewall.

The Caesar cipher is one of the simplest and most widely known encryption techniques, where each letter in the plaintext is shifted a certain number of places down the alphabet. The other options listed are fictional names and not standard encryption ciphers.

A Denial of Service (DoS) attack aims to disrupt or completely shut down a network, service, or server, making it unavailable to its intended users. This is typically achieved by overwhelming the target with a flood of superfluous requests.

Physical security involves measures designed to safeguard personnel, hardware, programs, networks, and data from physical circumstances and events. Requiring a card key to enter a secure area directly controls physical access to the facility, unlike firewalls, encryption, and software updates, which are logical or digital security measures.

Spoofing is a technique where an attacker masquerades as another device or user on a network by falsifying data, such as IP or MAC addresses, to bypass access controls. This allows the attacker to intercept traffic or gain unauthorized access to systems.

Pharming redirects a user to a fraudulent website, often by corrupting DNS entries, even if the user types the correct URL.

A botnet is a network of computers infected with malware that allows an attacker to control them remotely. The infected computers are called 'zombies' or 'bots.' Bot herders are the attackers who control the botnet.