Information Security

A hoax is a false warning designed to trick users into taking actions that compromise security, like changing settings or revealing credentials. Phishing steals data directly, pharming redirects to fake sites, and vishing uses phone calls - but hoaxes rely on false warnings.

When malware is identified, the first priority is containing the threat by isolating the system from the network to prevent spread or data exfiltration. Moving to a lab with no network connectivity is the immediate containment step. Updates, scans, and user education come after containment.

Spear phishing uses personalized information about specific targets to make attacks more convincing. Unlike generic phishing which casts a wide net, spear phishing tailors messages using the victim's name, role, or other personal details. Spoofing fakes identities, and impersonation pretends to be someone else - but spear phishing is defined by its personalized approach.

Dumpster diving involves searching through trash or recycling bins to find sensitive information like passwords, account numbers, or corporate documents. This physical social engineering attack exploits improper disposal practices. Phishing and spear phishing use electronic messages, while impersonation involves pretending to be someone else.

Keeping your password strictly confidential is fundamental to preventing unauthorized access and interception. Sharing your password or giving out personal information directly compromises your security.

Phishing refers to the practice of sending fraudulent emails that mimic legitimate organizations to trick recipients into revealing sensitive information like passwords or credit card numbers. While it can involve other communication channels, fraudulent emails are the most common form.

A firewall is a security system designed to prevent unauthorized access to or from a private network. It acts as a barrier, filtering incoming and outgoing traffic based on established security rules to block potential threats.

Phishing is a cybercrime where targets are contacted by email, telephone, or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data. The spelling in option C is correct, while option D is a common misspelling.

Hacking refers to activities that seek to compromise digital devices, such as computers, smartphones, tablets, and even entire networks, by gaining unauthorized access.

While safety statistics can vary depending on the specific risk measured, Facebook's massive user base makes it a frequent target for scams, fake accounts, and privacy issues. Always exercise caution and adjust your privacy settings on any social network you use.

Clicking on unprotected links or downloading unknown files is a primary way people fall victim to phishing attacks. To protect yourself, you should avoid clicking these links, ignore suspicious messages, and verify any claims directly with customer service.

Phishing is a deceptive practice where attackers mimic legitimate organizations to steal sensitive personal information. This stolen data is then commonly used to commit identity theft.

Phishing emails often use generic greetings, create a false sense of urgency, and warn you that your account is in trouble to trick you into acting quickly. Since all of these are classic indicators of a phishing attempt, they are all examples of phishing tactics.

A virus, a DoS (Denial of Service) attack, and phishing are all well-known and common network threats. Since all three options listed are indeed network threats, 'None of the above' is the correct choice. Each of these poses a significant risk to network security and data integrity.

A brute force attack is a trial-and-error method where an attacker uses automated software to guess passwords or PINs repeatedly until the correct one is found. It relies on sheer computational power to break through security rather than exploiting system vulnerabilities. Physical violence is not what this technical term refers to.