Information Security

A Denial of Service (DoS) attack works by flooding a targeted machine or network with superfluous requests in order to overload systems and prevent legitimate users from accessing services. Phishing and using trusted brands to steal info are forms of social engineering, not DoS attacks. Sharing details is a user behavior rather than an external cyberattack.

A standard Denial of Service (DoS) attack typically involves a single computer sending a massive volume of data packets to a target to overwhelm it. In contrast, when many computers are coordinated to attack a single target simultaneously, it is classified as a Distributed Denial of Service (DDoS) attack. Therefore, the single-computer description is correct for DoS.

Phishing is a social engineering technique where attackers send fraudulent messages, often mimicking reputable companies, to trick individuals into revealing sensitive personal information. The correct spelling of this term is 'Phishing'. 'Phising' and 'Fishing' are incorrect spellings, and a virus is a self-replicating program rather than a social engineering method.

Ransomware is a specific type of malware that encrypts a victim's files, making them inaccessible, and then demands a ransom payment in exchange for the decryption key. Trojans, worms, and viruses can deliver ransomware, but they do not inherently define the encryption-for-payment behavior. Thus, ransomware is the correct term.

A firewall acts as a barrier between a trusted internal network and untrusted external traffic, such as the internet, to block unauthorized access. While passwords protect user accounts and encryption secures data in transit, a firewall specifically monitors and controls network traffic to prevent unauthorized intrusions.

Encryption is the process of encoding information so that only authorized parties can read it, effectively converting plain text into unreadable ciphertext. This prevents eavesdroppers on a wireless network from understanding the transmitted data. Other security measures like firewalls and passwords control access but do not encode the data itself.

Phishing is a cyber attack where attackers masquerade as trustworthy entities to trick users into visiting fraudulent websites and revealing sensitive information like passwords or credit card numbers. Pharming is a similar threat but works by redirecting web traffic at the DNS level rather than relying on user actions like clicking a link.

A Caesar cipher is a substitution cipher where each letter in the plaintext is shifted by a fixed number of positions down the alphabet. To decrypt the message, the recipient must shift the letters back by that same shift number.

Decryption is the process of converting encrypted data back into its original, readable format. This process requires a specific cryptographic key that matches the encryption algorithm used.

Encryption is the process of scrambling plaintext data into ciphertext so that it cannot be understood by unauthorized users. Only individuals who possess the correct decryption key can restore the data to its readable form.

Strong password security relies on multiple layers of defense, including password complexity, multi-factor authentication, and limiting login attempts to prevent brute-force attacks. Therefore, all of the listed options are valid security requirements.

A security policy is a formal document that outlines the rules, guidelines, and procedures required to protect an organization's assets and systems. It defines how security measures should be implemented and enforced.

A firewall acts as a protective barrier between a computer or local network and external networks like the internet. It monitors incoming and outgoing traffic and blocks unauthorized access based on predefined security rules.

The Computer Misuse Act 1990 is a UK law that makes unauthorized access to computer systems, including hacking and data interception, illegal. The Data Protection Act focuses on how personal data is processed, rather than unauthorized hacking.

The Investigatory Powers Act is a UK law that provides a framework for the use of investigatory powers by law enforcement and intelligence agencies, including the interception of communications. The Computer Misuse Act and Data Protection Act cover unauthorized hacking and data privacy, respectively.