Information Security

Packet sniffing is a network forensic technique where data packets traveling across a network are captured and analyzed to detect suspicious activity or security breaches. Other options like running antivirus or updating software are general maintenance tasks rather than forensic investigation techniques.

A penetration tester, also known as an ethical hacker, is hired to legally probe systems and networks to find and report security vulnerabilities before malicious hackers can exploit them. Systems administrators and network managers focus on maintaining and operating systems rather than dedicated vulnerability testing.

SQL injection is an attack technique where malicious SQL statements are inserted into entry fields of a web application to manipulate the backend database. This allows attackers to bypass authentication and access, modify, or delete database records.

Installing software patches is a key way organizations protect their database management systems and web servers from known vulnerabilities that could be exploited by SQL injection. While input validation in code is the primary defense, keeping software updated with patches is a crucial administrative safeguard.

A Distributed Denial of Service (DDoS) attack involves using multiple hijacked machines (often a botnet) to send a massive volume of requests to a single target server, overwhelming its resources. Phishing is a social engineering technique, while viruses and worms are types of self-replicating malware.

Hackers use viruses for a wide variety of malicious purposes, including disrupting system functionality, stealing personal credentials, and harvesting financial information. Therefore, all of the listed options represent common ways viruses are utilized by attackers.

Malware, short for malicious software, is an umbrella term that covers various digital threats to computer systems, such as viruses, worms, and spyware. It is designed to cause harm, steal data, or gain unauthorized access, making it illegal and highly prevalent on the internet.

An Acceptable Use Policy (AUP) is a set of rules applied by a network manager or organization that restricts the ways in which the network or system may be used. Phishing, viruses, and data theft are security threats or incidents, not administrative policies.

Social engineering involves manipulating people into performing actions or divulging confidential information. Telephone phishing, also known as vishing, is a prime example where attackers use phone calls to trick individuals into giving up sensitive data.

Security clearances are used to vet individuals to ensure they are trustworthy, reliable, and loyal, which is essential for protecting sensitive information in cyber and government roles.

Application security is a branch of cybersecurity that focuses on identifying, fixing, and preventing security vulnerabilities in software and applications.

Man in the Middle attacks intercept communications between two parties who believe they are communicating directly. ARP poisoning redirects network traffic through the attackers machine allowing them to eavesdrop modify or steal the communication.

A brute force attack is a trial-and-error method used to decode encrypted data, such as passwords, by systematically checking all possible combinations until the correct one is found.

While a simple password is a vulnerability, it is a specific security weakness rather than a 'source of information' about threats. The other options represent categories or activities that generate threat intelligence.