Information Security

Data security encompasses protecting data from accidental or intentional loss, corruption, and unauthorized access. It ensures data confidentiality, integrity, and availability through safeguards like backups, encryption, and access controls.

Data security fundamentally involves protecting data from accidental loss, corruption, and unauthorized access. The other options describe different data management processes: standardizing formats relates to data integration, eliminating irrelevant data is about data pruning, and correcting anomalies belongs to data cleansing.

Data security specifically focuses on protecting data assets from unauthorized access, theft, accidental loss, corruption, or damage. The other options describe different data quality processes: standardizing formats is data integration, eliminating irrelevant data is data cleaning, and correcting anomalies is data quality management - none are security functions.

Firewalls primarily control network traffic and cannot detect keyloggers that operate locally without transmitting data. Hardware keyloggers (physical devices) and software keyloggers that only log locally are invisible to firewalls. Even keyloggers that transmit data can avoid detection if they use allowed protocols or ports. Anti-malware software, not firewalls, is needed to detect keyloggers.

In Cognos 8, the 'Set Policy' permission grants the ability to read and modify security settings (permissions, policies) for an entry in the Content Store. This is a security-specific permission distinct from general 'Write' access. 'Write' permission allows modifying content but not security settings. 'Execute' is for running reports. 'Traverse' only allows viewing the entry in the namespace without accessing content. The question tests precise knowledge of Cognos security model.

The presentation layer (Layer 6) handles data translation, encryption, and compression. Encryption is a classic presentation layer function that ensures data security during transmission. The transport layer handles flow control and reliability, not encryption.

Authorization is a server-side mechanism that determines whether an authenticated user has permission to access specific resources or perform certain operations. While authentication verifies identity (can be client-side), confidentiality and data integrity are broader security properties applicable to data in transit and storage, not specifically resource access control.

KMKY is a Trojan horse program that originated and was released from India. The other options like Nimda have different international origins.

Devolve is a known HTML-based virus that infects web pages through HTML scripts. HTML viruses typically use script code (JavaScript, VBScript) embedded in HTML to execute malicious actions when pages are loaded. Infector, Delf, and Argentino are not classified as HTML viruses (they're typically executable/binary malware).

None of the listed Trojans (Nautical, Delf, Backage) utilize Port 129 (Password Generator Protocol) for their primary attacks, making "None of the above" the correct answer.

Antigen, Barok, and BSE are all Trojans that utilize port 25 (SMTP) to send out stolen information or spam, making "All of the Above" the correct choice.

KMKY is a Trojan horse program that originated and was released from India. The other options like Nimda have different international origins.

None of the listed Trojans (Nautical, Delf, Backage) utilize Port 129 (Password Generator Protocol) for their primary attacks, making "None of the above" the correct answer.

Antigen, Barok, and BSE are all Trojans that utilize port 25 (SMTP) to send out stolen information or spam, making "All of the Above" the correct choice.

Input validation is essential regardless of environment. Firewalls don't prevent application-level exploits, taint mode can be bypassed, and trusting any input source creates vulnerabilities. 'Never' is the only safe answer - any unvalidated input is a potential attack vector.