Information Security

Keeping your internet connection always on during file sharing increases security risks by exposing your system to potential intruders for longer periods. Safe file sharing requires disabling connections when not in use and using proper security measures. Always-on connections create vulnerability windows for unauthorized access.

Spoofing is a social engineering technique where attackers masquerade as legitimate or trusted sources to gain unauthorized access or steal sensitive information. Unlike sniffing (passive monitoring) or surfing, spoofing actively deceives systems by falsifying data sources.

Zombie computers (or bots) are systems infected with malware that allows remote control by attackers without the owner's knowledge. These compromised machines are typically organized into botnets and used for malicious activities like DDoS attacks, spam distribution, or password cracking. Options A, B, and C describe legitimate or differently focused computer uses: hacking tools, public internet access, and gaming traffic respectively, none of which involve the secret remote control that defines zombie computers.

A cipher lock uses a push-button keypad mechanism to control physical access into restricted areas without needing a traditional physical key. Users must enter a specific numerical code or combination to unlock the door.

Polymorphic viruses use various encryption algorithms and constantly change their encryption keys with each infection to evade detection by antivirus software. Companion Viruses (A) don't use encryption, Overwrite Viruses (C) simply overwrite file content, and File Infectors (D) attach to executable files without polymorphic encryption.

Trojan Horses are malicious programs that disguise themselves as legitimate software while creating backdoors for network intruders to access system information. Unlike worms which self-replicate, or macro viruses that infect documents, Trojans specifically focus on unauthorized access and data theft. Direct Action Viruses are a different category that infect files when executed.

Antivirus software primarily uses two scanning methods: (1) Virus Signature Search - comparing files against known malware signatures, and (2) Behavioral Heuristic Analysis - detecting suspicious behavior patterns. 'Behavioral Search' is vague, and 'Pattern Search' is redundant with signatures. This covers the two main approaches.

Antivirus software primarily uses two methods: virus signature search (matching known malware patterns against a database) and behavioral heuristic algorithms (detecting suspicious activities by monitoring program behavior). Signature detection catches known threats, while heuristic analysis identifies potential new malware based on anomalous behavior patterns.

A virus hoax is a false warning about a non-existent computer virus that spreads through email chains, causing unnecessary panic. Unlike real viruses, hoaxes are purely social attacks that rely on human fear and credulity to propagate. Spoofing involves faking identities, hacking is unauthorized access, and spam refers to unsolicited bulk messages.

Cryptovirology is the study of cryptography from an attacker's perspective, including how malware can use cryptography (like ransomware encrypting files) and how to attack cryptographic systems. Kleptography is the study of stealing information securely using subliminal channels, cryptology is the broader field encompassing both cryptography and cryptanalysis, and cryptography is the practice of secure communication.

Kleptography is the study of stealing information securely and subliminally, typically through backdoors in cryptographic systems. Unlike cryptovirology (which uses cryptography for malicious attacks) or steganography (hiding existence of messages), kleptography focuses on covertly extracting information from secure systems.

A honeypot is a security mechanism set up to detect, deflect, or counteract attempts at unauthorized access to computer systems. It appears as an attractive target (like a vulnerable server) to lure attackers, allowing security researchers to study their methods and protect real systems. It is absolutely not for hacking systems or downloading content.

DDoS (Distributed Denial of Service) attacks overwhelm a website with traffic from multiple sources, making it unavailable to legitimate users. 'Botting' is not a standard security term, 'unlimited pings' isn't a recognized attack type, and 'Echo attack' isn't a standard attack category. The question has grammatical issues ('attackes' typo) but the correct answer is clear.

Online banking systems use SSL (Secure Sockets Layer) or its successor TLS to encrypt communication between your browser and the bank's servers. This prevents attackers from intercepting sensitive information like passwords and account details. MD5 and MD5-RSA are hash algorithms, not encryption techniques. AES is a symmetric encryption algorithm but not the primary method used for secure web connections.