Information Security

Phishing is a social engineering attack that succeeds by tricking users into taking action - clicking links, entering credentials, downloading malware, or performing transactions. The attack exploits human psychology rather than technical vulnerabilities.

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks like the Internet. A sandbox isolates programs, a rootkit hides malicious access, and password crackers are attack tools - none fit the definition.

VPNs use both symmetric and asymmetric encryption. Asymmetric encryption (RSA, Diffie-Hellman) is used during the key exchange/handshake phase to securely negotiate symmetric keys. Symmetric encryption (AES, 3DES) is then used for bulk data transfer because it's much faster. Hashing provides integrity, not encryption.

The security measures implemented in IB are URL-based security and Authentication & Authorization for the web application. URL-based security restricts access based on URL patterns, while authentication/authorization controls user access to web resources. Option C (EJB authentication) is marked as incorrect, suggesting it's not implemented in this specific environment.

SQL Injection is a well-known web application security risk where attackers manipulate database queries through malicious input. It can allow unauthorized data access, modification, or deletion. The other options listed (Out of Memory, Session Management, SQL Tracing) are primarily operational issues or internal concerns rather than external security vulnerabilities that attackers exploit.

The doPost() method is used for sending sensitive data because it sends data in the request body (not visible in URL), has no size limit, and is more secure than doGet(). doGet() exposes parameters in the URL, making it unsuitable for sensitive information.

Sensitive data should be sent using POST requests via the doPost() method because POST data is sent in the request body, not in the URL like GET requests. This prevents data from appearing in logs or browser history.

The section in Web.config defines authorization rules that specify which users or roles can access specific resources. The section defines the authentication mode (Forms, Windows, Passport, None), but authorization rules controlling user access are separate.

Ethical Hacking is the formal term for authorized security testing where professionals simulate attacks to identify vulnerabilities. It's commonly known as Penetration Testing (or pen testing). 'Malicious Hacking' is the opposite - unauthorized attacks. Integration testing is a completely different software testing activity.

The Threat Management Console in eTrust serves as the central administrative interface. It allows administrators to organize clients into logical groups, create security policies, and distribute those policies to managed endpoints. All three individual functions (organizing clients, serving as admin center, distributing policies) are correct, making 'All of the above' the right answer.

CA eTrust categorizes alerts into three main severity levels: Informational (low-priority events), Warning (potentially suspicious activity), and Critical (immediate threats detected). All three categories are valid alert types in the system, making 'All of the above' correct. Each category serves a different prioritization purpose in threat response.

Forefront Security includes Client Security, Edge Security, Server Protection, and Identity Manager as its primary components. Option B only mentions Edge Security and Server Protection, missing key components Client Security and Identity Manager.

Forefront Security includes three main scan jobs: Real-time Scan Job for immediate protection, Transport Scan Job for email filtering, and Manual Scan Job for on-demand scanning. All options A, B, and C are correct scan job types in Forefront.

Forefront Security includes Keyword Filtering, Subject Line Filtering, and File Filtering to protect against different types of threats. Option D is correct as it encompasses all filtering types mentioned in the other options.

Transport Scan Job handles e-mail messages that are inbound or outbound from the Transport stack of an Exchange site, providing comprehensive email traffic scanning at the transport layer.