Information Security

Real-time Scan Job in Forefront for SharePoint handles both files uploaded to and downloaded from the SharePoint server, providing comprehensive protection for document collaboration and sharing.

BO Main.Key likely contains repository information and security domain addresses as core metadata. 'All of the above' is incorrect since option C (meta data) is too vague - it's already covered in A and B.

Audit Collection Services (ACS) in SCOM 2007 is specifically designed to collect security event log data from monitored computers and store it centrally for security auditing and analysis.

SharePoint 2007 allows security to be applied at the item level (individual list items) as the lowest granularity. Document libraries and lists can have permissions, but individual items within them can have unique permissions. Site level is higher, not lowest.

By default, ASP.NET websites are configured with both Anonymous and Integrated Windows authentication. Anonymous allows unauthenticated access while Integrated Windows authentication allows domain-secured access for intranet scenarios.

Vishing (voice phishing) is a social engineering attack that uses telephone services to deceive victims. Unlike email-based phishing, vishing manipulates victims through voice calls, often spoofing caller ID to appear legitimate. Option B is the broader category, while option D is the technology used, not the attack itself.

DNS poisoning (also called DNS spoofing) is an attack where the victim is redirected to a falsified DNS location. The attacker corrupts the DNS cache or response to redirect users to malicious sites. 'DNS falsifying' is not standard terminology, 'DNS caching' is a normal function, and 'DNS cracking' is not a recognized attack type.

A Smurf attack sends spoofed ping requests (ICMP echo requests) to a broadcast address, causing all hosts on the network to reply to the victim, flooding them with ping replies. Ping of death uses oversized packets, Teardrop uses malformed fragment offsets, and Ping broadcast is the mechanism Smurf exploits but not the attack name itself.

Keeping applications and operating systems up to date is a fundamental security practice, as updates patch known vulnerabilities. Using the system as standalone does not prevent attacks, security utilities are helpful but not sufficient alone, and shutdown only protects when off. The question phrasing is awkward but the core concept is valid.

Online banking security requires awareness of multiple threat vectors. Phishing steals credentials through fake websites, keyloggers capture keystrokes to steal passwords, and HTTPS ensures encrypted communication with legitimate banking sites.

Phishing attacks work by tricking users into clicking malicious links that appear legitimate. Avoiding direct clicks on email/chat links prevents attackers from redirecting you to fake websites designed to steal credentials.

Fake antivirus scams are social engineering attacks that use multiple tactics: fake security alerts to scare users, and then attempt to monetize through fraudulent software sales or installing malicious code like keyloggers to steal financial information.

To use DPM agent (DPMRA) to protect a domain controller in a different forest, a two-way trust relationship must be established between the forests. This allows authentication and authorization across forest boundaries. Raising functional levels and extending schema are not prerequisites for cross-forest protection.

Cognos project security is implemented through packages (which control what data users can access) combined with users, groups, and roles managed through Access Manager. This layered approach grants or restricts access to specific reports, models, and data based on organizational roles.

XML Signature provides comprehensive security capabilities for XML documents. It enables digital signatures that authenticate the source and integrity of documents, uses the sender's private key for signing, and provides non-repudiation by ensuring the signer cannot later deny having signed the document. All these security features work together to secure XML-based transactions.