Information Security

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks like the Internet. A sandbox isolates programs, a rootkit hides malicious access, and password crackers are attack tools - none fit the definition.

VPNs use both symmetric and asymmetric encryption. Asymmetric encryption (RSA, Diffie-Hellman) is used during the key exchange/handshake phase to securely negotiate symmetric keys. Symmetric encryption (AES, 3DES) is then used for bulk data transfer because it's much faster. Hashing provides integrity, not encryption.

The security measures implemented in IB are URL-based security and Authentication & Authorization for the web application. URL-based security restricts access based on URL patterns, while authentication/authorization controls user access to web resources. Option C (EJB authentication) is marked as incorrect, suggesting it's not implemented in this specific environment.

Sensitive data should be sent using POST requests via the doPost() method because POST data is sent in the request body, not in the URL like GET requests. This prevents data from appearing in logs or browser history.

The section in Web.config defines authorization rules that specify which users or roles can access specific resources. The section defines the authentication mode (Forms, Windows, Passport, None), but authorization rules controlling user access are separate.

Ethical Hacking is the formal term for authorized security testing where professionals simulate attacks to identify vulnerabilities. It's commonly known as Penetration Testing (or pen testing). 'Malicious Hacking' is the opposite - unauthorized attacks. Integration testing is a completely different software testing activity.

The Threat Management Console in eTrust serves as the central administrative interface. It allows administrators to organize clients into logical groups, create security policies, and distribute those policies to managed endpoints. All three individual functions (organizing clients, serving as admin center, distributing policies) are correct, making 'All of the above' the right answer.

CA eTrust categorizes alerts into three main severity levels: Informational (low-priority events), Warning (potentially suspicious activity), and Critical (immediate threats detected). All three categories are valid alert types in the system, making 'All of the above' correct. Each category serves a different prioritization purpose in threat response.

Forefront Security includes Client Security, Edge Security, Server Protection, and Identity Manager as its primary components. Option B only mentions Edge Security and Server Protection, missing key components Client Security and Identity Manager.

Microsoft Forefront Security was indeed released in 2010 as a major update to the Forefront product line. Version 2010 included significant improvements over previous versions like 2003 and 2007.

Forefront Security includes three main scan jobs: Real-time Scan Job for immediate protection, Transport Scan Job for email filtering, and Manual Scan Job for on-demand scanning. All options A, B, and C are correct scan job types in Forefront.

Forefront Security includes Keyword Filtering, Subject Line Filtering, and File Filtering to protect against different types of threats. Option D is correct as it encompasses all filtering types mentioned in the other options.

Transport Scan Job handles e-mail messages that are inbound or outbound from the Transport stack of an Exchange site, providing comprehensive email traffic scanning at the transport layer.

Real-time Scan Job in Forefront for SharePoint handles both files uploaded to and downloaded from the SharePoint server, providing comprehensive protection for document collaboration and sharing.