Information Security

FTR (First Time Resolution) focuses on resolving incidents completely on the first contact, preventing recurrence and customer frustration. While MTTR (Mean Time To Repair) measures speed, FTR emphasizes quality and completeness of resolution. Incident resolution should prioritize getting it right the first time rather than just being fast.

In the DIKW hierarchy (Data-Information-Knowledge-Wisdom), tools can store and manage data, information, and knowledge, but wisdom cannot be systematically stored or managed by tools. Wisdom involves applying knowledge with judgment, experience, and insight - it's uniquely human and contextual.

The Knowledge Management hierarchy is Data (raw facts) → Information (data with context) → Knowledge (information with meaning/application) → Wisdom (ability to apply knowledge judiciously). This DIKW hierarchy represents increasing levels of understanding and value.

In ITIL, an incident is defined specifically as an unplanned interruption to an IT service or a reduction in its quality. Other options describe configuration events, problems, or general alerts rather than the actual degradation of an active service.

BO Main.Key likely contains repository information and security domain addresses as core metadata. 'All of the above' is incorrect since option C (meta data) is too vague - it's already covered in A and B.

Audit Collection Services (ACS) in SCOM 2007 is specifically designed to collect security event log data from monitored computers and store it centrally for security auditing and analysis.

SharePoint 2007 allows security to be applied at the item level (individual list items) as the lowest granularity. Document libraries and lists can have permissions, but individual items within them can have unique permissions. Site level is higher, not lowest.

In SharePoint 2007, the available permissions include 'Manage Lists', 'Manage Permissions', and 'Manage Web Site', but there is no permission called 'Manage List Item' - this is the incorrect option.

Alarm correlation groups related alarms to reduce noise and provide context. This benefits both the SIE team (better insight into issues) and Triage team (reduced workload from duplicate alarms). "All of the Above" correctly captures these multiple benefits.

By default, ASP.NET websites are configured with both Anonymous and Integrated Windows authentication. Anonymous allows unauthenticated access while Integrated Windows authentication allows domain-secured access for intranet scenarios.

Vishing (voice phishing) is a social engineering attack that uses telephone services to deceive victims. Unlike email-based phishing, vishing manipulates victims through voice calls, often spoofing caller ID to appear legitimate. Option B is the broader category, while option D is the technology used, not the attack itself.

DNS poisoning (also called DNS spoofing) is an attack where the victim is redirected to a falsified DNS location. The attacker corrupts the DNS cache or response to redirect users to malicious sites. 'DNS falsifying' is not standard terminology, 'DNS caching' is a normal function, and 'DNS cracking' is not a recognized attack type.

A Smurf attack sends spoofed ping requests (ICMP echo requests) to a broadcast address, causing all hosts on the network to reply to the victim, flooding them with ping replies. Ping of death uses oversized packets, Teardrop uses malformed fragment offsets, and Ping broadcast is the mechanism Smurf exploits but not the attack name itself.