Information Security

Vishing is the correct term - it combines 'voice' and 'phishing'. This attack uses VoIP phone systems to deceive victims into revealing personal information, often by spoofing caller ID to appear as legitimate organizations. The other options are incorrect: 'wishing' is unrelated, 'Viking' refers to Norse seafarers, and 'Fishing' is the actual activity (the cybercrime is 'phishing' with a 'ph').

A Cryptex is a fictional portable vault with a cylindrical combination lock, introduced in Dan Brown's novel 'The Da Vinci Code.' The word is a portmanteau of 'cryptology' and 'codex' - it can only be opened with the correct password, and breaking it destroys the message inside.

Email spoofing is the practice of altering email header information to make the message appear to come from a known or trusted source. This is commonly used in phishing attacks and spam campaigns.

In HTTPS, the 's' stands for 'secure' - it indicates the connection is encrypted using SSL/TLS protocols. While 'secured' or 'security' might seem logical, the standard abbreviation is simply 'secure'. 'Simple' is incorrect as HTTPS provides more security than HTTP.

People are widely considered the weakest link in security because they can be manipulated, make mistakes, or bypass technical controls through social engineering. Even the most sophisticated security systems can be compromised through human error, phishing attacks, or credential sharing.

Hacking attempts can be categorized as accidental (unintentional access or exposure), ethical (authorized penetration testing and security research), or intentional (deliberate unauthorized access). This classification framework covers the full spectrum of hacking motivations and methods.

A script kiddie is an amateur who lacks technical expertise to develop their own hacking tools or exploits. Instead, they use pre-written scripts and programs created by skilled hackers to attack systems. The term emphasizes their lack of understanding and reliance on existing tools.

Web 2.0's community-driven, information-sharing model creates multiple security risks: the exposure of personal data on social platforms facilitates social engineering attacks, while rapid API development often prioritizes functionality over security, creating vulnerabilities in automated processes. Both factors significantly threaten information security.

GIFAR is a hacking technique that involves combining a GIF image file with a Java archive (JAR) file. This hybrid file can execute malicious code and potentially steal viewer credentials when loaded in a vulnerable browser.

This is a duplicate of question 57468. GIFAR is a hacking technique combining GIF and JAR files that can execute malicious code and steal credentials when rendered by vulnerable browsers.

Data Leakage Prevention (DLP) methods include network-based solutions (monitoring network traffic) and host-based solutions (installed on endpoints). Application-based DLP is also a category, making 'Both A & B' the most accurate single choice.

Data Leakage Prevention solutions can protect data at rest (stored data), in motion (data being transmitted), and at endpoints (devices where data is accessed). This comprehensive coverage is a key feature of enterprise DLP solutions.

Besides technical DLP solutions, organizations should implement employee training on data handling, establish company-wide data policies, and use encryption with outbound filtering. A holistic approach combining people, process, and technology is most effective.

Phishing tricks users into revealing credentials through fake emails, compromising email security. E-mail bombs flood systems with massive volumes to cause denial-of-service. Spam consumes bandwidth and storage, making it harder to identify legitimate emails. All three attack vectors weaken corporate email systems.