Information Security

The user who initiated the session remains accountable for all activities occurring during that session. This principle establishes clear security responsibility, ensuring users protect their credentials and properly terminate sessions.

A flooding attack is a type of DoS attack where a target is overwhelmed with more traffic or packets than it can process. This exhausts the target's resources, making it unavailable to legitimate users. The other terms (saturating, inundation, data-surge) are not standard terminology for DoS attack types.

IP spoofing is an attack where hackers forge the source IP address in packets to disguise their identity or impersonate a trusted system. This allows attackers to bypass basic IP-based authentication and launch attacks while hiding their true location. Back-door, birthday attacks, and man-in-the-middle are different types of attacks with distinct mechanisms.

A backdoor attack involves a deliberate hidden access point in software that allows unauthorized entry, bypassing normal authentication. This could be intentionally left by developers or maliciously inserted. Birthday attacks involve hash collisions, man-in-the-middle intercepts communications, and spoofing forges identities - none match the deliberate code opening scenario.

Social engineering attacks manipulate human psychology, so end user education is the primary defense against them in organizations. While firewalls and technical controls help, they cannot prevent users from being manipulated. Inbox rules and corporate intranets are technical tools that don't address the human vulnerability that social engineering exploits.

A one-time password (OTP) is valid only for a single login session and then discarded, providing strong security against replay attacks. Dynamic passwords may change but aren't necessarily single-use, static passwords don't change, and hybrid passwords aren't a standard authentication category.

Throughput rates measure how fast a biometric system can process verification attempts, and larger biometric data files take longer to process, reducing throughput. Data collection techniques, enrollment time, and user contact are not directly affected by file size in the same way.

CHAP (Challenge Handshake Authentication Protocol) uses a one-way hash value to authenticate without sending the actual password across the link, protecting against eavesdropping. Plaintext passwords would be insecure, digital signatures are for non-repudiation, and asymmetric encryption is not CHAP's mechanism.

IP spoofing involves forging source IP addresses in packets to appear as if they originate from trusted sources. Options A and C describe different attacks (password theft, social engineering), and D describes phishing.

Directory services (like LDAP or Active Directory) serve as the centralized repository storing user IDs, credentials, and profile information. Authentication services validate credentials against this directory, but the directory itself holds the identity data. Authorization services determine permissions, and personalization services customize user experience - neither act as the primary repository.

Password synchronization automatically propagates password changes across multiple systems to ensure consistency. When a user changes their password on one system, synchronization updates it on all connected systems. Single sign-on (A) is about logging in once, password management (B) is about overall policy, and self-help (C) is about user-driven reset workflows.

Directory services act as the central repository storing user IDs, credentials, and profile information. They play a critical role in authentication by providing the data against which login credentials are verified. Authentication services (A) perform the verification, authorization services (B) control permissions, and personalization services (D) customize user experiences.

Frameworks operate at the application layer, providing security features like authentication, authorization, input validation, and protection against common attacks (SQL injection, XSS, etc.). While hardware, OS, and web servers have security roles, frameworks offer application-level security that developers directly leverage. Option C is correct.

The element in HTML5 generates a public/private key pair for secure user authentication. This allows browsers to create key pairs for certificate-based authentication without requiring plugins.

The nzpassword utility is used to encrypt Netezza passwords for secure storage and transmission. It allows administrators to store encrypted credentials instead of plaintext passwords, improving system security.