Information Security

GIFAR is a hacking technique that involves combining a GIF image file with a Java archive (JAR) file. This hybrid file can execute malicious code and potentially steal viewer credentials when loaded in a vulnerable browser.

This is a duplicate of question 57468. GIFAR is a hacking technique combining GIF and JAR files that can execute malicious code and steal credentials when rendered by vulnerable browsers.

Data Leakage Prevention (DLP) methods include network-based solutions (monitoring network traffic) and host-based solutions (installed on endpoints). Application-based DLP is also a category, making 'Both A & B' the most accurate single choice.

Data Leakage Prevention solutions can protect data at rest (stored data), in motion (data being transmitted), and at endpoints (devices where data is accessed). This comprehensive coverage is a key feature of enterprise DLP solutions.

Besides technical DLP solutions, organizations should implement employee training on data handling, establish company-wide data policies, and use encryption with outbound filtering. A holistic approach combining people, process, and technology is most effective.

Phishing tricks users into revealing credentials through fake emails, compromising email security. E-mail bombs flood systems with massive volumes to cause denial-of-service. Spam consumes bandwidth and storage, making it harder to identify legitimate emails. All three attack vectors weaken corporate email systems.

An e-mail bomb is a denial-of-service attack where an address is sent huge volumes of email to overflow the mailbox or overwhelm the hosting server. Phishing (A) involves fake websites to steal credentials. Spoofing (C) alters email headers to fake the sender. Spam (D) is unsolicited bulk mail.

WAPs are vulnerable to multiple attacks: Cafe Latte (exploits WEP to generate packets), Man-in-the-Middle (intercepts communications), and various replay/forgery attacks. Lexicographer attack is not a recognized WAP vulnerability - it's either a distractor or refers to something unrelated to wireless security.

Vulnerability Management protects reputation by preventing security breaches, ensures business continuity by minimizing disruption, and safeguards IT infrastructure and data from exploitation. It is a foundational cybersecurity practice.

The Vulnerability Management Lifecycle begins with identifying vulnerabilities, then analyzing their severity and exploitability, mitigating through patching or other controls, and ongoing management. Monitoring is continuous but not a sequential step.

Cyber law encompasses multiple domains including criminalizing cyber offenses, protecting intellectual property in digital formats, regulating electronic and digital signatures for transactions, and establishing data protection and privacy frameworks. All listed domains fall under cyber law.

SEO poisoning (also called search engine poisoning) is a technique where hackers manipulate search engine results to rank malicious websites highly. When users search for legitimate topics, they click these poisoned links and get infected with malware. It does not involve compromising search engines directly, reverse engineering, software cracking, or DNS spoofing.

2009 saw significant social networking attacks on platforms like Facebook and Twitter, widespread rogue security software scams (fake antivirus), and drive-by downloads where malware automatically infected visitors to compromised websites. All three were major attack vectors that year.

Firewalls, strong passwords, and updated software all directly improve computer security by blocking threats, preventing unauthorized access, and patching vulnerabilities. VLAN is a network segmentation technology for organizing networks, not a security tool.