Information Security

An e-mail bomb is a denial-of-service attack where an address is sent huge volumes of email to overflow the mailbox or overwhelm the hosting server. Phishing (A) involves fake websites to steal credentials. Spoofing (C) alters email headers to fake the sender. Spam (D) is unsolicited bulk mail.

WAPs are vulnerable to multiple attacks: Cafe Latte (exploits WEP to generate packets), Man-in-the-Middle (intercepts communications), and various replay/forgery attacks. Lexicographer attack is not a recognized WAP vulnerability - it's either a distractor or refers to something unrelated to wireless security.

Cyber law encompasses multiple domains including criminalizing cyber offenses, protecting intellectual property in digital formats, regulating electronic and digital signatures for transactions, and establishing data protection and privacy frameworks. All listed domains fall under cyber law.

SEO poisoning (also called search engine poisoning) is a technique where hackers manipulate search engine results to rank malicious websites highly. When users search for legitimate topics, they click these poisoned links and get infected with malware. It does not involve compromising search engines directly, reverse engineering, software cracking, or DNS spoofing.

2009 saw significant social networking attacks on platforms like Facebook and Twitter, widespread rogue security software scams (fake antivirus), and drive-by downloads where malware automatically infected visitors to compromised websites. All three were major attack vectors that year.

Firewalls, strong passwords, and updated software all directly improve computer security by blocking threats, preventing unauthorized access, and patching vulnerabilities. VLAN is a network segmentation technology for organizing networks, not a security tool.

Symantec's 'Be Fearless' campaign promoted their cybersecurity solutions as enabling users to navigate the digital world confidently without fear of threats. The tagline was widely used in their marketing materials during the 2000s.

Hackers are ethically classified by their intentions: Black Hat (malicious), White Hat (authorized security professionals), and Grey Hat (operates between ethical boundaries, sometimes without permission but no malicious intent). Since all three categories represent legitimate hacker classifications, 'All of the above' is the correct answer.

Denial of Service (DoS) is an attack where a hacker makes computer resources unavailable to intended users by overwhelming systems with traffic or exploiting vulnerabilities to crash services. Options A, B, and D (Zombie, Spoofing, Smurf) are specific techniques or related attacks, but DoS is the general term for the resource unavailability objective.

Email is inherently insecure and can be intercepted or forwarded unexpectedly. Never include sensitive information like social security numbers, credit card numbers, passwords, or personal addresses in email messages.

Privacy in the context of database management refers to protecting Personal Information (PI) from unauthorized access, use, or disclosure. Option B correctly captures this as the right of customers and employees to protect their personal information. Options A, C, and D are either too vague, grammatically incorrect, or miss the core concept of privacy as protecting individual's personal data.

Personal Information (PI) encompasses any data that relates to an identified or identifiable individual, including both personal circumstances (like address, phone number) and material circumstances (like financial information). Option D correctly defines PI as information concerning personal or material circumstances of identified individuals (customers or employees). Options A, B, and C incorrectly focus on protection processes rather than defining what constitutes personal information.

A password should contain at least one digit and not match a natural language word for security. Strong passwords mix uppercase, lowercase, numbers, and special characters. Avoiding dictionary words makes them resistant to dictionary attacks. Digital signatures and public keys are cryptographic concepts, not passwords.

Grey hat hackers occupy an ethical middle ground - they may break laws or ethics but not for malicious purposes. They might hack without permission to expose vulnerabilities, sometimes claiming it's for security. Unlike white hats (ethical hackers with permission) or black hats (malicious hackers), grey hats operate in the grey area between legal and illegal, ethical and unethical.