Information Security

A botnet is a network of compromised computers (zombies) controlled by a malicious actor without the owners' knowledge. The term combines 'robot' and 'network' - these machines are used to send spam, launch DDoS attacks, or other malicious activities.

A 'stealth-call' is strategically calling someone when you know they can't answer, leaving a voicemail to avoid actual conversation. The other options (regular missed call, unknown number call, VoIP call) don't capture this deliberate avoidance aspect.

Télécharger is the French verb for to download, referring to transferring data from a remote system to a local device. Download is the correct English equivalent. Upload is the opposite action (sending data outward). Security and Anti Virus are related concepts but not the meaning of télécharger.

'Mot de passe' is French for 'password' - literally translating to 'word of passage' or 'passing word.' This is basic computer terminology and French vocabulary. 'Login' and 'Username' are different authentication components, while 'Security' is too broad to be the translation.

Confidentiality is the principle of protecting information from unauthorized disclosure or access. It's a fundamental concept in information security and privacy, ensuring that sensitive data is only accessible to authorized individuals or systems. Confirmation and Cash Tolerance are unrelated terms, while Conflict Control refers to managing disputes, not data protection.

Email attachments are the most common vector for computer viruses. When a user opens an infected file attached to an email, the malicious code executes. Simply visiting a URL is generally safer, though not entirely risk-free.

BCC stands for Blind Carbon Copy. When you put an address in the BCC field, that recipient receives the email, but their address is not visible to the primary recipient (To) or the CC recipients.

Comodo Firewall is a well-known free firewall software for Windows. Zone Alarm Pro is a paid commercial product (though a free version exists), while Hit-Fire and Threat fire are not recognized firewall products.

Clickjacking is a malicious technique where attackers trick users into clicking on something different from what they perceive by overlaying invisible or disguised elements on a webpage. While option A mentions revealing confidential information, clickjacking is more broadly about deceiving users into performing unintended actions like deleting content, changing settings, or making unwanted purchases. The description in A captures the deceptive essence but is slightly narrow in focus.

Security management in LAN software includes access control, user activity logging, and auditing - exactly what the question describes. Configuration management handles setup changes, performance management monitors network speed/reliability, and authentication is a subset of security (identity verification only).

Hackers, viruses, and identity theft are all direct security threats that can compromise systems and personal data. Spam, while annoying and potentially malicious (like phishing emails), is primarily a nuisance rather than a fundamental security risk in the same category. The question asks for what's NOT a 'real security and privacy risk' - spam is more of an inconvenience than the direct threats posed by the other options.

Social Engineering involves manipulating people to gain access or information by impersonating someone trustworthy. Piggybacking is tailgating physically behind authorized persons, phishing uses fraudulent emails, and hacking is technical exploitation.

Basic authentication and Form-Based authentication don't encrypt data - they send credentials in plaintext (Basic uses Base64 encoding which is easily reversible). Client Certificate and Digest authentication provide encryption - Digest uses a one-way hash and Client Certificate uses SSL/TLS encryption.

Input validation against a whitelist is a correct injection prevention mechanism. A whitelist defines exactly what inputs are allowed, rejecting anything that doesn't match. This prevents injection attacks by ensuring only valid, expected data enters the system. Avoid escaping special characters would make you vulnerable, non-parameterized APIs are vulnerable, and while avoiding wrong data helps, validation against whitelist is the technical prevention mechanism.

The description 'text-based attack data that exploit the interpreter in the browser' is the textbook definition of Cross Site Scripting (XSS). In XSS attacks, malicious scripts are injected into web pages viewed by other users, exploiting the browser's script interpreter. This distinguishes it from Injection (server-side interpreter), CSRF (exploiting authenticated sessions), and URL access restrictions (authorization bypass).