Information Security

It represents the abstract class from which all implementations of the MD5 hash algorithm inherit.

It computes the SHA512 hash algorithm for the input data using the managed library.

It represents the base class from which all implementations of asymmetric signature formatters derive.

It represents the base class from which all asymmetric key exchange deformatters derive.

Non repudiation refers to a state of affairs, where the purported maker of a statement will not be able to successfully challenge the validity of the statement or contract. The term is often seen in a legal setting wherein the authenticity of a signature is being challenged. In such an instance, the authenticity is being repudiated.

PAP uses a simple two-way handshake: the authenticator sends a challenge, and the peer responds with the username and password in plaintext. PAP is not secure as it transmits credentials unencrypted and doesn't use hashing like CHAP does.

A rogue access point is an unauthorized AP installed on a network without the IT department's knowledge, creating a security vulnerability. It allows unauthorized users to bypass network security and gain access to internal resources. Rogue APs do not alleviate congestion (option A), they do not encrypt traffic (option C - encryption is a function of legitimate APs using WPA/WPA2), and they definitely do not enforce authentication (option D - they bypass security). The primary risk is the security hole they create.

A Denial of Service (DoS) attack overwhelms a server with fake requests, consuming resources and preventing legitimate users from accessing the service. The key symptom is a server operating slowly under a high volume of malicious requests. Reconnaissance (A) is information gathering, access attacks (B) involve unauthorized entry, while worms (D) and viruses (E) are self-replicating malware.

The enable secret command configures an encrypted password using a strong cryptographic hash by default, unlike enable password which stores plain text unless encryption is explicitly applied globally.

A worm is a self-replicating malware that propagates across networks without requiring user interaction or a host program. Unlike viruses (which attach to files), Trojan horses (which disguise themselves as legitimate software), or man-in-the-middle attacks (which intercept communications), worms actively exploit vulnerabilities to spread automatically across network connections, making them particularly dangerous for network propagation.

When falsified routing information propagates through a network, it indicates that unauthorized or malicious routers are injecting incorrect routing data. The most effective mitigation is routing protocol authentication, which ensures that only trusted routers can participate in the routing process. Authentication methods like MD5 or plain text passwords verify the identity of routing peers before accepting their updates. Changing console passwords or updating IOS images address different security concerns (access control and software vulnerabilities respectively), while end-user authentication is unrelated to routing protocol security.

VPN technology uses encryption and tunneling protocols to provide confidentiality, which prevents unauthorized parties from reading the contents of data communications. Even if traffic is intercepted, the encrypted data is unreadable without the decryption keys. QoS manages traffic priority, latency refers to delay, and reliability ensures delivery - none of these prevent data from being read if intercepted.

Phishing is a social engineering attack where fraudulent emails appear to come from trusted sources (like the administrator's office) to trick recipients into revealing sensitive information like passwords and account details. The email described matches this pattern exactly. Cracking involves breaking passwords or encryption, phreaking refers to hacking telecommunications systems, and spamming is unsolicited bulk email - none of which involve tricking users into voluntarily revealing credentials.

The key difference between IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) is that IDS is passive - it only detects and alerts on attacks. IPS is inline and can actively block or prevent detected attacks from executing. This provides real-time protection rather than just notification after the fact.