Information Security

To determine the information that should never be emailed, the user should understand the importance of data security and privacy. Email is not a secure method of communication, and any sensitive information sent through email can be intercepted by hackers. Therefore, it is important to avoid sending any confidential information through email.

Option A: Credit card numbers should never be emailed as they are sensitive financial information that can be intercepted by hackers. This can lead to identity theft, unauthorized purchases, and other fraudulent activities.

Option B: Social security numbers are confidential personal information that should never be sent through email. This information can be used for identity theft, fraudulent activities, and other criminal activities.

Option C: Phone numbers are not necessarily confidential information, and they can be shared through email. However, it is important to verify the recipient's identity before sharing any sensitive information with them.

Option D: This option is correct in that any information that is sensitive, confidential, or private should not be sent through email. This includes social security numbers, credit card numbers, addresses, personal information, and any other information that the user would not want shared with unknown parties.

Therefore, the correct answer is:

The Answer is: D

Modern word processors like Microsoft Word offer 'Protect Document' features that allow restricting editing permissions to specific users or requiring passwords. This goes beyond simple password protection by letting authors control who can modify formatting, content, or track changes. The statement accurately describes these document protection capabilities.

Modern database systems support multiple authentication methods including Windows Integrated Authentication, certificate-based authentication, and external providers. These allow users to authenticate without passwords.

Anonymous Access is not an authentication process at all - it allows access without verifying user identity. Basic, Digest, and Integrated Windows Authentication are all proper authentication methods that verify user credentials before granting access.

Spoofing is a class of attacks where an attacker falsifies data to appear as a trusted entity, allowing unauthorized access to or destruction of data. Common types include IP spoofing (can target SANs) and email spoofing. Spoofing doesn't directly reduce availability - that would be a DoS attack.

Application security is a critical business need because security breaches can lead to severe financial losses, legal liabilities, operational disruptions, and damage to brand reputation.

There is a distinct difference: a vulnerability is a weakness or flaw in a system, whereas an attack is the active exploitation of that weakness by an adversary.

OWASP (Open Web Application Security Project) is a worldwide free and open community focused on improving the security of application software by providing tools, documentation, and standards.

Privilege escalation in web applications is categorized into two main types: vertical privilege escalation (accessing functions of higher-privileged users) and horizontal privilege escalation (accessing resources of similar-privileged users).

Input validation is the fundamental preventive measure against a wide range of application vulnerabilities (such as SQL injection, XSS, and path traversal) by ensuring only properly formatted data is processed.

Input Validation can filter malicious data to prevent XSS and injection attacks (SQL, command, LDAP). However, Privilege Escalation occurs when authorization logic is flawed - a user legitimately gains access they shouldn't have. Since the user is authenticated and their input is valid, input validation cannot prevent this.

HTTP and HTTPS use different ports (80 vs 443), and HTTPS is designed to withstand attacks and is secure. Option D correctly combines these facts. Option B incorrectly states HTTPS is insecure - this is clearly a typo. The question asks about differences between the protocols.

umask (user file-creation mode mask) determines default permissions for newly created files and directories. It specifies which permission bits to turn off when creating new files.

There are two main types of privilege escalation in web applications: Vertical (gaining higher privileges like user to admin) and Horizontal (accessing other users' data or accounts at the same privilege level).

Input validation is one of the best preventive measures against many web vulnerabilities including SQL injection, XSS, and command injection. It helps ensure that only valid and expected data is processed by the application.