Computer Science Test 3 Nddc Scholarship

A CMOS virus targets the Complementary Metal-Oxide Semiconductor memory, which stores vital BIOS settings and the system clock. Because this memory is kept active by a small battery even when the computer is powered off, a virus infecting this area can persist across reboots and potentially alter hardware configurations or boot sequences.

Access control is a fundamental security principle often referred to as 'Least Privilege.' It ensures that a user or system process has the specific permissions required to perform its job but is strictly prohibited from accessing sensitive data or administrative functions that are outside its authorized scope, thereby minimizing potential security risks.

Callback is an authentication method used for remote access. When a user attempts to connect to a server via a dial-in connection, the server disconnects the initial call and immediately calls the user back at a specific, authorized phone number stored in its database. This verifies the user's physical location and identity.

These are all subcategories of malware (malicious software). While they have different behaviors—viruses attach to files, worms self-replicate across networks, and Trojans disguise themselves as useful software—they are all explicitly programmed to perform unauthorized actions, steal data, or damage the host computer system.

Active scripting refers to the use of script languages (like JavaScript or VBScript) to add interactivity and dynamic behavior to web content. While essential for modern web functionality, it can be a security vulnerability if malicious actors use it to execute unauthorized code on a user's machine through their browser or email client.

The Internet Protocol (IP) is the principal set of rules for routing and addressing data packets so that they can travel across networks and arrive at the correct destination. It works in conjunction with the Transmission Control Protocol (TCP) to form the foundation of how data is exchanged over the internet.

The Communications Decency Act (CDA) of 1996 was a significant early attempt by the United States Congress to regulate indecency and obscenity on the internet. In a broader security and legal context, it is most famous for 'Section 230,' which provides immunity to online platforms for content posted by their users.

An Intrusion Detection System (IDS) acts as a passive monitoring tool that analyzes network traffic for patterns that match known cyberattacks or suspicious behavior. Unlike a firewall, which actively blocks traffic, an IDS is primarily designed to provide visibility and alert security teams when a potential breach is occurring.

Pharming is a more advanced version of phishing where hackers 'poison' a DNS server or a local host file. This redirects a user to a fake website even if they type the correct URL into their browser. The goal is to deceive users into providing sensitive credentials like bank passwords on a fraudulent site.

Non-repudiation is a security service that provides mathematical proof of the origin and delivery of data. Through the use of digital signatures and public-key cryptography, it prevents a person from later claiming they did not participate in a transaction or send a specific communication, ensuring legal and technical accountability.