Explanation/Reference:
Explanation:
When reviewing print systems spooling, an IS auditor is most concerned with the potential for unauthorized printing of report copies.

Section: Protection of Information Assets
Explanation:
In traffic analysis, which is a passive attack, an intruder determines the nature of the traffic flow between
defined hosts and through an analysis of session length, frequency and message length, and the intruder is
able to guess the type of communication taking place. This typically is used when messages are encrypted
and eavesdropping would not yield any meaningful results, in eavesdropping, which also is a passive
attack, the intruder gathers the information flowing through the network with the intent of acquiring and
releasing message contents for personal analysis or for third parties. Spoofing and masquerading are
active attacks, in spoofing, a user receives an e-mail that appears to have originated from one source when
it actually was sent from another source. In masquerading, the intruder presents an identity other than the
original identity.

Section: Protection of Information Assets

Section: Protection of Information Assets
Explanation:
The main advantage of elliptic curve encryption over RSA encryption is its computation speed. This method was first independently suggested by Neal Koblitz and Victor S. Miller. Both encryption methods support digital signatures and are used for public key encryption and distribution. However, a stronger key per se does not necessarily guarantee better performance, but rather the actual algorithm employed.

Explanation/Reference:
Explanation:
It's possible to protect messages in transit by means of cryptography.
One method of encryption --the one-time pad --has been proven to be unbreakable when correctly used.
This method uses a matching pair of key- codes, securely distributed, which are used once-and-only-once to encode and decode a single message. Note that this method is difficult to use securely, and is highly inconvenient as well.