What Is a Business Email Compromise Attack?

Answer: BEC (Business compromise attack) is a method of phishing, in which the attacker tried to manipulate the executive holders to transfer the funds or give highly secure information.

BEC is an email cybercrime scam where the hacker’s main focus is the business to do the fraud with the company. The Business email compromise is an ongoing problem that points the companies of all sizes all over the world. The scams of BEC uncover the associations and make the loss of billions of dollars.

The email account compromise is also similar to it and a growing threat in the cloud-based architecture. EAC is related to BEC because both the compromised accounts are the source of the BEC-associated Scams, and BAC is the form of cyber-attacks. The working of the BEC is discussed in the following:

• The scam starts with a phishing email that is the source to have the unauthorized access to an account.
• The hackers might use the email in sequence to gain the trust, though the emails have no virus there might be the chance of risk connecting the hacker with personal accounts.
• The scammer disguised themselves as the vendors that require the payments or sensitive information.
• The hackers provide emails to the employees and make a call to gain their trust.
• During the employee out of reach, like on some trip, the cybercriminals send the email from their office asking to make a payment to the vendor’s accounts.
• As the employee has no method to verify the email, they will decide to approve the payments. The payment went straight to the hacker account rather than the vendors.

BEC scams have different categories some of them are listed in the following:

CEO Fraud:

The hacker disguised as the CEO of the company and email the person in the finance section and asked for the transfer of funds to the given account.

Account compromise:

The email account of the employee is targeted and used for the transition to vendors and sent toward the account of the hackers.

Data theft:

Their target is the HR employee to get the personal data about the person like the CEO or directors and might be the source to fraud the CEO of the organization.

What Is Cat 6 Cable Used For?

Answer: Cat 6 cable is mostly used for the connection of Pcs with network devices like the hub, switch router for file sharing in a network, and internet access.it can also connect the Pcs with printers or scanners for the ongoing flow of the local area network.

A Cat 6 is the twisted pair cable that is specified to use in a Gigabit computer network that is based on ethernet. The cable is completely compatible with the older versions, like the category 5/5e or the category 3 standards.it is mostly used for the network that went to a GB,1000 Mbps,1 Gbps DTR (data transfer speed) or greater, the feature of the Cat 6 is listed in the following:

• It contains 4 pairs of wires made of coppers that are used in data transfer.
• Gives the 250 MHz bandwidth with a speed of 10 Gbps and the length is 100 meters.
• Gives the modified and extended crosstalk and protection against attenuation as compared to an older version of twisted pair cable.

It has support from ethernet networks such as 10BaseT,1000Base-TX,1000 Base-T, and 10 GBase-T.

The data rate which is supported by Cat 6 is 1 gigabit per second. The wires achieved the ethernet connection within a limit mainly around 180 feet for a single wire. The pair of wires are used for the signal to gain high performance. The basics facts about cable are:

• Cat 6 end has the same standard RJ-45 connector that is used in an older ethernet cable version.
• We can identify Cat 6 with the print engraved on the sheath insulation.
• The advanced version of cat 6 Cat 6a supports about 10 Gbps over a large distance.

To install Category 6 some of the requirements need to be fulfilled such as the wire contains not any bending, is not too tight, and the width of the bend has to be larger approx. four times the diameter of the outer cable. The pairs not be untwisted while the outside of jackets does not strip greater than 13mm or 0.15 inches.

What Technique Allows for Inbound Traffic Through a Nat?

Answer: Port forwarding is the method that allocates the inbound traffic through NAT. With the help of it, the traffic is move toward the specified destination behind NAT.it gives the service even if the services are private or to any non-routable address.

For internet access, the public address is required but we can also use the private address of the network. The NAT (Network Address Translation) is used for multiple devices’ access to the internet with one public address. For it, only the private network IP address and public address are needed.

In NAT for the access of the local host more than one local address is translated to the Global ip address (either one or more) and vice versa. NAT does the port number translation such as the packet which is forwarded toward the network, the port number of the host is masked with other port numbers. Then the entries are recorded of the IP address and port number in the NAT table. Most of the time, NAT works on a router or a firewall.

The router on a broad scale is configured for NAT like the router that contains one interface of the local and one for the global network.it works when the packet moves outside the network (local), the NAT work and translates the local (private) IP address to the global IP address and when the packet moves inside the local network, the global IP address is translated to the Local IP address. If the number of addresses is finished in NAT and none of the addresses remains in the configured pool, the packets drop, and unreachable hosts of ICMP packets are sent to the destination.

Some of the benefits and drawbacks of the NAT are described in the following:

Pros:

• NAT has an IP address that is legal.
• It is highly secured as the IP address, and the packets sending and receiving are kept private.
• The address which is changed will remove by NAT when the network evolves.

Cons:

• During the translation it causes the switching path to be late.
• During the NAT working some of the features will not work.
• The IPsec which is a tunneling protocol will become difficult due to NAT.

What Is Active Directory Used For?

Answer: The active directory is used to manage the organization’s users, system, etc The IT administrator works with the help of the Active Directory to maintain the hierarchy of the organization whose network is The membership system also manages memory access and also manages profile picture display. Active directory is very common in today’s world.

Active directory is the feature introduced by Microsoft to the system. On windows, it works and allows the administrator to handle the permit and the network access. The data is stored in the form of an object in AD. the object is an individual element like the user, devices (printer, computer), or any application.

Active directory work by making the category of the objects with name and attributes, such as the user’s name may have the string and the user information like the password and the safe shell keys. One of the major services of the active directory is the Domain services that contain the data about the directory and manage the user interaction with the domains. Active directory DS can be accessed at the user log in to the system and when the user connects to the server in a network.

The active directory DS has the authority to determine the user access to every resource and the policies e.g., the administrator has more access to the system rather than the end-user. The Microsoft and Windows OS might depend on the active directory DS to give access to the resources like the Exchange server, and SharePoint server. The domain controller is the server that is the host of the  Active directory DS. The service which is provided by the Active directory are listed in the following:

• Active directory domain service.
• Lightweight directory service: The codebase is similar to the AD DS and has the same function.
• Lightweight directory access protocol: It is the application protocol that helps to access and manage the director in a network.
• Active directory service certificate: It can create, maintain and share the resources.
• Active directory federation service: Its work is to authenticate the access of users in different applications.
• Rights management services: It can handle the information rights like the encryption of content.

What is the advantage of reports over queries?

• Formation occurs in reports.
• Reports have the ability to access large data.
• Queries can also be formatted.
• Queries only access the data from one table at a time.

Answer:  The advantage the reports have over the queries is that queries only access the data from one table at a time.

The reports in the database are due to the formation of the database queries and contain important data for decision-making and data analysis. The business application has the built-in tool for reporting, it’s an easy front-end interface that calls the database queries from the back end and executes them which are modules for simple application usage. The software for the banks has specified reports on their customers with their reports on monthly basis loans summaries.

For data extraction, the query could be executed with several tools to be able to call at least one query language. SQL is the widely used language for queries. some of them are described in the following:

• HTSQL (hypertext structured query language): The language work is to interpret the HTTP queries to the SQL query language.
• Poligraph query language: Its work is to search the annotated (text that increases the understanding of the user).
• SPARQL (a recursive acronym for SPARQL Protocol and RDF Query Language): The graphing apps work with the help of this language.

The reporting has the capability to generate the output restrictions such as the user running the summary on the monthly loan at first, he has to enter the month or the type of the account related to the report. The special reporting tools are not generally available through simple queries they might be connected with the database that provides the ability for additional reporting. The basic difference between the report and query is:

• The query is the function that fetches the data from the database which is stored in an organized form. The query can never provide the data for the accounting of the invoices.
• The reports took the data from the DB and put it in a useful format that is used for printing, as it uses the headings, columns, and so on.