The concept here is how backups are performed with or without taking the system offline. A cold backup is the one that is typically offline and requires downtime. In a cold backup you power down the system (and its services) and then copy the entire data set to the backup storage. Because there are no active writes during the backup, you get a clean, consistent copy of the entire system state. This approach is often chosen during scheduled maintenance windows when downtime is acceptable. When the system is online, backups are done differently. A hot backup runs while the system is live, using mechanisms to maintain data consistency without shutting down services. A warm backup sits between online and offline, offering quicker backups with some service continuity but not a full offline outage. Snapshots create point-in-time copies, usually at the storage level, and can often be taken without shutting down the system, though certain applications may require quiescing for a consistent state.

MD5 is a cryptographic hash function that takes input data and produces a fixed-size 128-bit digest. It isn’t an encryption method—it doesn’t use keys and isn’t reversible. This makes it useful for creating a fingerprint of data to verify integrity, rather than for hiding information. The statement describes MD5 as a hashing algorithm used for digital signatures and password storage, which is accurate in concept. In digital signatures, a hash of the message is created and then signed with a private key, binding the signature to the content without signing the entire message. For passwords, the common approach is to hash the password and store the hash; during login, the provided password is hashed again and compared to the stored value. However, MD5 has significant weaknesses. It has known collision vulnerabilities, meaning two different inputs can produce the same hash, and SAMPLEits speed makes it easy to perform brute-force or rainbow-table attacks. Because of these issues, MD5 is no longer trusted for new systems. For signatures, stronger hashes (like SHA-256 or better) are preferred, and for passwords, salted, iterated hashing algorithms (such as bcrypt, scrypt, or Argon2) are recommended.

Social engineering exploits human behavior rather than technical flaws. The form that fits this category best is human-based social engineering, which relies on direct interaction with people—such as impersonation, pretexting, or creating believable scenarios to coax someone into revealing a password or granting access. The attacker uses psychology—trust, authority, urgency—to override security awareness in a person. The other options describe how an attack is delivered or what it targets (machines, devices, or communications), rather than the core tactic of manipulating a person directly. Phishing, while it uses deception, is typically viewed as a channel-based technique that delivers social-engineering tricks electronically rather than the interpersonal manipulation itself.

Wireless networks like 802.11 rely on a shared radio channel in unlicensed spectrum, so two common drawbacks come into play. First, security can be lax because wireless signals travel through the air and can be intercepted by anyone in range; while encryption and better configurations help, the medium’s openness makes passive eavesdropping and access harder to prevent compared with wired networks. Second, bandwidth is shared among all devices on the same channel, so as more connections occur, the available airtime per device shrinks and throughput drops due to contention and backoff mechanisms. This combination—easier access for potential eavesdroppers and reduced efficiency as more devices contend for the same medium—captures the described disadvantage. The other statements don’t fit because 802.11 does not use copper cabling (that’s wired Ethernet), it does not require licensed spectrum (it uses unlicensed bands), and its bandwidth is not unlimited—it’s finite and degrades with interference and more users.