CS205 Final Term Past Papers 2024 by Moin Akhtar

CS205 FINAL TERM 2023 BY MOIN AKHTAR

TIME & FATE (12 PM 2-16-2024)

Q1. OWASP Software Assurance Maturity Model (SAMM) undertakes software security testing and improvement during which phase?

1. Governance and deployment
2. Governance and verification
3. Verification and deployment
4. Construction and Governance

Answer B. Governance and verification

Q2. Creating awareness relating to policy and ISMS falls under which Cause?

1. Support
2. Operator
3. Performance Evaluation
4. Leadership

Answer D. Leadership

Q3. Assigning resources, assigning roles, and communicating roles fall under which Cause?

1. Support
2. Leadership
3. Performance Evaluation
4. Operator

Answer B. Leadership

Q4. The objective of COBIT is to help organizations

1. Create optimal values from IT by balancing benefits with risk
2. Implement a strong governance of IT
3. Manage it effectively while ensuring business continuity
4. Create a single page IT dashboard

Answer A. Create optimal values from IT by balancing benefits with risk

Q5. In security terms, ownership of and accountability for controls lies with

1. IT operations team
2. Business team
3. Info security or consultant
4. IT help desk team

Answer C. Info security or consultant

Q6. An authentic IT or security professional should always

1. Take credit for everything
2. Never admit mistakes and ensure secrecy
3. Give credit where it is due
4. Be very strict and disciplined

Answer C. Give credit where it is due

Q7. Network performance degradation can be noticed in which step of VM cycle?

1. Preparing the scanner
2. Analyzing the asset
3. Running the scanner
4. Applying the patches

Answer C. Running the scanner

Q8. Which category indicates the highest severity in Qualys scan?

1. Level 2
2. Level 3
3. Level 4
4. Level 5

Answer D. Level 5

Q9. ISO31000 guidelines are centered on

1. Organizational context
2. Leadership and commitment
3. Planning
4. Operation

Answer A. Organizational context

Q10. Which party plays a critical role in the success of a security transformation project?

1. IT team led by CIO
2. Business team
3. Internal team
4. Highest management

Answer D. Highest management

Q11. Under the security transformation model, which team is responsible for incident response?

1. Business team
2. IT or security team or consultant
3. IT operations team
4. IT help desk team

Answer B. IT or security team or consultant

Q12. Complex passwords should be enforced to resist

1. Dictionary attack
2. Injection attack
3. Do attack
4. Phishing attack

Answer A. Dictionary attack

Q13. The term "Candidness" in the context of security management means

1. Promoting performance and merit
2. Encouraging intra-team fights among members
3. Honesty and straight talk
4. Adjusting partners in the right positions

Answer C. Honesty and straight talk

Q14. Which team has primary ownership of vulnerability management processes?

1. IT or security team
2. IT operations team
3. Business team
4. Risk and compliance team

Answer: IT or security team

Q15. Rules are mentioned related to C++ security hardening in which section?

1. Section 1
2. Section 8
3. Section 9
4. Section 10

Answer B. Section 8

Q16. Under security transformation model, which team is responsible for implementing controls?

1. IT operations team
2. Security consultant
3. Risk and compliance team
4. Business team

Answer A. IT operations team

Q17. In which assessment type does the tester have access to all internal information about the target?

1. White box assessment
2. Grey box assessment
3. Black box assessment
4. Risk assessment

Answer A. White box assessment

Q18. What are the key benefits of security transformation project implementation to an organization?

1. IT team gains experience and awareness of security
2. Prevention of an attack
3. IT team gets certifications
4. Management becomes aware of IT team capabilities

Q19. Which action is recommended for an organization having a very good security posture and scoring higher than 85%?

1. Go for risk assessment
2. Third-party security review