CS205 Final Term Solved Past Paper 2023 by Malik

CS205 - Information Security

Q1. What is the purpose of security hardening in information security?

1. To make systems more secure and less vulnerable to attacks
2. To make systems more vulnerable to attacks
3. To make systems less secure and more vulnerable to attacks
4. To have no effect on system security

Correct answer: To make systems more secure and less vulnerable to attacks

Q2. Which of the following is NOT a reason for using version control for IT assets?

1. To track changes to code over time
2. To collaborate with team members on projects
3. To store backups of files
4. To control access to files for unauthorized users

Correct answer: To control access to files for unauthorized users

Q3. Which of the following is NOT a common security hardening technique?

1. Disabling unnecessary services and protocols
2. Updating software and operating systems to the latest versions
3. Enabling all services and protocols
4. Configuring firewalls to block all incoming traffic

Correct answer: Enabling all services and protocols

Q4. Why is it important to keep software and operating systems up to date?

1. Newer versions may contain security fixes and patches
2. Newer versions may contain new vulnerabilities
3. Newer versions may have a negative impact on system performance
4. Newer versions may have no impact on system security

Correct answer: Newer versions may contain security fixes and patches

Q5. How can password security be improved?

1. By using short, simple passwords
2. By using the same password for all accounts
3. By using long, complex passwords and regularly changing them
4. By writing passwords down on a post-it note

Correct answer: By using long, complex passwords and regularly changing them

Q6. What is the purpose of vulnerability management in information security?

1. To identify and prioritize vulnerabilities in systems and networks
2. To create new vulnerabilities in systems and networks
3. To ignore vulnerabilities in systems and networks
4. To have no effect on vulnerabilities in systems and networks

Correct answer: To identify and prioritize vulnerabilities in systems and networks

Q7. How can vulnerabilities be identified in systems and networks?

1. By regularly conducting security scans and assessments
2. By ignoring security alerts and warnings
3. By only relying on manual checks
4. By never updating software and operating systems

Correct answer: By regularly conducting security scans and assessments

Q8. What is the purpose of regularly conducting vulnerability assessments?

1. To identify new vulnerabilities in systems and networks
2. To ignore new vulnerabilities in systems and networks
3. To create new vulnerabilities in systems and networks
4. To have no effect on vulnerabilities in systems and networks

Correct answer: To identify new vulnerabilities in systems and networks

Q9. What is the purpose of security engineering in information security?

1. To design, develop, and implement secure systems and networks
2. To ignore the security of systems and networks
3. To intentionally create vulnerabilities in systems and networks
4. To have no effect on the security of systems and networks

Correct answer: To design, develop, and implement secure systems and networks

Q10. What is the importance of threat modeling in security engineering?

1. To ignore potential security threats
2. To design systems and networks that are resistant to known security threats
3. To create new security threats
4. To have no effect on the security of systems and networks

Correct answer: To design systems and networks that are resistant to known security threats