CS627 Final Term MCQs Updated by VU Topper RM

Q1. Vu-Topper RM (1 marks)

What is a primary reason for the continued concern over Buffer Overflow Attacks?

1. Advanced prevention techniques
2. Lack of awareness among programmers
3. Use of high-level programming languages
4. Legacy code in widely deployed systems

Correct answer: Legacy code in widely deployed systems

Q2. Vu-Topper RM (1 marks)

What kind of programming languages are less vulnerable to Buffer Overflow Attacks?

1. Low-level languages
2. Object-oriented languages
3. High-level languages
4. Assembly languages

Correct answer: High-level languages

Q3. Vu-Topper RM (1 marks)

What is "shellcode" in the context of Buffer Overflow Attacks?

1. A defensive programming technique
2. Software used to prevent buffer overflows
3. Code supplied by an attacker, often saved in a buffer being overflowed
4. A type of encoding technique for data input

Correct answer: Code supplied by an attacker, often saved in a buffer being overflowed

Q4. Vu-Topper RM (1 marks)

What is the OWASP Top 10?

1. A group of security experts
2. A list of web application security risks
3. A list of security solutions
4. Top 10 secure programming languages

Correct answer: A list of web application security risks

Q5. Vu-Topper RM (1 marks)

Which of the following results in a first widely known Buffer Overflow Attack?

1. Code Red worm
2. ILOVEYOU
3. Morris worm
4. SQL Slammer

Correct answer: Morris worm

Q6. Vu-Topper RM (1 marks)

What is the purpose of using fuzzing as a method to identify vulnerable programs?

1. To enforce range checks on variables
2. To automate the process of finding buffer overflow
3. To inspect program source code
4. To trace program execution

Correct answer: To automate the process of finding buffer overflow

Q7. Vu-Topper RM (1 marks)

Which type of Buffer Overflow Defense manipulates the location of key data structures?

1. Run-Time Defenses
2. Safe Coding Techniques
3. Compile-Time Defenses
4. Address Space Randomization

Correct answer: Address Space Randomization

Q8. Vu-Topper RM (1 marks)

What is a Buffer Overflow?

1. A method used to execute shellcode
2. A programming error that overwrites adjacent memory locations
3. An attack on a computer's memory structure
4. A type of web application vulnerability

Correct answer: A programming error that overwrites adjacent memory locations

Q9. Vu-Topper RM (1 marks)

Which programming practice can help in reducing software vulnerabilities?

1. Writing code with strong assumptions about inputs
2. Applying structured design and testing methods
3. Using low-level programming languages
4. Not testing the software for potential vulnerabilities

Correct answer: Applying structured design and testing methods

Q10. Vu-Topper RM (1 marks)

Which security flaw is NOT included in the OWASP Top 10?

1. Buffer Overflow
2. Denial-of-Service
3. Un-validated Input
4. Cross-site Scripting

Correct answer: Buffer Overflow

Q11. Vu-Topper RM (1 marks)

The organization that owns the Wi-Fi trademark is:

A. Wi-Fi Alliance

B. Wired Ethernet Compatibility Alliance (WECA) C. IEEE 802 LAN/MAN Standards Committee D. IEEE

Q12. Vu-Topper RM (1 marks)

The original Wi-Fi standard to gain broad industry acceptance was: A. 802.11be B. 802.11a