CS627 Final Term Solved Subjective by MS Team

Q1. When Nmap is uncertain about port state, it may provide two possible options in its report. Name those options?

o Open | filtered (the port is either open or filtered) o Closed | filtered (the port is either closed or filtered)

2. Purpose of SSH

• SSH (Secure Shell) is a cryptographic network protocol that provides secure remote access and file transfer between two systems.
• It offers a secure alternative to traditional remote access protocols like Telnet and FTP.
• SSH ensures the confidentiality, integrity, and authenticity of data exchanged between client and server.

Q3. "Coordination function" in Wireless LAN?

Coordination function in WLAN refers to the method of controlling access to the wireless medium. It ensures that multiple devices communicate efficiently without collisions. IEEE 802.11 defines two coordination functions: 2026 DCF (Distributed Coordination Function): Uses CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance).

PCF (Point Coordination Function): Uses a centralized approach with polling.

Q4. Mention the name of the security standard specifically designed to ensure that all components that accept, process, store, and transmit credit card information maintain a secure environment?

PCI DSS (Payment Card Industry Data Security Standard)

Q5. Role of access control in operating system security and example?

Security mechanisms

•  Authentication; Access Control
•  Secure Communication (using cryptography)
•  Logging & Auditing o Intrusion Prevention and Detection

Example:

Discretionary Access Control (DAC): A file owner sets permissions for other users.

Mandatory Access Control (MAC): Security levels define who can access classified data.

Q6. Define Trojan Horse?

• In computing, a Trojan horse is any malware that misleads users of its true intent by disguising itself as a standard program.
• The term is derived from the ancient Greek story of the deceptive Trojan Horse that led to the fall of the city of Troy.

2026

2026

• Once installed, Trojans may perform a range of malicious actions.
• Many tend to contact one or more Command and Control (C2) servers across the Internet and await instruction.

7. Port names in Nmap

8. Shellcode role in buffer overflow attack

o Shellcode is a small, malicious piece of code used by attackers in a buffer overflow attack. o When an attacker overflows a buffer, they overwrite the return address of a function to point to their shellcode, allowing them to execute arbitrary commands, often gaining unauthorized access to a system.

9. Security Maintenance Plan Tasks

2026