CS627 Midterm MCQs Updated by VU Topper RM

Q1. Vu-Topper RM (1 marks)

Which CVSS severity factor determines whether the attack requires special knowledge or tools?

1. Attack vector
2. User Interaction (UI)
3. Attack complexity
4. Privileges required

Correct answer: Attack complexity

Q2. Vu-Topper RM (1 marks)

In vulnerability management life cycle, “Access risk” is the __________ step.

A. 2

B. 1 C. 3 D. 4

Q3. Vu-Topper RM (1 marks)

Nessus closed its open source commercial product in ________. A. 2015 B. 1998 C. 2010

D. 2005

Q4. Vu-Topper RM (1 marks)

Which of the following is a feature of Nessus that helps in prioritizing vulnerabilities?

1. Intrusion prevention
2. Risk scoring
3. Password cracking
4. Real-time alerting

Correct answer: Risk scoring

Q5. Vu-Topper RM (1 marks)

In vulnerability management life cycle, “Remediate” is the __________ step.

A. 3

B. 1 C. 4 D. 2

Q6. Vu-Topper RM (1 marks)

Which of the following options is not a Qualys deployment option?

1. Cloud-based service
2. Hybrid solution
3. Mobile application
4. On-premise device

Correct answer: Mobile application

Q7. Vu-Topper RM (1 marks)

Which statement best describes the reputation of Nessus in the field of vulnerability assessment?

1. It is the most trusted and gold standard vulnerability assessment solution.
2. It is a lesser-known tool with limited deployment.
3. It is the newest and emerging solution in the market.
4. It is a controversial tool with mixed reviews.

Correct answer: It is the most trusted and gold standard vulnerability assessment solution.

Q8. Vu-Topper RM (1 marks)

What is the relationship between CVE and the National Vulnerability Database (NVD)?

1. CVE and NVD are independent and unrelated entities
2. CVE feeds into NVD, providing vulnerability data for analysis and reporting
3. NVD contributes to the development and maintenance of the CVE list
4. NVD is responsible for assigning unique identifiers to vulnerabilities listed in CVE

Correct answer: CVE feeds into NVD, providing vulnerability data for analysis and reporting

Q9. Vu-Topper RM (1 marks)

What is the minimum key length required for RSA encryption?

1. 1024 bits
2. 512 bits
3. 56 bits
4. 128 bits

Correct answer: 1024 bits

Q10. Vu-Topper RM (1 marks)

The reversibility of the Feistel Network allows for: A. Protection against brute-force attacks B. Easy key generation

C. Efficient encryption and decryption

D. High-speed data transmission

Q11. Vu-Topper RM (1 marks)

What is the purpose of cryptography?

1. To provide a way to store data without encryption
2. To provide secure communications in the presence of an adversary/attacker
3. To provide entertainment to people
4. To provide a way to communicate without encryption

Correct answer: To provide secure communications in the presence of an adversary/attacker

Q12. Vu-Topper RM (1 marks)

Attribute-based access control (ABAC) controls access based on: