VU current papers 2026: what came in the exam

MCQs conceptual thy leikn easy thy Kisi file sy nhi lagy thy agr concept clear hon to asani sy hoskty hain 1)_______ is associated with "closing" phase of project management 2) secure SDLC is best described as________ 3) The CSRC by NIST primarily provides_________ 5) A major information security challenge in Pakistan is due to________ 6) According to security transmission models before applying security governance, an organization must first complete ___________ 7) Before developing security application an organization should first_______ 8) one way to limit exposure through open port is to__________ 9)The key benefits of Qualys asset management is____________ Mjhe jitny yaad rhy mene likh diye hain baqi mjhe yaad nhi and Sorry mjhe options yaad nhi thy or itna time nhi tha ky likh ln😞 SUBJECTIVE PART(Sb Kuch Qasim Khan world ki file sy aye thy) SHORT: Q1)Which vulnerability scanner is used for both code based and configuration based vulnerability? Q2) Which of the following not used as vulnerability scanner identify Two Answer) ASP.NET, HTTPS. Q3) Identify two security function from the given list for which asset management help? Yai Option diye hoye thy identify krna tha konsy Sahi hain a)Network congestion b)patch management, c)identify for future viruses, d)Enterprise tracking and reporting, e) internal IP fragmentation Q4) is mein ek scenario diya hua tha wo mjhe yaad nhi haaaa🥲 LONG QUESTION: long mein sary tables thy arrange krna tha unhy Q1) match security engineering activities with team. Q2) Board Vs IT management responsibilities given the Batana tha ky konsi board ki hain or konsi IT management ki Q3)5 layers oF CSMM the unhy arrange krna tha by layer ky konsi layer first ayege konsi second pr konsi Overall paper bht ziada easy tha Qasim Khan world ki recently Jo preparation video ha subjective sb us mein sy laga Jitny bhi questions thy sb us file sy aye thy wo file lazmi Kren ....mein dobara Keh rhi hn Qasim Khan world ki final term preparation video lazmi daikhen apka 80% paper us mein sy hojayega JazakAllahMCQs conceptual thy leikn easy thy Kisi file sy nhi lagy thy agr concept clear hon to asani sy hoskty hain 1)_______ is… See more See less

Mcsqs kafi conseptual thy Shorts sary current paper se repeat hue ek koi ajeeb sa tha ..long b repeat thy current papers sy..alhumdulillah bhot acha ho gya P3R4D0XMcsqs kafi conseptual thy Shorts sary current paper se repeat hue ek koi ajeeb sa tha ..long b repeat thy current papers… See more See less

Most of the MCQs were taken from Sir Qasim's MCQ file, while the remaining MCQs were from the CS205 handouts. Short Question 1 What are the types of Security Testing? Answer: Vulnerability Assessment (VA) Penetration Testing (PT) Automated Security Testing Tools Code Review (performed in a test environment) Short Question 2 What are the types of activities performed during Security Engineering? Answer: Firewall Access Control Lists (ACLs) Creating DMZ Architecture Network Segmentation using VLANs Adding Security Tools (SIEM, Firewall, DLP, NAC) Application and Database Encryption Short Question 3 In the QualysGuard scanning methodology, once TCP port scanning has been completed, which detection test is performed next? Answer: Operating System (OS) Detection After TCP port scanning, Qualys performs OS Detection by sending specially crafted packets to open and closed ports to identify the operating system of the target machine. Short Question 4 A scenario-based question was given. Long Question 1 Arrange the layers of the Cyber Security Maturity Matrix (CSMM) in the correct order? Long Question 2 A table was provided. Identify which activities belong to the Initial level and which belong to the Intermediate level of Information Security Governance. Question: Following table contains some characteristics of exploits that cause security breaches. You are required to identify the type of exploit as Local or Remote. Answer Required prior to the Vulnerability System Local Works over Network Remote Does not require any prior access Remote Exploit it through Internet RemoteMost of the MCQs were taken from Sir Qasim's MCQ file, while the remaining MCQs were from the CS205 handouts. Short Question 1… See more See less

Subjective part: Completely sir Qasim ke file se thaa Objective part: Handout+Conceptual… See more See less

Mcqs Mostly from CSC controls And from handouts overall SQ First layer name of CSMM Types of security testing SRP Qualys guard steps names LQ All longs were from tables Paper was easy for short questions just remember all the points stages steps sequence and for long questions only remember tables from handouts and nothing elseMcqs Mostly from CSC controls And from handouts overall SQ First layer name of CSMM Types of security testing SRP Qualys guard… See more See less

MCQS Sare handouts sy thy, ma nee Qasim ki files or past papers extension sy mcqs prepare kiyeee thy but ak bi repeat ni howa. Subjective Qasm ki file ma sy 2 questions thy write in correct order foundamentals, foundation, hardened, . Short question ma names he btany thy or tables thy bus. VM ke tools ke name identity Krne thy. Ak scenario given tha btana tha Konsa security model uspr apply Hoga usko improve Krne ke lye. Long ma tables he thy sarey. Ak table tha identity krnaa tha unfoSec or IT team ko. Ak or table tha board team or it team ko match krna tha.MCQS Sare handouts sy thy, ma nee Qasim ki files or past papers extension sy mcqs prepare kiyeee thy but ak bi repeat ni howa… See more See less