Question

Select A, B, C, or D for each question

1. Deception techniques at the system level can be used to divert potential attackers away from targeting the system and towards targeting a purpose-built decoy. Which of the following is a deception technique?

      A. Honeypot                                     

      B. Intrusion detection system

      C. Firewall

D. Virtual Private Network (VPN)

2. Which of the followings is not a software testing technique

            A. Attack oriented tested                              

B. User-oriented testing

C. Brute force and random testing

D. Fault and vulnerability-oriented testing

3. Network scanners are examples of ___________

      A. Dynamic analysis tools    

B. Static analysis tools

      C. Compilers

D. None of the above

4. _________is an example of lightweight secure software process

1. Oracle security process                                        
2. Microsoft secure development life cycle
3. CMMI process
4. OSI Security standard

5. Which of the following statements is correct?

1. Risk assessment is the process of planning, managing risk, and mitigating risk.
2. Risk management is the process of planning, assessing risk, and mitigating risk,
3. Risk management applies to software development but risk assessment applies to the overall organization.
4. D. None of the above

Answer 1

1) A //SECURTIY SYSTEM USED TO DETECT OR DEFLECT TO UNAUTHORISED USE OF INFORMATION SYSTEM. IT IS A DECOY SYSTEM TO TRAP HACKER

2) A \\AS THERE IS NO TECHNIQUE USED AS ATTACK ORIENTED TESTED

3) A \\ AS NETWORK SCANNER IS A TOOL THAT SCANS NETWORK FOR SECURITY ,PERFORMANCE,MAINTAINANCE OF NETWORK IN REALTIME. SO FOR REAL TIME WORKING AND COLLECTING PRECISED DATA THERE IS REQUIREMENT OF THESE TYPE OF  DYNAMIC TOOLS THAT ARE ADAPTABLE OR DYNAMIC ACCORDING TO SYSTEM REQUIREMENTS .

4) B \\MICROSOFT PROVIDES A SIMPLE AND RELIABLE AND MORE SECURE SECURITY PROCESS

5) B\\ IT IS PROCESS THAT INCULDES IDENTIFING,PRIORITIZING , AND MANAGING AND MITIGATE RISKS