Jawaharlal Nehru Technological University Hyderabad B.Tech III INFORMATION SECURITY MANAGEMENT (SECURITY ANALYST I) Previous Question Paper (March - 2024 - R16)

A Threat is a potential cause of an unwanted incident that may result in harm to a system or organization, such as a natural disaster, human error, or a malicious actor. It represents the possibility of a security breach occurring.

An Attack is an intentional, active attempt to exploit a vulnerability in a system to gain unauthorized access, disrupt services, or steal information. While a threat is a potential danger, an attack is the actual realization or execution of that threat against a target.

Common Vulnerabilities and Exposures (CVE) is a standardized list of publicly known cybersecurity vulnerabilities. Its primary characteristics include:

• Standardized Identifier: Each entry is assigned a unique, permanent identifier (e.g., CVE-YYYY-NNNN) that allows security professionals to reference specific vulnerabilities consistently across different security databases and tools.
• Platform Independence: CVE entries are vendor-neutral and platform-agnostic, focusing on the technical nature of the vulnerability rather than the specific product or manufacturer.
• Common Language: It provides a common dictionary that facilitates interoperability between security products, enabling better communication and data exchange between vulnerability scanners, intrusion detection systems, and incident response teams.