JNTU
JNTU B.Tech IV INFORMATION SECURITY ASSESSMENTS AND AUDITS Previous Question Paper (December - 2019 - R15)
Note: This question paper contains two parts A and B. Part A is compulsory which carries 25 marks. Answer all questions in Part A. Part B consists of 5 Units. Answer any one full question from each unit. Each question carries 10 marks and may have a, b, c as sub questions.
PART - A
Give a note on communication routers.
Answer
Communication routers are networking devices that connect multiple networks and direct data traffic between them. In security auditing, they are critical infrastructure components that must be evaluated for secure configurations, access control lists (ACLs), and routing protocol vulnerabilities to prevent unauthorized access and traffic interception.
Compare and contrast the white box and grey box.
Answer
White box testing provides the auditor with full knowledge of the system, including source code, architecture, and network diagrams, allowing for a comprehensive analysis of internal logic. In contrast, grey box testing provides partial knowledge, often simulating a user with limited access or internal information, which balances the depth of white box testing with the realistic perspective of black box testing.
What is the main purpose of the security audit?
Answer
Sign in to view the complete answer paper.
Discuss the post auditing actions.
Answer
Sign in to view the complete answer paper.
Difference between vulnerability assessment and vulnerability management.
Answer
Sign in to view the complete answer paper.
Why do we need vulnerability management? Justify your answer.
Answer
Sign in to view the complete answer paper.
What is the purpose of a security assessment?
Answer
Sign in to view the complete answer paper.
Give a note on risk acceptance.
Answer
Sign in to view the complete answer paper.
What does configuration management mean?
Answer
Sign in to view the complete answer paper.
Define Configuration Change Control.
Answer
Sign in to view the complete answer paper.
PART - B
Discuss the ethics of an information security.
Answer
Sign in to view the complete answer paper.
Describe and explain the phases that are involved in a security audit.
Answer
Sign in to view the complete answer paper.
List and explain the Security Audits in detail.
Answer
Sign in to view the complete answer paper.
Explain the external security audit.
Answer
Sign in to view the complete answer paper.
Discuss the social engineering security auditing.
Answer
Sign in to view the complete answer paper.
Elaborate on the internal network security audit.
Answer
Sign in to view the complete answer paper.
Give a brief note on a firewall security audit.
Answer
Sign in to view the complete answer paper.
Describe human-based social engineering.
Answer
Sign in to view the complete answer paper.
Explain the vulnerability management.
Answer
Sign in to view the complete answer paper.
What is vulnerability testing? Explain its relation to penetration testing. If any?
Answer
Sign in to view the complete answer paper.
List and explain the types of vulnerability assessment.
Answer
Sign in to view the complete answer paper.
Elaborate risk management feedback loops.
Answer
Sign in to view the complete answer paper.
Write the classification vulnerability assessment.
Answer
Sign in to view the complete answer paper.
Explain the configuration management requirements.
Answer
Sign in to view the complete answer paper.
Discuss testing configuration management.
Answer
Sign in to view the complete answer paper.