JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD
JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD B.Tech IV INFORMATION SECURITY ASSESSMENTS AND AUDITS Previous Question Paper (May/June - 2019 - R15)
Part A is compulsory which carries 25 marks. Answer all questions in Part A. Part B consists of 5 Units. Answer any one full question from each unit. Each question carries 10 marks and may have a, b, c as sub questions.
PART-A
Describe the scope of NOS 9003.
Answer
NOS 9003 focuses on the Information Security Audit process. Its scope covers the planning, execution, and reporting of audits to ensure compliance with organizational security policies, standards, and regulatory requirements.
What are constraints of a security audit?
Answer
Constraints of a security audit include:
- Resource limitations: Budget, time, and personnel availability.
- Scope boundaries: Restrictions on accessing specific systems or data to prevent operational disruption.
- Technical constraints: Compatibility issues with legacy systems or lack of specialized auditing tools.
Write technical skills of NOS 9004.
Answer
Sign in to view the complete answer paper.
Explain about internal security auditing tools.
Answer
Sign in to view the complete answer paper.
Define shoulder surfing.
Answer
Sign in to view the complete answer paper.
Draw a diagram for vulnerability management cycle.
Answer
Sign in to view the complete answer paper.
Define risk identification.
Answer
Sign in to view the complete answer paper.
Describe activities of assessment phase of Vulnerability Assessment.
Answer
Sign in to view the complete answer paper.
What are counter measures to prevent unauthorized access to administration interfaces?
Answer
Sign in to view the complete answer paper.
What are top configuration management threats?
Answer
Sign in to view the complete answer paper.
PART-B
Explain about testing security technology.
Answer
Sign in to view the complete answer paper.
Distinguish between information systems audit versus information security audit.
Answer
Sign in to view the complete answer paper.
What is an information security audit? Explain scope of the audit.
Answer
Sign in to view the complete answer paper.
Explain professional skills to maintain a healthy, safe and secure working environment.
Answer
Sign in to view the complete answer paper.
What are information gathering 31-steps? Explain.
Answer
Sign in to view the complete answer paper.
Write steps for conducting external security auditing.
Answer
Sign in to view the complete answer paper.
Explain about human based social engineering / non-technical attack vectors.
Answer
Sign in to view the complete answer paper.
Describe the weapons of social engineer.
Answer
Sign in to view the complete answer paper.
Explain key features advanced threat deterrence and detection capabilities.
Answer
Sign in to view the complete answer paper.
Write some of the other controls that should be taken care of, to reduce the success of a Social Engineering attack.
Answer
Sign in to view the complete answer paper.
Explain about vulnerability classification.
Answer
Sign in to view the complete answer paper.
What are characteristics of a good vulnerability assessment solutions and considerations?
Answer
Sign in to view the complete answer paper.
What are types of vulnerability assessment? Explain.
Answer
Sign in to view the complete answer paper.
Explain about vulnerability analysis tools.
Answer
Sign in to view the complete answer paper.
Explain about configuration management in brief.
Answer
Sign in to view the complete answer paper.
What is configuration item identification? Explain.
Answer
Sign in to view the complete answer paper.
What is configuration control board? Explain.
Answer
Sign in to view the complete answer paper.
Explain about deploying the baseline configuration.
Answer
Sign in to view the complete answer paper.