JNTU
JNTU B.Tech IV INFORMATION SECURITY ASSESSMENTS AND AUDITS Previous Question Paper (November/December - 2018 - R15)
Note: This question paper contains two parts A and B. Part A is compulsory which carries 25 marks. Answer all questions in Part A. Part B consists of 5 Units. Answer any one full question from each unit. Each question carries 10 marks and may have a, b, c as sub questions.
Part A
Make a comparison between the White-box and Grey-box Information security methodologies.
Answer
White-box testing involves full access to source code, architecture, and network diagrams, allowing for a comprehensive analysis of the internal structure. In contrast, Grey-box testing involves partial knowledge of the system, often focusing on specific functionalities or user interfaces, combining elements of both black-box and white-box approaches to simulate a more realistic insider threat.
Give a note on Servers and Storage devices.
Answer
Servers are centralized computing systems that provide resources, data, or services to other computers (clients) over a network. Storage devices, such as SAN, NAS, or DAS, are dedicated hardware components used to retain digital data. Auditing these requires verifying access controls, encryption at rest, and redundant backup configurations to ensure data integrity and availability.
Write a short on IDS Security Auditing.
Answer
Sign in to view the complete answer paper.
Discuss the Firewall Security Audit.
Answer
Sign in to view the complete answer paper.
What is Vulnerability Management?
Answer
Sign in to view the complete answer paper.
Explain the Social Media Countermeasures.
Answer
Sign in to view the complete answer paper.
Write the Vulnerability Assessment Reports.
Answer
Sign in to view the complete answer paper.
Give a note on Residual Risk.
Answer
Sign in to view the complete answer paper.
What is the classification of Configuration Management.
Answer
Sign in to view the complete answer paper.
Give some examples for Configuration control policies.
Answer
Sign in to view the complete answer paper.
Part B
List and explain the Common Issues and Variances of Performance Metrics.
Answer
Sign in to view the complete answer paper.
Discuss the Phases of Information Security Audit and Strategies.
Answer
Sign in to view the complete answer paper.
Briefly explain the Social Engineering Security Auditing.
Answer
Sign in to view the complete answer paper.
Describe the Information Security Audit Deliverable and Writing Report.
Answer
Sign in to view the complete answer paper.
Give a brief note on Human-based Social Engineering.
Answer
Sign in to view the complete answer paper.
Write short notes on the following:
Vulnerability Scanning
Answer
Sign in to view the complete answer paper.
Testing
Answer
Sign in to view the complete answer paper.
Threat management.
Answer
Sign in to view the complete answer paper.
List and explain the Types of Vulnerability Assessment.
Answer
Sign in to view the complete answer paper.
Explain the Characteristics of a Good Vulnerability Assessment Solutions and considerations.
Answer
Sign in to view the complete answer paper.
Briefly explain the Configuration Management in detail.
Answer
Sign in to view the complete answer paper.
Discuss the Configuration Management Requirements-Plan-Control.
Answer
Sign in to view the complete answer paper.