BSc CS Sem 6 BSc CS Semester 6 (2018 2019) 2019 ETHICAL HACKING Question Paper - Mumbai University | munotes

Questions asked in this paper

• 2) Figures to the right indicate marks

1. Q3 Illustrations, in-depth answers and diagrams will be appreciated
2. Q4 Mixing of sub-questions is not allowed
3. Q1 Attempt All the Questions (15M)
   • (a) Multiple Choice Questions:
4. Q1 The security, functionality, and ease of use triangle illustrates which concept?
   • a) As security increases, functionality and ease of use increase
   • b) As security decreases, functionality and ease of use increase
   • c) As security decreases, functionality and ease of use decrease
   • d) Security does not affect functionality and ease of use
5. Q2 What is the next step to be performed after footprinting?
   • a) Enumeration b) Scanning
6. Q3 Nslookup can be used to gather information regarding which of the following?
   • a) Host names and IP addresses b) Whois information
   • c) DNS server locations d) Name server types and operating systems
7. Q4 What are the three types of scanning?
   • a) Port, network and vulnerability b) Port, network and services
   • c) Grey, black and white hat client and network
8. Q5 Which of the following attacks can be perpetrated by a hacker against an organization with
   • a) Denial of service b) Radio frequency jamming the blanks (Use following pool to answer questions)
9. Q1 In attack, an attacker finds an active session and takes over the session by using tools that predict the next sequence number used in the TCP session
10. Q2 works by preventing legitimate users from accessing the system
11. Q3 sniffing allows individuals to capture data as transmitted over the network
12. Q4 is the best countermeasure to session hijacking is a system designed to attract probes, attacks and potential exploits
    • (c) Answer in ONE or TWO sentences:
13. Q1 Define IPSpoofing
14. Q2 What is click Jacking?
15. Q3 What is reverse WWW shell?
16. Q4 What are the ways in which an IDS is able to detect intrusion attempts?
17. Q5 What is a Security log?
18. Q2 Attempt the following (Any THREE) (15M)
    • (a) | What is malware? Explain in brief concept of Virus What is Information Security? Explain Asset, Risk, Threat, Vulnerability with respect to
    • (c) Explain the following terms:
    • a. Eavesdropping b. Man-in-the-middle
    • (d) | What is Cookie Theft? Explain its functionality
    • (e) Define session Hijacking. Describe the three steps involved in session hijacking
    • (f) Explain the term DoS and list the types of DoS attack Attempt the following (Any THREE) (15M)
    • (a) Explain Black, Gray and White Box Penetration Testing methods in detail
    • (b) Write a short note on Crawling with suitable example
    • (c) is Scanning? List and explain types of scanning performed
    • (d) Write a short note on security testing plan
    • (f) Define Threat. Explain iterative process in Threat Modelling
19. Q4 Attempt the following (Any THREE) (15M)
    • (a) Write a short note on MAC Spoofing
    • (b) Compare Windows and Linux operating systems on the basis of
    • a. Security Efficiency
    • (c) Explain in brief Steganography with respect to hacking
    • (d) VOIP? Explain in detail any two VOIP vulnerabilities
    • (e) Explain in brief the metasploit framework
    • (f) the Intrusion detection system Attempt the following (Any THREE) (15M)
    • (a) Define Attack and Explain types of attacks
    • (b) Define the Term Vulnerability. Explain any two from the following
    • a. XSS b. SQL Injection c. Insufficient logging and monitoring Explain pattern matching to known vulnerability Database
    • (d) Define the Following: What is OWASP mobile top 10? Explain any one in detail

Read from the scan above, so a character or two may differ. The scan is the original.