MCQ Bank
NESUSS is a ______________________.
- A) A vulnerability scanning tool
- B) A firewall configuration tool
- C) A password cracking tool
- D) A network monitoring tool
What is the purpose of the -6 flag in Nmap?
- A) It limits the scan to IPv6 targets only.
- B) It specifies the number of packets to send in an IPv6 scan.
- C) It enables IPv6 scanning mode.
- D) It enables verbose output for IPv6 scanning.
The IEEE 802.1X standard is primarily used for:
- A) Data link layer protocols
- B) Port-based network access control
- C) Encryption algorithms
- D) Wired network communication
Which of the following is the correct syntax for Nmap command?
- A) nmap -scan <target>
- B) nmap <target>
- C) nmap -tp <target>
- D) nmap <target> -pd
WPA2 uses which encryption algorithm for data confidentiality?
- A) TKIP
- B) CCMP
- C) RC4
- D) WEP
Which of the following is not a correct option regarding NESUSS?
- A) Vulnerable software versions
- B) Packet capturing
- C) Weak passwords
- D) Misconfigured network devices
What is a Buffer Overflow?
- A) A programming error that overwrites adjacent memory locations
- B) A type of web application vulnerability
- C) A method used to execute shellcode
- D) An attack on a computer's memory structure
What is "shellcode" in the context of Buffer Overflow Attacks?
- A) Software used to prevent buffer overflows
- B) A type of encoding technique for data input
- C) Code supplied by an attacker, often saved in a buffer being overflowed
- D) A defensive programming technique
Which type of Buffer Overflow Defense manipulates the location of key data structures?
- A) Compile-Time Defenses
- B) Address Space Randomization
- C) Run-Time Defenses
- D) Safe Coding Techniques
What is a primary reason for the continued concern over Buffer Overflow Attacks?
- A) Advanced prevention techniques
- B) Legacy code in widely deployed systems
- C) Lack of awareness among programmers
- D) Use of high-level programming languages
Which of the following results in a first widely known Buffer Overflow Attack?
- A) Code Red worm
- B) SQL Slammer
- C) ILOVEYOU
- D) Morris worm
Which security flaw is NOT included in the OWASP Top 10?
- A) Un-validated Input
- B) Denial-of-Service
- C) Buffer Overflow
- D) Cross-site Scripting
What is the OWASP Top 10?
- A) A list of security solutions
- B) A list of web application security risks
- C) Top 10 secure programming languages
- D) A group of security experts
Which programming practice can help in reducing software vulnerabilities?
- A) Using low-level programming languages
- B) Not testing the software for potential vulnerabilities
- C) Writing code with strong assumptions about inputs
- D) Applying structured design and testing methods
What kind of programming languages are less vulnerable to Buffer Overflow Attacks?
- A) Object-oriented languages
- B) Low-level languages
- C) High-level languages
- D) Assembly languages
What is the purpose of using fuzzing as a method to identify vulnerable programs?
- A) To automate the process of finding buffer overflow vulnerabilities
- B) To trace program execution
- C) To inspect program source code
- D) To enforce range checks on variables
Marginal revenue of a monopolist is always:
- A) Greater than price
- B) Equal to price
- C) Less than price
- D) Increases with output
Which of the following is the formula to calculate average revenue of a firm?
- A) None of the given options
- B) TR/q
- C) ∆TR/∆Q
- D) P/Q
A firm under perfect competition is considered as:
- A) Price maker
- B) Sole producer
- C) Price breaker
- D) Price taker
The marginal revenue curve of a monopolist is:
- A) Upward sloping
- B) Horizontal
- C) Vertical
- D) Downward sloping