__________________ one of the key capabilities of Nmap in terms of network security.

• A) Generating compliance reports
• B) Detecting network intrusions
• C) Uncovering network vulnerabilities and system loopholes
• D) Monitoring network traffic in real-time

Which of the following is correct option for Nikto tool?

• A) It has both open-source and proprietary versions
• B) It requires a commercial license for usage
• C) it is a proprietary tool
• D) it is open-source and freely available

In terms of vulnerability assessment, Nikto is a __________________.

• A) A password cracking tool
• B) A vulnerability scanning tool for web applications
• C) A network monitoring tool
• D) A firewall configuration tool

NESUSS is a ______________________.

• A) A vulnerability scanning tool
• B) A firewall configuration tool
• C) A password cracking tool
• D) A network monitoring tool

What is the purpose of the -6 flag in Nmap?

• A) It limits the scan to IPv6 targets only.
• B) It specifies the number of packets to send in an IPv6 scan.
• C) It enables IPv6 scanning mode.
• D) It enables verbose output for IPv6 scanning.

The IEEE 802.1X standard is primarily used for:

• A) Data link layer protocols
• B) Port-based network access control
• C) Encryption algorithms
• D) Wired network communication

Which of the following is the correct syntax for Nmap command?

• A) nmap -scan <target>
• B) nmap <target>
• C) nmap -tp <target>
• D) nmap <target> -pd

WPA2 uses which encryption algorithm for data confidentiality?

• A) TKIP
• B) CCMP
• C) RC4
• D) WEP

Which of the following is not a correct option regarding NESUSS?

• A) Vulnerable software versions
• B) Packet capturing
• C) Weak passwords
• D) Misconfigured network devices

What is a Buffer Overflow?

• A) A programming error that overwrites adjacent memory locations
• B) A type of web application vulnerability
• C) A method used to execute shellcode
• D) An attack on a computer's memory structure

What is "shellcode" in the context of Buffer Overflow Attacks?

• A) Software used to prevent buffer overflows
• B) A type of encoding technique for data input
• C) Code supplied by an attacker, often saved in a buffer being overflowed
• D) A defensive programming technique

Which type of Buffer Overflow Defense manipulates the location of key data structures?

• A) Compile-Time Defenses
• B) Address Space Randomization
• C) Run-Time Defenses
• D) Safe Coding Techniques

What is a primary reason for the continued concern over Buffer Overflow Attacks?

• A) Advanced prevention techniques
• B) Legacy code in widely deployed systems
• C) Lack of awareness among programmers
• D) Use of high-level programming languages

Which of the following results in a first widely known Buffer Overflow Attack?

• A) Code Red worm
• B) SQL Slammer
• C) ILOVEYOU
• D) Morris worm

Which security flaw is NOT included in the OWASP Top 10?

• A) Un-validated Input
• B) Denial-of-Service
• C) Buffer Overflow
• D) Cross-site Scripting

What is the OWASP Top 10?

• A) A list of security solutions
• B) A list of web application security risks
• C) Top 10 secure programming languages
• D) A group of security experts

Which programming practice can help in reducing software vulnerabilities?

• A) Using low-level programming languages
• B) Not testing the software for potential vulnerabilities
• C) Writing code with strong assumptions about inputs
• D) Applying structured design and testing methods

What kind of programming languages are less vulnerable to Buffer Overflow Attacks?

• A) Object-oriented languages
• B) Low-level languages
• C) High-level languages
• D) Assembly languages

What is the purpose of using fuzzing as a method to identify vulnerable programs?

• A) To automate the process of finding buffer overflow vulnerabilities
• B) To trace program execution
• C) To inspect program source code
• D) To enforce range checks on variables