1. Define is a threat?
2. List 8 types of threats?
3. With an aid of diagram, explain a model for network security?
4. List and explain 3 aspects of security?
5. Describe the difference between the following:
6. Steganography. Vs Cryptanalysis.
7. Threat vs attack.
8. symmetric encryption vs asymmetric encryption
9. Security attacks vs Security mechanism
10. integrity and non repudiation.
11. passive attack vs active attack
12. private key and public key algorithm
13. TLS vs SSL security
14. Describe two basic functions used in encryption algorithms? [4]
15. List components of encryption algorithm.
16. What is the difference between passive and active security threats?
17. List and briefly define categories of passive and active security attacks.
18. Explain data confidentiality, data authentication and data integrity.
19. List 4 types of security attacks
20. With an aid of a diagram, explain a model for network security?
21. List 5 system network analysis tools
22. Explain what is the difference between encryption and decryption technique?
23. With an aid of a diagram draw a block diagram showing plain text, cipher text, encryption
and decryption
24. Explain what is meant by a digital signature and describe how it is generated.
25. List out the attacks related to Digital Signature
26. What is the purpose of X.509 standard
27. IPsec is a suite of protocols for securing networks. Briefly outline how it provides
Confidentiality, integrity and authentication.
28. Identify THREE (3) threats to a wireless network that could compromise security. You
should state the security attribute that is compromised by each threat.
29. Explain the concept of ‘Defence in Depth’.
30. Describe the top-down approach to information security.
31. Define virus.
32. List 6 types of viruses?
33. What is a trusted software?
34. Explain firewalls and how they prevent intrusions.
35. Define intrusion detection and explain 3 types of detection mechanisms, in detail.
36. Explain the types of Host based intrusion detection. List any two IDS software available.
37. List 5 types of network attacks?
38. With an aid of a diagram, explain a model for network security?
39. List 5 pillars of Information Security
40. Explain about Symmetrical and Asymmetrical key cryptography.
41. Briefly describe encryption and decryption in relation to cryptography.
42. Write short notes on the following
i. Key wrapping?
ii. Authentication token
iii. Plain text?
iv. Cipher text?
v. Trusted Systems
vi. Worms
vii. HTTPS
viii. Trojan Horse
ix. Attack
43. List the 2 types of access control models.
44. Describe the concept of Caesar cipher
45. List and describe the components of encryption algorithm
46. List 5 network defensive mechanisms
47. Briefly describe the term vulnerability in the context of network security and provide
THREE (3) examples of vulnerabilities in a network
48. Differentiate between denial of Service (DoS) attack and Distributed Denial of Service
(DDoS) attack?
49. Explain any two approaches for intrusion detection.
50. Explain briefly what backdoors are and how do they differ from Trojan horses?
51. Define intrusion detection and explain 3 types of detection mechanisms, in detail.
52. Explain what is the difference between encryption and decryption technique?
53. With an aid of a diagram draw a block diagram showing plain text, cipher text, encryption
and decryption
54. Define intrusion detection and the different types of detection mechanisms, in detail.
55. What are the function areas of IP security and give the application of IP security?
56. How could Alice surf the web without her activity being logged by her ISP?
57. In what ways is the encryption scheme known as DES considered weak
58. Explain what is meant by a digital signature and describe how it is generated.
59. List out the attacks related to Digital Signature
60. Explain data confidentiality, data authentication and data integrity.
61. List 2 types of security attacks
62. Employees are increasingly connecting to company networks remotely via mobile devices
such as laptops, tablets and smartphones. Remote access needs to satisfy five essential
requirements to be efficient and secure. Identify and briefly explain each of these FIVE (5)
requirements.
63. In using the SSL protocol (i.e., https) to contact an e-commerce Website, such as
[Link] what security properties does the SSL protocol typically
guarantee?
64. Describe three fundamentally different conceptual approaches that can be used for user
authentication.
65. With the aid of a diagram, explain the SYN flood attack.
66. Explain data confidentiality, data authentication and data integrity.
67. Outline the strengths and weakness of symmetric key systems.
68. Outline the strengths and weakness of asymmetric key algorithms.
69. Describe the key steps for generating the public/private key pair in a Public Key
Infrastructure environment.
70. With an aid of a diagram, explain a model for network security?
71. Define intrusion detection and explain 3 types of detection mechanisms, in detail.
72. Explain the types of Host based intrusion detection.
73. List any two IDS software available.
74. It’s a cruel irony in information security that many of the features that make using
computers easier or more efficient and the tools used to protect and secure the network can
also be used to exploit and compromise the same computers and networks.
(i) Given the above case, what is meant by the term “packet sniffing”?
ii) Provide an example of a countermeasure that can be used to help stop it.