No. of Printed Pages: 5 IOSEI-0441
ADVANCED CERTIFICATE IN INFORMATION
SECURITY (ACISE)
Term-End Examination

00286
June, 2016
OSEI-044 SERVER SECURITY
Time 2 lwurs Maximum Mnrks 50

Note:



Section-A: Answer all the objective questi01ls.
Section-B Answer all the very short answer type questions.
Section-C Answer 2 out of 3 short answer hjpe questions.
Section-D Answer 2 out of3 long questions.
SECTION (Attempt all the questions.) 1x10=10

1. Which of the following would be a good starting point for troubleshooting if your router is not translating?

Reboot

Call Company

Check for correct configuration

Run "debug all" command

2. Which of the following is considered to be the destination host before translation

Inside local

Outside local

Inside global

Outside global

3. Which of the following is/are to be considered the method/s of NAT?

Static

IPNAT Pool

Dynamic

NAT double translation

Overload

and

only

and

All of the above

4. What protocol does PPP use to identify the Network Layer Protocol?

NCP

ISDN

HDLC

LCP

5. Which protocol does DHCP use at the transport layer?

IP

TCP

UPP

ARP

6. Where is a hub specified in OSI model?

Session layer

Physical layer

Data link layer

Application layer

7. Which class of IP addresses has the most host addresses available by default?

A

B

C

A and B

8. What is a Stub Network?

Network with more than one exit point.

Network with more than one exit and entry point.

Network with only one entry and no exit point.

Network that has only one entry and exit point.

9. Which protocol does Ping use?

TCP

ARP

ICMP

Boot P

10. What layer in TCP/IP stack is equivalent to the Transport Layer of the OSI model

Application

Host to Host

Internet

Network Access

SECTION

(Attempt all the very short answer type questions.)

11. What is email spoofing?

12. Write short note on repudiation.

13. Why we need server security?

14. What are the important steps to be taken to secure the server from the outside attack

15. What is Web Server and Application Security?

SECTION

(Attempt 2 out of 3 short answer type questions.) 5x2=10

16. Describe the various security services provided by the Web Server.

17. Discuss the issues raise in the Open Source Linux Server.

18. What is software standard specification and code comment requirement?

SECTION

(Attempt 2 out of 3 long questions.) 10x2=20

19. What is Cross-Site scripting attack? What is potential impact on Server and Clients

20. What are the different steps taken in wireless security

21. Discuss essentials of patch management policy and practices on the server. Also discuss software patches.