WorksheetsNetwork Security Scenario Questions
Total questions: 20
Worksheet time: 10mins
Scenario: A CHARUSAT web server suddenly becomes unresponsive. Logs show a huge number of SYN requests from multiple IP addresses, half-opening connections until resources are exhausted. What type of attack is this?
Phishing
SQL Injection
SYN Flood
Man-in-the-Middle
Scenario: A CHARUSAT web server suddenly becomes unresponsive. Logs show a huge number of SYN requests from multiple IP addresses, half-opening connections until resources are exhausted. Which layer of the OSI model is primarily targeted in this attack?
Application layer
Transport layer
Network layer
Physical layer
Scenario: A CHARUSAT web server suddenly becomes unresponsive. Logs show a huge number of SYN requests from multiple IP addresses, half-opening connections until resources are exhausted. Which security mechanism can help mitigate this attack?
Encryption
SYN cookies
Digital signatures
Access control lists
A CHARUSAT web server suddenly becomes unresponsive. Logs show a huge number of SYN requests from multiple IP addresses, half-opening connections until resources are exhausted. What security goal is being compromised here?
Confidentiality
Integrity
Availability
Authenticity
Scenario: A bank uses TCP for secure transaction processing. A client initiates a transaction with sequence number 5000, sends 1500 bytes of data, then sends FIN to close the connection. The bank uses port 443 for secure transactions. Which protocol typically uses this port?
HTTP
FTP
HTTPS
SSH
Scenario: A bank uses TCP for secure transaction processing. A client initiates a transaction with sequence number 5000, sends 1500 bytes of data, then sends FIN to close the connection. What will be the ACK number from the bank after receiving all 1500 bytes?
5000
6500
6501
1500
Scenario: A military unit uses the Hill cipher with a 2×2 matrix encryption. They use the encryption matrix [[3, 3], [2, 5]] mod 26. The message "ATTACK" (A=0, B=1, ... Z=25) needs encryption. What is the determinant of the encryption matrix?
9
15
21
27
Scenario: A military unit uses the Hill cipher with a 2×2 matrix encryption. They use the encryption matrix [[3, 3], [2, 5]] mod 26. The message "ATTACK" (A=0, B=1, ... Z=25) needs encryption. Is decryption possible with this matrix?
No, because determinant is 0 mod 26
No, because gcd(9,26) ≠ 1
Yes, because gcd(9,26) = 1
Yes, because matrix is square
Scenario: A military unit uses the Hill cipher with a 2×2 matrix encryption. They use the encryption matrix [[3, 3], [2, 5]] mod 26. The message "ATTACK" (A=0, B=1, ... Z=25) needs encryption. The first two letters "AT" (0,19) encrypt to:
(5, 17)
(19, 5)
(7, 21)
(15, 9)
Scenario: A military unit uses the Hill cipher with a 2×2 matrix encryption. They use the encryption matrix [[3, 3], [2, 5]] mod 26. The message "ATTACK" (A=0, B=1, ... Z=25) needs encryption. The multiplicative inverse of the determinant (9) modulo 26 is:
3
5
7
9
The finance department needs extra security. You configure a firewall to block all incoming traffic except on port 443. Which type of filtering is this?
(a)
To prevent internal attacks between departments, you implement VLANs. At which OSI layer do VLANs operate?
Network layer
Transport layer
Data link layer
Physical layer
A hospital’s patient database is encrypted, and only authorized medical staff can access it using their unique credentials. However, due to a hardware failure, the database server is temporarily unavailable for 2 hours. Which component of the CIA triad is most directly compromised?
Confidentiality
Integrity
Availability
All three
An employee in the finance department accidentally emails a sensitive salary spreadsheet to the entire company instead of to HR only. Which component of the CIA triad is primarily affected?
Confidentiality
Integrity
Availability
Non-repudiation
A hacker gains access to an online banking system and changes the account numbers in pending transactions to redirect funds to their own account. No data is destroyed or made unavailable, but data is altered. Which CIA property is most affected?
Confidentiality
Integrity
Availability
Authentication
A ransomware attack encrypts all files on a company's file server and demands payment for the decryption key. Employees cannot access their files. Which two CIA triad components are immediately impacted?
Confidentiality and Availability
Integrity and Availability
Confidentiality and Integrity
Integrity only
An online election voting system stores votes in a database with strong access controls (ensuring confidentiality) and maintains high uptime (availability). However, a flaw allows voters to submit multiple votes. Which CIA component is not properly enforced?
Confidentiality
Integrity
Availability
Authentication
An e-commerce website uses SSL/TLS to protect customer data during transmission. This technology mainly ensures:
Integrity and Availability
Confidentiality and Integrity
Confidentiality and Availability
Availability only
A DDoS attack floods a government tax-filing website with traffic, making it unreachable during the filing deadline. Which CIA property is targeted?
Confidentiality
Integrity
Availability
Authorization
1. A researcher publishes a scientific paper online, but someone alters the published findings on the website without authorization. The original data remains secure in the researcher’s private storage. Which CIA component of the published information is breached?
Confidentiality
Integrity
Availability
None
