Ethical Hacking — DU B.Sc. (Hons) Computer Science Previous Year Question Papers

4. Parts of a question should be attempted together. (e) What is password cracking? Name any two local password cracking tools. 3 (f) What is the relevance of domain / ICT Infrastructure to information security in threat and vulnerability management? (g) What is SET? How is it used in gaining access to an organization? 3 (h) Differentiate between Black box and White box penetration testing with an 3 (i) How Social media platforms are used to conduct targeted attacks. 3 () Define Bind and reverse payload why they are used. 3 Q2 (a) A mid-sized organization recently noticed unusual activity in its network. 6 Several employees reported that their systems were running slowly. Upon investigation, the IT team discovered that the systems were running outdated software, and sensitive company data appeared to have been accessed without authorization. An attacker had used a specific technique to take advantage of these weaknesses and gain unauthorized access to the network. 1) Identify and explain the type of cybersecurity issue faced by the organization. 2) Suggest any three measures the organization should implement to prevent such incidents in the future. (b) Explain five malicious codes that can harm the computer system. 5 (c) What is the use of cross-site scripting? How can it help users to access trusted 4 Explain its four distinct phases. (b) Differentiate between adversarial and non-adversarial threats. Explain any two 5 non-adversarial threat sources. (c) Write any five elements of vulnerability Management Guidelines? 5 Q4 (a) List four web discovery tools. How do they work in finding the vulnerability 5 of web discovery, explain through any one tool? (b) List the stages of penetration testing, and explain it in reference to any startup 5 (c) What are the capabilities of MEDUSA? Explain the following commands. 5 medusa -h target_ip -u username -P path _to_ password _dictionary -M authentication_service_to_attack Q5 (a) How does Metasploit act as a powerful exploit tool to ethical hackers? 5 (b) Write short notes on the following: 10 1. Three-Way handshaking 2. ifconfig command 4. Intrusion Prevention System 5. FISM Act Q6 (a) Explain any five major elements of information security. 5 (b) What is an SQL Injection attack? Explain with an example. 5 (c) A tester performs an Xmas tree scan on two systems: Linux operating system 5 and Windows operating system. The scan works effectively on Linux, but it fails on Windows. 1) Why does the scan work on Linux systems? 2) Why is it ineffective on Windows systems? Q7 (a) What is a malicious hacker? Explain any four sub-categories of malicious 5 hackers adapted from NIST. (b) What are Google directives? Enlist six Google directives that help ethical 4 (c) Draft a sample executive summary for a Risk assessment of information security for hospital management.