dependability and security MCQs – Page 2

Practise focused dependability and security questions with marked answers for exam preparation and subject revision.

dependability and security Mcqs
21. Security engineering is only concerned with maintenance of systems such that they can resist malicious attacks ?
comments icon0

A. TRUE

B. False
22. Which of the following is a layer of protection for Security ?
comments icon0

A. Platform-level protection

B. Record-level protection

C. All of the mentioned

D. Application-level protection

23. Exception handling is a mechanism to provide some fault avoidance ?
comments icon0
A. False

B. TRUE

24. Choose the fault class in which the following automated static analysis check would fall:Pointer Arithmetic ?
comments icon0

A. Input/Output Faults

B. Interface faults

C. Data Faults

D. Storage management faults
25. A system resource that has a value and has to be protected is known as ________________________?
comments icon0

A. Vulnerability

B. None of the mentioned

C. Asset

D. Control

26. A chemical plant system may detect excessive pressure and open a relief valve to reduce these pressures before an explosion occurs. What kind of dependability and security issue the example states ?
comments icon0

A. Hazard detection

B. Damage limitation

C. Hazard detection and removal

D. Hazard avoidance

27. Which of the following examples does not involve dependability engineering ?
comments icon0

A. Telecommunications

B. Medical Systems

C. Library Management

D. Power Systems

28. POFOD stands for___________________?
comments icon0

A. Possibility of failure on demand

B. Probability of failure on demand

C. Possibility of failure of data

D. Probability of failure of data

29. Which of the following is a technique covered in Static Analysis ?
comments icon0
A. All of the mentioned

B. Formal verification

C. Model checking

D. Automated program analysis

30. Static analysis is now routinely used in the development of many safety and security critical systems?
comments icon0

A. FALSE

B. True
31. What is the term for development process organised such that faults in the system are detected and repaired before delivery to the customer ?
comments icon0

A. Fault tolerance

B. None of the mentioned

C. Fault Avoidance

D. Fault detection

32. To specify security requirements, one should identify the risks that are to be dealt with ?
comments icon0

A. TRUE

B. False
33. Circumstances that have potential to cause loss or harm is known as___________________?
comments icon0

A. Vulnerability

B. Threat

C. Attack

D. Control

34. What is a Range check ?
comments icon0

A. None of the mentioned

B. Use information about the input to check if it is reasonable rather than an extreme value

C. Check that the input falls within a known range

D. Check that the input does not exceed some maximum size e.g. 40 characters for a name

35. Which of the following is a Strategy to achieve Software diversity ?
comments icon0

A. Explicit specification of different algorithms

B. Different programming languages

C. All of the mentioned

D. Different design methods and tools

36. Controls that are intended to ensure that attacks are unsuccessful is analogous to ______________ in dependability engineering?
comments icon0

A. Fault tolerance

B. Fault avoidance

C. Fault Recovery

D. Fault detection

37. A password checking system that disallows user passwords that are proper names or words that are normally included in a dictionary is an example of ________________ with respect to security systems?
comments icon0

A. asset

B. control

C. attack

D. risk

38. Select the disadvantage of using Formal methods ___________________?
comments icon0
A. They require the use of specialised notations that cannot be understood by domain experts

B. Producing a mathematical specification requires a detailed analysis of the requirements

C. Concurrent systems can be analysed to discover race conditions that might lead to deadlock

D. All of the mentioned

39. Which of the following is incorrect with respect to Model Checking ?
comments icon0

A. Model checking is particularly valuable for verifying concurrent systems

B. The model checker explores all possible paths through the model

C. All of the mentioned

D. Model checking is computationally very inexpensive
40. What are security controls ?
comments icon0
A. All of the mentioned

B. Controls that are intended to detect and repel attacks

C. Controls that are intended to support recovery from problems

D. Controls that are intended to ensure that attacks are unsuccessful