B.S.W.E. Bachelor of Software Engineering Computer Networks & Security 3

Question 1

What is the three-way handshake in TCP?

Accepted Answer

A three-step process (SYN, SYN-ACK, ACK) for establishing a TCP connection between client and server

Answer

The TCP three-way handshake establishes a connection: the client sends SYN, the server responds with SYN-ACK, and the client sends ACK to confirm.

Question 2

What does OAuth 2.0 provide in web security?

Accepted Answer

An authorization framework allowing third-party apps to access user resources without exposing credentials

Answer

OAuth 2.0 is an authorization framework that enables users to grant third-party applications limited access to their accounts on another service without sharing passwords.

Question 3

Which concept in network security refers to granting users only the minimum permissions necessary to perform their job?

Accepted Answer

Principle of Least Privilege

Answer

The Principle of Least Privilege restricts users, processes, and systems to only the access rights they need to perform their authorized tasks, limiting the damage from mistakes or attacks.

Question 4

What is a Man-in-the-Middle (MITM) attack?

Accepted Answer

An attacker who secretly intercepts and potentially alters communications between two parties

Answer

In a MITM attack, an adversary positions themselves between the communicating parties to eavesdrop on or alter the messages being exchanged.

Question 5

What is the function of an SSL/TLS certificate?

Accepted Answer

To authenticate the identity of a website and enable encrypted communication via public key infrastructure

Answer

An SSL/TLS certificate binds a public key to the identity of a website (verified by a Certificate Authority), enabling encrypted HTTPS connections and proving the site's authenticity.

B.S.W.E. Bachelor of Software Engineering Practice Test

B.S.W.E. Bachelor of Software Engineering Practice Test

B.S.W.E. Bachelor of Software Engineering Computer Networks & Security 3