OSI Model Security MCQ

Test your knowledge with important OSI Model Security MCQ and their applications. These MCQs are beneficial for competitive exams too. Explore 30 + more OSI Model Security MCQs at Bissoy

• Which of the following is an example of application layer vulnerability?
  ক

  Cryptographic flaws lead to the privacy issue

  খ

  Very complex application security controls

  গ

  MAC Address Spoofing

  ঘ

  Weak or non-existent authentication
• Which of the following is an example of presentation layer vulnerability?
  ক

  weak or non-existent mechanisms for authentication

  খ

  overloading of transport-layer mechanisms

  গ

  highly complex application security controls

  ঘ

  poor handling of unexpected input
• Which of the following is an example of session layer vulnerability?
  ক

  weak or non-existent mechanisms for authentication

  খ

  overloading of transport-layer mechanisms

  গ

  poor handling of unexpected input

  ঘ

  highly complex application security controls
• Which of the following is an example of Transport layer vulnerability?
  ক

  weak or non-existent mechanisms for authentication

  খ

  overloading of transport-layer mechanisms

  গ

  poor handling of unexpected input

  ঘ

  highly complex application security controls
• Which of the following is not a vulnerability of the application layer?
  ক

  Application design bugs may bypass security controls

  খ

  Inadequate security controls force “all-or-nothing” approach

  গ

  Logical bugs in programs may be by chance or on purpose be used for crashing programs

  ঘ

  Overloading of transport-layer mechanisms
• Which of the following is not an example of presentation layer issues?
  ক

  Poor handling of unexpected input can lead to the execution of arbitrary instructions

  খ

  Unintentional or ill-directed use of superficially supplied input

  গ

  Cryptographic flaws in the system may get exploited to evade privacy

  ঘ

  Weak or non-existent authentication mechanisms
• Transmission mechanisms can be subject to spoofing & attacks based on skilled modified packets.
  ক

  True

  খ

  False
• Failed sessions allow brute-force attacks on access credentials. This type of attacks are done in which layer of the OSI model?
  ক

  Physical layer

  খ

  Data-link Layer

  গ

  Session layer

  ঘ

  Presentation layer
• Which of the following is not session layer vulnerability?
  ক

  Mishandling of undefined, poorly defined

  খ

  Spoofing and hijacking of data based on failed authentication attempts

  গ

  Passing of session-credentials allowing intercept and unauthorized use

  ঘ

  Weak or non-existent authentication mechanisms
• Which of the following is not a transport layer vulnerability?
  ক

  Mishandling of undefined, poorly defined

  খ

  The Vulnerability that allows “fingerprinting” & other enumeration of host information

  গ

  Overloading of transport-layer mechanisms

  ঘ

  Unauthorized network access
• Which of the following is an example of network layer vulnerability?
  ক

  MAC Address Spoofing

  খ

  Physical Theft of Data

  গ

  Route spoofing

  ঘ

  Weak or non-existent authentication
• Which of the following is an example of data-link layer vulnerability?
  ক

  MAC Address Spoofing

  খ

  Physical Theft of Data

  গ

  Route spoofing

  ঘ

  Weak or non-existent authentication
• Which of the following is an example of physical layer vulnerability?
  ক

  MAC Address Spoofing

  খ

  Physical Theft of Data

  গ

  Route spoofing

  ঘ

  Weak or non-existent authentication
• Which of the following is not a vulnerability of the network layer?
  ক

  Route spoofing

  খ

  Identity & Resource ID Vulnerability

  গ

  IP Address Spoofing

  ঘ

  Weak or non-existent authentication
• ________________may be forced for flooding traffic to all VLAN ports allowing interception of data through any device that is connected to a VLAN.
  ক

  Switches

  খ

  Routers

  গ

  Hubs

  ঘ

  Repeaters
• ____________ is data-link layer vulnerability where stations are forced to make direct communication with another station by evading logical controls.
  ক

  VLAN attack

  খ

  VLAN Circumvention

  গ

  VLAN compromisation method

  ঘ

  Data-link evading
• Which of the following is not a vulnerability of the data-link layer?
  ক

  MAC Address Spoofing

  খ

  VLAN circumvention

  গ

  Switches may be forced for flooding traffic to all VLAN ports

  ঘ

  Overloading of transport-layer mechanisms
• Loss of power and unauthorized change in the functional unit of hardware comes under problems and issues of the physical layer.
  ক

  True

  খ

  False
• In __________________ layer, vulnerabilities are directly associated with physical access to networks and hardware.
  ক

  physical

  খ

  data-link

  গ

  network

  ঘ

  application
• Which of the following is not physical layer vulnerability?
  ক

  Physical theft of data & hardware

  খ

  Physical damage or destruction of data & hardware

  গ

  Unauthorized network access

  ঘ

  Keystroke & Other Input Logging
• The full form of OSI is OSI model is ______________
  ক

  Open Systems Interconnection

  খ

  Open Software Interconnection

  গ

  Open Systems Internet

  ঘ

  Open Software Internet
• The ____________ model is 7-layer architecture where each layer is having some specific functionality to perform.
  ক

  TCP/IP

  খ

  Cloud

  গ

  OSI

  ঘ

  OIS