Reference no: EM133985365
Questions
1. In OSI model, Data Link Layer (layer 2) uses frames. What is frame? What is the address used in frame called (in Ethernet network)?
2. In TCP/IP or OSI model, which layer handles reliable delivery and flow control?
3. What are the PDUs (protocol data unit) at the following 2 layers of OSI model: Transport, Network?
4. TCP three-way hand shake uses a few segments, what are these?
5. What is the Internet DMZ?
6. What is vulnerability?
7. CWE (Common Weakness Enumeration) is a community-developed list of weakness types on software and hardware. Based on 2020 CWE Top 25 most dangerous software weakness list on https://cwe.mitre.org/data/definitions/1350.html, pick one from the top 25 most dangerous weakness and give a concrete example of the vulnerability and how to exploit it.
8. CVSS (Common Vulnerability Scoring System) basically tries to produce a numerical score for a vulnerability. For the vulnerability CVE-2020-17519, what is CVSS 3.0 score and 2.0 scores? What is the description of the vulnerability?
9. CVE (Common Vulnerabilities and Exposures) list each identified vulnerabilities and give it a unique identification. Find a vulnerability identified on Jan. 12, 2021 and list its CVE number, description and CVSS score from National Vulnerability Database:
10. What is an ethical hacker?