Cyber Security – Mid Term Examination
Date: 10 July 2023
Time: 4 - Hours
Name: _____________________
Marks: 100
Part 1: Conceptual
Marks 20
Q1.- What is vulnerability and enumerate common reasons behind existence of
vulnerabilities.
Q2. Explain difference between Common Vulnerability Scoring System (CVSS) and
Common Vulnerabilities and Exposures (CVE).
Q3.- Briefly explain the main theme in below diagram: -
Part 2: Lab
Marks: 80
Q1. Build your lab environment on VMware workstation with one target machine (Kali Linux)
and one Victim machine (Metasploitable Linux). Run Open VAS and Nikto vulnerability scans on
victim machine and generate test report.
Q2. Phishing is a form of social engineering where attackers deceive people into
revealing sensitive information or installing malware such as ransomware. Using
any appropriate tool, build a trap to incur damage to target system.