Dependability and Security MCQs

1.Does static analysis require running the program during its process?

Yes, it involves program executionNo, it does not require running the programOnly sometimes it runs the programIt depends on the programming languageStatic analysis is unrelated to program execution

2.Which method is included in the scope of Static Analysis techniques?

Formal methods verificationModel verificationAutomated code examinationAll of the above

3.Which statement about Model Checking is inaccurate?

Model checking is especially useful for validating concurrent systems.Model checking requires very little computational resources.The model checker systematically examines every possible execution path in the model.All of the above statements are incorrect.

4.Which security concept best describes the medical records of a patient currently or previously undergoing treatment?

5.What is a drawback of employing Formal methods?

They allow analysis of concurrent systems to identify race conditions that could cause deadlocks.Creating a mathematical specification demands thorough examination of the requirements.They involve specialized notations that domain experts often find difficult to comprehend.All of the above.

6.Identify the category of fault that corresponds to the static analysis check: "Variables declared but never utilized".

7.Identify the category of fault that corresponds to the following automated static analysis check: "Ignoring the return values of functions."

Errors related to memory handlingFaults involving data inconsistenciesMistakes associated with input and output operationsProblems arising from interface misuse

8.At which stage of Static Analysis can customized rules tailored to a particular program be verified?

Checking for common error patternsError detection based on user-specified rulesVerification using assertionsEvery method mentioned aboveNone of the above

9.Identify the category of fault that the automated static analysis check for "Unreachable code" belongs to.

10.Is static analysis commonly utilized in the creation of numerous safety and security-critical systems today?

YesNo

11.Identify the category of fault associated with the automated static analysis check labeled "Pointer Arithmetic."

Errors related to storage managementFaults involving data handlingIssues with input or output operationsProblems concerning system interfacesNone of the above

12.Is pretending to be a legitimate user considered a security threat?

13.What term describes situations or conditions that could lead to damage or loss?

14.What do we call a system resource that holds value and requires safeguarding?

AssetControl measureWeaknessNot applicable

15.What does Life Cycle Risk Assessment encompass?

Evaluating risks prior to system deploymentAssessing risks during the system development phaseBoth of the above stagesNeither of the above stages

16.Does security engineering focus solely on maintaining systems to defend against malicious attacks?

Yes, it only deals with system maintenance.No, it involves more than just maintenance.It primarily focuses on hardware security.It is limited to software updates.It only concerns user access controls.

17.In dependability engineering, which concept corresponds to implementing measures that prevent attacks from succeeding?

Fault avoidanceFault toleranceFault detectionFault recovery