Dependability and Security MCQs Archives

21. Controls that are intended to ensure that attacks are unsuccessful is analogous to ______________ in dependability engineering?

A. Fault avoidance

B. Fault tolerance

C. Fault detection

D. Fault Recovery

✅ The correct answer is option A.
Explanation: In Fault avoidance the system is developed in such a way that human error is avoided and thus system faults are minimised.

22. Which of the following is incorrect with respect to Model Checking ?

A. Model checking is particularly valuable for verifying concurrent systems

B. Model checking is computationally very inexpensive

C. The model checker explores all possible paths through the model

D. All of the mentioned

✅ The correct answer is option B.
Explanation: Model checking is very expensive.It is only practical to use it in the verification of small to medium sized critical systems.

23. At which stage of risk analysis specification, the additional security requirements take account of the technologies used in building the system and system design and implementation decisions ?

A. Preliminary risk analysis

B. Life-cycle risk analysis

C. Operational risk analysis

D. All of the mentioned

✅ The correct answer is option B.
Explanation: This risk assessment takes place during the system development life cycle after design choices have been made..

24. Which of the following terms is a measure of the probability that the system will cause an accident ?

A. Risk

B. Hazard probability

C. Accident

D. Damage

✅ The correct answer is option A.
Explanation: The risk is assessed by considering the hazard probability, the hazard severity, and the probability that the hazard will lead to an accident.

25. A password checking system that disallows user passwords that are proper names or words that are normally included in a dictionary is an example of ________________ with respect to security systems?

A. risk

B. control

C. attack

D. asset

✅ The correct answer is option B.
Explanation: A control protective measure that reduces a system’s vulnerability.

26. A weakness in a computer-based system that may be exploited to cause loss or harm is known as ?

A. Vulnerability

B. Attack

C. Threat

D. Exposure

✅ The correct answer is option A.

27. Choose the fault class in which the following automated static analysis check would fall:”Variables declared but never used”?

A. Control Faults

B. Data Faults

C. Input/Output Faults

D. Interface faults

✅ The correct answer is option B.

28. Which of the following is not a Protection system ?

A. System to stop a train if it passes a red light

B. System to indicate not returning of the library book

C. System to shut down a reactor if temperature/pressure are too high

D. None of the mentioned

✅ The correct answer is option B.
Explanation: A Protection system is a specialized system that is associated with some other control system, which can take emergency action if a failure occurs.

29. Which of the following is a Strategy to achieve Software diversity ?

A. Different programming languages

B. Different design methods and tools

C. Explicit specification of different algorithms

D. All of the mentioned

✅ The correct answer is option D.
Explanation: Diversity means to provide the same functionality in different ways so that critical components of a dependable system will not fail in the same way.

30. POFOD stands for___________________?

A. Possibility of failure of data

B. Probability of failure of data

C. Possibility of failure on demand

D. Probability of failure on demand

✅ The correct answer is option D.