CEC 461 Information System Security Exam 2026

About this paper

CEC 461: First Semester Examination for CEC461, Information Systems Security, College of Technology, University of Buea, instructor Sone Ekonde (29 January 2026, 2 hours, 15.30-17.30). Question 1 covers firewall design goals, the operation of application-level and circuit-level gateways, matching firewall settings to security policies, explaining a three-rule packet filter rule set and how stateful filtering changes it, and a block diagram of a screened-subnet firewall. Question 2 covers the Biba integrity model applied to a scenario with Alice, Bob and Dan, honeypot design goals and DMZ placement, signature-based intrusion detection and its drawback, and the four modules of an IDS block diagram. Question 3 covers brute-forcing a 4-digit phone PIN via Anderson's formula, the three authentication factor categories, estimating DES password cracking time, deducing VPN packet structure from a network diagram, and defining CVE, vulnerability vs exploit, and zero-day attacks.