CS-503-C Cyber Security - Nov 2023 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 7 Marks
   aWhat are the various modes or manner of committing cybercrime?
   How to answer

   • Define cybercrime and need for classification by mode/manner
   • List modes: hacking, cracking, malware, phishing, DoS, spoofing, cyber stalking, fraud, etc.
   • Brief explanation of each mode with example
   • Tools/methods used by criminals in each mode
2. 7 Marks
   bWhat is internet time theft in cybercrime? What is the $1^{st}$ cybercrime in India?
   How to answer

   • Define internet time theft - unauthorized use of paid internet hours
   • How it is committed and its impact
   • First cybercrime in India - details of the case
   • Relevance under IT Act
3. 14 Marks
   Where did the term Salami attack come from? Can a single salami attack take away a large sum of money from a single account? If yes explain the process.
   How to answer

   • Origin of term Salami - thin slices like salami sausage
   • Concept of salami slicing - small unnoticed deductions
   • Whether single attack can take large sum - accumulation from many accounts
   • Process example: rounding-off fraud in banking programs
4. 7 Marks
   aWhat are the different layers of cyber security?
   How to answer

   • Define cyber security layers concept - defence in depth
   • List layers: physical, network, application, data, identity, etc.
   • Role of each layer with example control
   • Need for layered approach
5. 7 Marks
   bWhat are the common cyber-attacks which can be used by Hackers to damage network?
   How to answer

   • Define network attack by hackers
   • List common attacks: DoS/DDoS, MITM, phishing, malware, SQL injection, etc.
   • Brief working of each attack on network
   • Damage caused to network availability/confidentiality
6. 7 Marks
   aWrite the differences between Session Hijacking and Spoofing?
   How to answer

   • Define session hijacking - takeover of active session
   • Define spoofing - impersonation by forged identity
   • Compare on basis: definition, objective, technique, phase
   • Examples of each
7. 7 Marks
   bExplain how to prevent session hijacking attacks from happening?
   How to answer

   • Causes of session hijacking - session token theft, XSS, sniffing
   • Preventive measures: encryption/HTTPS, secure cookies
   • Use of timeouts, regeneration of session IDs, MFA
   • Intrusion detection and user awareness
8. 7 Marks
   aWhat are the different activities under the jurisdiction of cybercrime laws?
   How to answer

   • Jurisdiction concept under cybercrime laws / IT Act
   • Activities covered: hacking, data theft, fraud, obscenity, etc.
   • Territorial and extra-territorial jurisdiction
   • Examples of offences under IT Act 2000
9. 7 Marks
   bWhat are the monetary penalties under IT Act 2000?
   How to answer

   • Monetary penalties provision under IT Act 2000
   • Sections for damage to computer, failure to furnish info, etc.
   • Compensation and penalty amounts
   • Adjudication process
10. 7 Marks
    aWill cybercrime in the coming years affect hackers' attacks aimed at technology devices of the Internet of things?
    How to answer

    • Growth of IoT devices and attack surface
    • Types of IoT-targeted attacks: botnets, Mirai, data breach
    • Why hackers target IoT - weak security, large scale
    • Future trend and impact assessment
11. 7 Marks
    bWhat is the Information Technology Act 2000 dealing with who issues the digital signature under the Information Technology Act 2000?
    How to answer

    • Provisions of IT Act 2000 on digital signature
    • Controller of Certifying Authorities and licensed CAs
    • Who issues digital signature certificates
    • Procedure for issuance
12. 7 Marks
    aWhat are the different types of evidences required for proving the electronic agreements and how it is protected?
    How to answer

    • Need for evidence to prove electronic agreements
    • Types: digital signatures, logs, emails, certificates
    • Legal requirements under Indian Evidence Act / IT Act
    • Protection measures: encryption, hashing, secure storage
13. 7 Marks
    bWhat are the various techniques for proofing evidence of digital record?
    How to answer

    • Concept of proofing digital record evidence
    • Techniques: hashing, digital signatures, timestamps
    • Chain of custody and forensic imaging
    • Certification under Section 65B
14. 7 Marks
    aWhat is the role of proxy servers and anonymizers in phishing?
    How to answer

    • Define proxy servers and anonymizers
    • How phishers use them to hide identity/location
    • Role in redirecting victims and relaying stolen data
    • Countermeasures
15. 7 Marks
    bWhat is the differences between Trojan horses and Backdoors?
    How to answer

    • Define Trojan horse - disguised malicious program
    • Define Backdoor - secret access method
    • Differences in purpose, propagation, functionality
    • Examples and detection