CY-402 Fundamental of Cyber Security - Jun 2022 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 5 Marks
   aGive difference between spoofing and phishing.
   How to answer

   • Define spoofing with impersonation/masquerading focus
   • Define phishing with fraudulent lure for credentials focus
   • Compare on objective, technique, medium, target and example
   • Summarize key difference in table form
2. 5 Marks
   bExplain spamming with suitable example.
   How to answer

   • Define spamming / spam
   • Explain mechanism of bulk unsolicited messages
   • Give suitable example e.g., email spam
   • Mention impacts and countermeasures
3. 4 Marks
   cWhat is Salami attack explain with example?
   How to answer

   • Define Salami attack / salami slicing
   • Explain small unnoticed deductions accumulation
   • Give example e.g., rounding off bank transactions
   • Mention detection and prevention
4. 7 Marks
   aHow do you prevent network intrusions?
   How to answer

   • Define network intrusion
   • List prevention layers: firewall, IDS/IPS, patching, access control
   • Explain monitoring, segmentation and policies
   • Conclude with best practices
5. 7 Marks
   bWhat is password sniffing in cyber security?
   How to answer

   • Define password sniffing / packet sniffing for credentials
   • Explain how sniffers capture unencrypted traffic
   • Give tools / scenarios and risks
   • Mention prevention: encryption, VPN, HTTPS
6. 7 Marks
   aWhat are the characteristics of cyber criminals?
   How to answer

   • Define cyber criminal
   • List characteristics: motivation, skill, anonymity, persistence
   • Explain organized vs individual traits
   • Give examples of behaviours
7. 7 Marks
   bWhat is World Wide Web? Explain
   How to answer

   • Define World Wide Web
   • Explain URL, HTTP/HTTPS, browsers and hyperlinks
   • Differentiate from Internet
   • Mention working and uses
8. 7 Marks
   aDiscuss the impact of Digital signatures in ITA 2000.
   How to answer

   • Define digital signature under ITA 2000
   • Explain legal validity and authentication role
   • Discuss impact on e-commerce and e-governance
   • Mention Certifying Authorities and amendments
9. 7 Marks
   bWhat are the positive aspects of the ITA 2000? Explain.
   How to answer

   • Outline objectives of ITA 2000
   • List positive aspects: legal recognition, e-commerce boost, cyber crime definition
   • Explain each benefit briefly
   • Conclude with significance
10. 7 Marks
    aWrite a short note on Network Forensics.
    How to answer

    • Define network forensics
    • Explain capture, preservation and analysis of network traffic
    • Mention tools and techniques
    • State uses in incident response
11. 7 Marks
    bWhat is cyber defamation and harassment?
    How to answer

    • Define cyber defamation
    • Define harassment / cyberstalking
    • Explain mediums and legal provisions
    • Give examples and remedies
12. 7 Marks
    aWhat are some examples of password attack techniques?
    How to answer

    • Define password attacks
    • List techniques: brute force, dictionary, phishing, keylogging, credential stuffing
    • Explain each briefly with example
    • Mention countermeasures
13. 7 Marks
    bHow does viruses and worms works in cyber-attacks?
    How to answer

    • Define virus vs worm
    • Explain infection, replication and propagation in attacks
    • Describe payload effects and examples
    • Mention prevention
14. 7 Marks
    aWhat are the most common attacks on wireless networks?
    How to answer

    • List common wireless attacks: eavesdropping, rogue AP, evil twin, deauth, WPA cracking
    • Explain each attack mechanism briefly
    • Mention impacts on confidentiality/availability
    • Suggest mitigations
15. 7 Marks
    bWhat is spyware and key loggers?
    How to answer

    • Define spyware
    • Define keyloggers
    • Explain data theft and monitoring functions
    • Mention examples and removal/prevention
16. 14 Marks
    Explain the following terms according to IT Act 2000:

    1. i)Records as evidence
    2. ii)Proof of electronic agreements
    3. iii)Status of electronic
    4. iv)Software Piracy
    How to answer

    • Explain electronic records as evidence and admissibility
    • Explain proof of electronic agreements
    • Explain status of electronic records/signatures
    • Explain software piracy offence and penalty