CY-402 Fundamental of Cyber Security - Jun 2024 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 7 Marks
   aDefine Cyber-crime. What are the challenges of the Cyber Crimes.
   How to answer

   • Definition of cyber-crime as crime involving computer/network as target/tool
   • Categories: against person, property, government
   • Challenges: anonymity, jurisdiction, rapid technology change, evidence volatility
   • Challenges: lack of awareness, encryption, cross-border enforcement
2. 7 Marks
   bWrite short notes on the E-mail Spoofing and Spamming.
   How to answer

   • Define E-mail spoofing with forged headers example
   • Purpose and risks of spoofing: phishing, fraud
   • Define spamming: bulk unsolicited mail
   • Impacts and countermeasures for both
3. 7 Marks
   aExplain in detail about the Salami Technique.
   How to answer

   • Definition of Salami Technique as small-slice fraud
   • How it works: rounding off, penny shaving in financial transactions
   • Example in banking/payroll systems
   • Detection and prevention measures
4. 7 Marks
   bCompare and contrast hackers and insurgents.
   How to answer

   • Define hackers: types, motives, skills
   • Define insurgents in cyber context
   • Comparison on motive, organization, targets
   • Contrast on methods and impact
5. 7 Marks
   aWhat is meant by software piracy? What are the major factors contributing to its persistence?
   How to answer

   • Define software piracy and forms: copying, counterfeiting, softlifting
   • Economic and legal meaning
   • Factors: high cost, easy copying, weak enforcement
   • Factors: lack of awareness, internet availability
6. 7 Marks
   bWhat are the most prevalent tactics and techniques utilized by cybercriminals in perpetrating online fraud, and how can individuals and organizations effectively safeguard themselves against such threats?
   How to answer

   • Common tactics: phishing, identity theft, card fraud, social engineering
   • Techniques: malware, fake websites, BEC
   • Safeguards for individuals: awareness, MFA, verification
   • Safeguards for organizations: firewalls, training, incident response
7. 7 Marks
   aWhat are the major elements of the Cyber Crime and IT Act 2000?
   How to answer

   • Objective and scope of IT Act 2000
   • Major elements: digital signatures, e-governance, offences
   • Authorities: Controller, Cyber Appellate Tribunal
   • Amendments and coverage of cyber crimes
8. 7 Marks
   bDiscuss about the monetary penalties applied for the different types of Cyber Crimes.
   How to answer

   • Penalty provisions under IT Act for hacking, damage
   • Compensation for unauthorized access, data theft
   • Fines and imprisonment for identity theft, obscenity
   • Examples of sections 43, 66, 66C, 66D
9. 7 Marks
   aDifferentiate Defamation and E-mail Abuse.
   How to answer

   • Define defamation: libel/slander including online
   • Define E-mail abuse: spam, harassment, spoofing
   • Differences in nature, medium, legal remedy
   • Examples of each
10. 7 Marks
    bHow do management strategies address the unique challenges posed by electronic records in the investigation and prosecution of Cyber Crimes.
    How to answer

    • Challenges of electronic records: volatility, volume, authenticity
    • Management strategies: preservation, chain of custody
    • Forensic tools, access controls, documentation
    • Role in successful investigation and prosecution
11. 7 Marks
    aWrite short notes on the probative value of e-signatures.
    How to answer

    • Define e-signatures under IT Act
    • Probative value: authenticity, integrity, non-repudiation
    • Legal presumption and certifying authority role
    • Conditions for admissibility
12. 7 Marks
    bExplain in briefly about the status of the electronic records as evidence.
    How to answer

    • Electronic records as evidence under IT Act and Evidence Act
    • Section 65B conditions for admissibility
    • Status equal to paper records if certified
    • Need for integrity and certificate
13. 7 Marks
    aHow do proxy servers and anonymizers function to enhance online privacy and security and what are the distinguishing features between the two in terms of their operation and effectiveness in safeguarding users' identities and data?
    How to answer

    • Working of proxy servers: intermediary, IP masking, caching
    • Working of anonymizers: stripping identifiers, encryption
    • Comparison of operation level and anonymity degree
    • Effectiveness and limitations for privacy/security
14. 7 Marks
    bWhat are the primary differences between keyloggers and spyware in terms of functionality, potential impact on computer systems?
    How to answer

    • Define keyloggers: capture keystrokes
    • Define spyware: broad monitoring, data theft
    • Differences in functionality and scope
    • Impact on system performance, privacy, security
15. 14 Marks
    Write short notes on any two of the following.

    1. i)Internet Time Theft
    2. ii)Web Jacking
    3. iii)Trends of Cyber Crime
    4. iv)Phishing
    How to answer

    • Select any two topics from four options
    • Define each with mechanism/example
    • Explain impact and legal/technical aspects
    • Mention prevention measures