CY-402 Fundamental of Cyber Security - Jun 2025 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 7 Marks
   aWhat is cybercrime and how has the rise of the internet and mobile devices influenced its growth?
   How to answer

   • Define cybercrime and its categories
   • Explain role of internet proliferation
   • Explain role of mobile devices, apps and wireless access
   • Discuss resulting growth in scale, types and anonymity
2. 7 Marks
   bHow do differences in cyber laws and lack of international cooperation affect enforcement?
   How to answer

   • Explain jurisdictional differences in cyber laws
   • Explain lack of harmonization and safe havens
   • Discuss impact on investigation, extradition and prosecution
   • Suggest need for international cooperation treaties
3. 7 Marks
   aDefine Spamming. How does spamming affect individuals and organizations? Describe types of spam (email, SMS, social media).
   How to answer

   • Define spamming
   • Explain impact on individuals - privacy, fraud, productivity
   • Explain impact on organizations - bandwidth, reputation, cost
   • Describe types: email, SMS, social media spam
4. 7 Marks
   bDiscuss the implications of web jacking on individuals and organizations, and suggest counter measures to prevent such attacks.
   How to answer

   • Define web jacking / website hijacking
   • Discuss implications: data theft, financial loss, defamation, loss of trust
   • Differentiate impact on individuals vs organizations
   • Suggest countermeasures: SSL, patching, access control, monitoring
5. 7 Marks
   aExplain the concept of software piracy. Discuss its various forms, including softlifting, counterlifting and online piracy.
   How to answer

   • Define software piracy
   • Explain softlifting, counterfeiting / counterlifting
   • Explain online piracy / internet piracy
   • Discuss legal, economic and security impacts
6. 7 Marks
   bWhat is password sniffing? Describe the techniques used in sniffing attacks and how they can compromise user data.
   How to answer

   • Define password sniffing
   • Describe sniffing techniques: packet sniffers, ARP spoofing, promiscuous mode
   • Explain how credentials are captured on unencrypted networks
   • Explain compromise of user data and mitigation
7. 7 Marks
   aHow does the Information Technology Act, 2000 address various cyber crimes in India?
   How to answer

   • Outline objectives and scope of IT Act, 2000
   • Discuss key provisions for hacking, data theft, fraud, obscenity
   • Mention amendments and penalties
   • Assess effectiveness in addressing cyber crimes
8. 7 Marks
   bWho are teenage web vandals, what motivates them and what psychological and social factors contribute to their behavior?
   How to answer

   • Define teenage web vandals
   • Explain motivations: thrill, peer recognition, curiosity
   • Discuss psychological factors: risk-taking, anonymity
   • Discuss social factors: peer pressure, lack of awareness
9. 7 Marks
   aDiscuss the monetary penalties and adjudication mechanisms provided under the IT Act, 2000 for cyber offences.
   How to answer

   • Outline penalty clauses under IT Act, 2000
   • Explain compensation and monetary penalties for damage to computer systems
   • Explain adjudication mechanism: adjudicating officers, CAT
   • Give examples of offences and penalty amounts
10. 7 Marks
    bDiscuss the evolution of India's legal framework for evidence, comparing the Indian Evidence Act, 1872 and the Information Technology Act, 2000.
    How to answer

    • Outline Indian Evidence Act, 1872 provisions
    • Explain IT Act recognition of electronic records
    • Compare admissibility of electronic evidence
    • Trace evolution toward digital evidence framework
11. 7 Marks
    aHow do courts assess whether electronic evidence can be accepted and relied upon in criminal and civil cases?
    How to answer

    • Explain admissibility criteria: authenticity, integrity, reliability
    • Discuss Section 65B certificate and secondary evidence
    • Distinguish criminal vs civil standards
    • Cite judicial approach to reliance on electronic evidence
12. 7 Marks
    bExplain electronic agreements under Indian law, their validation, and provisions in the IT Act and Indian Contract Act ensuring enforceability.
    How to answer

    • Define electronic agreements / e-contracts
    • Explain validation requirements: consent, signature
    • Discuss IT Act provisions on e-signatures and attribution
    • Discuss Indian Contract Act enforceability
13. 7 Marks
    aWhat are DoS and DDoS attacks? Explain their mechanism, objectives and impact on online services and infrastructure.
    How to answer

    • Define DoS and DDoS attacks
    • Explain mechanism: flooding, botnets, amplification
    • Explain objectives: service disruption, extortion
    • Discuss impact on online services and infrastructure
14. 7 Marks
    bDiscuss types of attacks on wireless networks, including Wi-Fi sniffing, rogue access points and man-in-the-middle attacks.
    How to answer

    • Explain Wi-Fi sniffing / eavesdropping
    • Explain rogue access points / evil twin
    • Explain man-in-the-middle attacks on wireless
    • Mention countermeasures: WPA3, VPN, authentication
15. 14 Marks
    Write a short note on any Two:

    1. i)The E-mail Spoofing in cyber crime
    2. ii)Web Servers Hacking
    3. iii)Strategies to Tackle Cyber Crime
    4. iv)Proxy Servers and Anonymizers
    How to answer

    • Select any two topics from i-iv
    • Define key terms and mechanism for each
    • Explain role in cyber crime / defence with examples
    • Conclude with prevention or significance