CY-501 OS Internals for Security Support - Dec 2024 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 7 Marks
   aWhat is the role of Buffer Cache and Buffer Header? Explain in detail.
   How to answer

   • Definition of buffer cache as disk block caching area in kernel
   • Structure and fields of buffer header (device, block no, status, pointers)
   • Role in minimizing disk I/O and improving performance
   • Free list / hash queue management and read/write scenarios
2. 7 Marks
   bExplain the different components and features of UNIX operating system in detail.
   How to answer

   • Overview of UNIX architecture: kernel and shell
   • Main components: file system, process management, memory, I/O
   • Key features: multiuser, multitasking, portability, security
   • Hierarchical file system and shell utilities
3. 7 Marks
   aExplain the role of super block in UNIX operating system.
   How to answer

   • Definition and location of super block in file system
   • Contents: file system size, free blocks/inodes, magic number
   • Role in mounting, allocation and consistency
   • In-memory vs on-disk copy and sync
4. 7 Marks
   bExplain the process life cycle with different components of process life cycle.
   How to answer

   • Definition of process and process states
   • Life cycle stages: new, ready, running, waiting, terminated
   • Components: PCB, context, transitions and scheduler role
   • Diagram of state transitions
5. 7 Marks
   aExplain the different requirements for the execution of concurrent processes?
   How to answer

   • Concept of concurrency and race conditions
   • Requirements: mutual exclusion, synchronization, deadlock handling
   • Communication and resource sharing needs
   • Atomicity, ordering and fairness
6. 7 Marks
   bWhat is Semaphore? What are the different types of Semaphores? Explain each type in detail.
   How to answer

   • Definition of semaphore and wait/signal operations
   • Types: binary, counting, mutex
   • Detailed working of each type with example
   • Use in mutual exclusion and synchronization
7. 7 Marks
   aExplain the process of authentication and access control for system access.
   How to answer

   • Concept of authentication: passwords, biometrics, MFA
   • Access control models: DAC, MAC, RBAC
   • Steps for system access verification and authorization
   • Security relevance
8. 7 Marks
   bDefine the following terms: Malware, Trojans, Root Kit.
   How to answer

   • Definition of Malware as malicious software
   • Trojans: disguised malicious programs and effects
   • Rootkit: stealth privileged access and hiding techniques
   • Examples and countermeasures
9. 7 Marks
   aExplain the common vulnerabilities and exposures for security.
   How to answer

   • Meaning of CVE and vulnerability databases
   • Common types: buffer overflow, injection, misconfiguration
   • Exposure impact on confidentiality/integrity
   • Mitigation practices
10. 7 Marks
    bWhat are the different methods for IPC in operating system? Explain any one method in detail.
    How to answer

    • List IPC methods: pipes, message queues, shared memory, sockets
    • Working principle of each method
    • Detailed explanation of one method with example
    • Comparison of speed and synchronization
11. 7 Marks
    aExplain the different risks associated with Ransome attacks.
    How to answer

    • Definition of ransomware and attack flow
    • Risks: data loss, financial extortion, downtime
    • Propagation and double extortion risks
    • Backup and prevention measures
12. 7 Marks
    bWhat does mobile phone operating system contain that or may be vulnerable to different attacks?
    How to answer

    • Mobile OS attack surface: apps, permissions, network
    • Vulnerable components: kernel, app store, SMS/browser
    • Common attacks: malware, phishing, privilege escalation
    • Mitigation via updates and permissions
13. 7 Marks
    aWhat are the different levels of securities in Android operating system?
    How to answer

    • Android security architecture overview
    • Levels: kernel, HAL, app sandbox, permissions, SELinux
    • App signing, verified boot and encryption
    • Role of each layer in protection
14. 7 Marks
    bDefine the following: - Secure wallet, Secure co-processor.
    How to answer

    • Definition of secure wallet for keys/credentials
    • Purpose of secure co-processor / TEE
    • Isolation and cryptographic operations
    • Examples in mobile devices
15. 7 Marks
    aExplain socket. What are the different types of Sockets explain in detail.
    How to answer

    • Definition of socket as communication endpoint
    • Types: stream, datagram, raw sockets
    • TCP vs UDP usage and characteristics
    • Socket address structure
16. 7 Marks
    bWhat are the different Winsock function? What is the use of Datagram socket?
    How to answer

    • List Winsock functions: WSAStartup, socket, bind, listen, etc.
    • Purpose of each function in client-server flow
    • Definition and connectionless nature of datagram socket
    • Use cases: DNS, streaming, broadcasting