CY-501 OS Internals for Security Support - Jun 2025 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 7 Marks
   aWhat is the role of buffer pool and buffer header? Explain in detail.
   How to answer

   • Definition of buffer cache / buffer pool in Unix kernel
   • Structure and fields of buffer header (buf header)
   • Role in disk I/O caching and synchronization
   • Free list / hash queue management and cache hit/miss flow
2. 7 Marks
   bExplain the concept of INODES in UNIX like file system.
   How to answer

   • Definition of inode as file metadata structure
   • Fields stored in inode: mode, owner, size, pointers
   • Direct/indirect block addressing
   • Role in Unix file access and security
3. 7 Marks
   aWhat is the importance of CHMOD and CHOWN in operating system?
   How to answer

   • Purpose of chmod: change file permission bits
   • Purpose of chown: change owner/group
   • Syntax and modes with security relevance
   • Importance for least privilege and access control
4. 7 Marks
   bExplain the mechanism of process creation in Unix operating system.
   How to answer

   • fork() to create child process copy
   • exec() to overlay new image, wait/exit handling
   • Process table, PID, parent-child relationship
   • Diagram of state transition during creation
5. 7 Marks
   aWhat are the effects of privilege escalation vulnerabilities?
   How to answer

   • Definition of vertical vs horizontal privilege escalation
   • Effects: unauthorized access, data theft, persistence
   • System compromise and security bypass examples
   • Impact on confidentiality, integrity, availability
6. 7 Marks
   bExplain the disadvantages of concurrency in operating system.
   How to answer

   • Meaning of concurrency and shared resources
   • Race condition, deadlock, starvation issues
   • Synchronization overhead and complexity
   • Security risks from concurrent access
7. 7 Marks
   aHow Operating system protects our data? Explain the process.
   How to answer

   • Authentication, authorization and access control
   • Encryption, backup and auditing mechanisms
   • Memory protection and user/kernel mode separation
   • Malware protection and update process
8. 7 Marks
   bWhat are the different virtualization techniques used for the security implementation?
   How to answer

   • Need for virtualization in isolation and security
   • Types: hardware, OS-level, para, full virtualization
   • Sandboxing and VM-based intrusion containment
   • Examples of secure implementation
9. 7 Marks
   aDefine the following terms: -Virus, Worms, Root Kit.
   How to answer

   • Virus: definition, host-dependent replication
   • Worms: self-propagating network malware
   • Rootkit: stealth privilege hiding toolkit
   • Differences in propagation and detection
10. 7 Marks
    bDefine Honeypot. Explain the procedure through which honeypot can be used for the protection against cyber-attacks.
    How to answer

    • Definition and types of honeypot
    • Deployment and monitoring procedure
    • How attackers are lured and logged
    • Use for early warning and attack analysis
11. 7 Marks
    aWhat are the different methods through which we can protect our data form ransomed attacks?
    How to answer

    • Ransomware behavior: encryption and extortion
    • Backup, patching and access control measures
    • Antivirus, email filtering and awareness
    • Incident response and recovery steps
12. 7 Marks
    bWhat does mobile phone operating system contain that or may be vulnerable to different attacks?
    How to answer

    • Mobile OS components: kernel, middleware, apps
    • Common vulnerable surfaces: apps, permissions, network
    • Malware, phishing and OS exploit examples
    • Mitigation via updates and permission model
13. 7 Marks
    aExplain the following terms: Secure co-processors, Secure wallet
    How to answer

    • Secure co-processor: dedicated crypto hardware
    • Functions: key storage, attestation, isolation
    • Secure wallet: protected credential storage
    • Use in mobile and payment security
14. 7 Marks
    bDefine Socket and its types.
    How to answer

    • Definition of socket as communication endpoint
    • Types: stream, datagram, raw sockets
    • TCP vs UDP usage examples
    • Socket address structure
15. 7 Marks
    aExplain the architecture of Windows operating system in detail.
    How to answer

    • Layered architecture: HAL, kernel, executive
    • User mode vs kernel mode components
    • Key subsystems: memory, process, I/O manager
    • Diagram of Windows OS architecture
16. 7 Marks
    bWhat is the use of Winsock? What are the different types of Winsock function?
    How to answer

    • Winsock as Windows network API
    • Use for TCP/IP application communication
    • Categories: blocking, database, byte-order functions
    • Examples: socket(), bind(), connect(), send(), recv()