CY-601 Cyber Crime Investigation & Digital Forensic - Dec 2024 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 7 Marks
   aWhat are the classifications of cybercrimes? Discuss with relevant examples.
   How to answer

   • Define cybercrime and scope of classification
   • List major categories (e.g., hacking, phishing, malware, ransomware, identity theft)
   • Provide relevant real-world examples for each category
   • Discuss distinguishing characteristics
   • Explain legal and technical implications
2. 7 Marks
   bAnalyze the differences between cybercrimes in developed and developing nations.
   How to answer

   • Compare infrastructure and technology maturity levels
   • Discuss differences in cybersecurity investments and awareness
   • Analyze regulatory and legal framework disparities
   • Highlight economic impact differences
   • Explain organized vs. opportunistic cybercrime patterns
3. 7 Marks
   aExplain the concept of data diddling and salami attacks. How can they be detected and prevented?
   How to answer

   • Define data diddling with examples (e.g., financial records manipulation)
   • Explain salami attack method (small incremental theft)
   • Discuss detection mechanisms (auditing, anomaly detection, checksums)
   • Outline prevention strategies (access controls, encryption, monitoring)
   • Provide industry examples and case studies
4. 7 Marks
   bDescribe the challenges posed by e-commerce frauds in today's digital landscape.
   How to answer

   • Discuss volume and scale of e-commerce fraud
   • Explain payment gateway vulnerabilities
   • Describe identity theft and account takeover challenges
   • Analyze cross-border jurisdiction issues
   • Discuss technological arms race between fraudsters and security
5. 7 Marks
   aDiscuss the psychological theories related to cybercrimes. How do these theories help in understanding cyber criminals?
   How to answer

   • Present relevant psychological theories (e.g., RCT, SLT, strain theory)
   • Link theories to cyber criminal behavior patterns
   • Discuss motivation types (financial, ideological, personal)
   • Explain psychological profiles of different cyber criminal groups
   • Apply theories to investigation and prevention strategies
6. 7 Marks
   bEvaluate the psychological and economic impact of cybercrimes on individuals.
   How to answer

   • Analyze psychological effects (anxiety, depression, trust issues, PTSD)
   • Quantify financial impacts (direct losses, recovery costs, restitution)
   • Discuss long-term consequences on victims' lives
   • Examine societal ripple effects and economic slowdown
   • Present case studies and statistical evidence
7. 7 Marks
   aWhat is intrusion analysis? Discuss the methods for identifying intrusion patterns in logs.
   How to answer

   • Define intrusion analysis and its role in cybersecurity
   • Explain log analysis fundamentals (source, collection, storage)
   • Describe signature-based and anomaly-based detection methods
   • Discuss tools (SIEM, IDS/IPS, log parsers)
   • Present case examples of intrusion pattern identification
8. 7 Marks
   bExplain countermeasures to deny access to potential cyber threats.
   How to answer

   • Discuss multi-factor authentication and identity verification
   • Explain role-based access control (RBAC) principles
   • Describe firewall configurations and rules
   • Outline encryption and secure communication protocols
   • Present layered defense strategy (defense in depth)
9. 7 Marks
   aHighlight the recent trends in cybercrimes and their implications for cybersecurity frameworks.
   How to answer

   • Identify current cybercrime trends (ransomware, supply chain attacks, etc.)
   • Discuss technological drivers (remote work, cloud adoption, IoT)
   • Analyze implications for existing cybersecurity frameworks
   • Propose adaptations to security strategies
   • Present industry-specific threat landscapes
10. 7 Marks
    bDiscuss the role of cloud-based frauds in financial crimes.
    How to answer

    • Explain cloud infrastructure vulnerabilities in financial sector
    • Discuss account compromise and unauthorized access methods
    • Analyze money laundering through cloud services
    • Describe data exfiltration and fraud techniques
    • Propose regulatory and technical mitigations
11. 7 Marks
    aExplain the concept of cyber defamation and its legal implications.
    How to answer

    • Define cyber defamation in digital context
    • Distinguish from traditional defamation in online environment
    • Discuss proving defamatory statements online
    • Outline legal recourse and remedies available
    • Explain jurisdictional challenges and applicable laws
12. 7 Marks
    bDiscuss the techniques used in detecting malwares and protecting systems from them.
    How to answer

    • Explain signature-based malware detection methods
    • Discuss heuristic and behavioral analysis approaches
    • Describe sandboxing and dynamic analysis techniques
    • Outline system hardening and protective measures
    • Present integrated endpoint protection strategies
13. 7 Marks
    aWhat is criminal profiling? Discuss its relevance in solving cybercrime cases.
    How to answer

    • Define criminal profiling and its methodologies
    • Explain adaptation of profiling to cybercrime domain
    • Discuss identifying suspect characteristics from digital evidence
    • Present behavioral patterns of different cyber criminal types
    • Illustrate case studies where profiling aided investigations
14. 7 Marks
    bAnalyze the sociological impact of cybercrimes on governments and companies.
    How to answer

    • Analyze erosion of public trust in digital systems and institutions
    • Discuss governance and regulatory policy adaptations
    • Examine organizational restructuring due to security requirements
    • Discuss economic productivity losses and resource allocation
    • Present societal behavioral changes in response to cyber threats
15. 7 Marks
    aWhat are the key indicators of intrusion activity? Discuss the process of passively discovering such activities.
    How to answer

    • List key indicators (unusual traffic, failed logins, privilege escalation)
    • Explain network-based indicators (suspicious ports, protocols)
    • Describe host-based indicators (file modifications, process execution)
    • Discuss passive monitoring techniques without alerting attackers
    • Present tools and methods (IDS, SIEM, packet capture)
16. 7 Marks
    bExplain the role of fraud detection techniques in identifying cyber threats.
    How to answer

    • Explain relationship between fraud detection and threat identification
    • Discuss statistical and machine learning approaches
    • Describe real-time transaction and behavior monitoring
    • Present anomaly scoring and risk modeling
    • Illustrate integration with broader cybersecurity frameworks