CY-702 (A) RGPV B.Tech
Penetration Testing and Vulnerability Analysis (PTVA)
Previous year papers and the official syllabus are free to read, no account needed.
Previous Year Papers
3 papers, latest Dec 2025
Syllabus, notes and important questions for CY-702 (A)
Syllabus units
Topics as the official RGPV syllabus lists them.
Unit 1 Introduction to Penetration Testing 8 topics
- Legal and ethical considerations
- Types of penetration testing
- Penetration testing methodologies
- Information gathering and scanning
- Foot printing and reconnaissance techniques
- Network scanning and enumeration
- SINT (Open‑source intelligence) gathering
- Vulnerability scanning tools
Unit 2 Exploitation and Post‑Exploitation 8 topics
- Exploiting system and network vulnerabilities
- Privilege escalation techniques
- Post‑exploitation activities
- Maintaining access and pivoting
- Web application security
- Common web application vulnerabilities
- Web application penetration testing methodologies
- Web vulnerability scanners and tools
Unit 3 Wireless Network Security and Social Engineering 8 topics
- Wireless network security concepts
- Wi‑Fi vulnerabilities and attacks
- Wireless penetration testing techniques
- Securing wireless networks
- Introduction to social engineering
- Techniques and tactics of social engineering
- Physical security vulnerabilities and testing
- Mitigating social engineering and physical security risks
Unit 4 Cryptography and Secure Communications 8 topics
- Basics of cryptography
- Cryptographic algorithms and protocols
- Encryption, decryption, and key management
- Secure communication channels
- Documentation and reporting of findings
- Prioritizing and mitigating vulnerabilities
- Engaging stakeholders and communicating recommendations
- Post‑testing activities and continuous improvement
Unit 5 Advanced Topics in Penetration Testing 7 topics
- Mobile application security
- Cloud security and testing (IoT security)
- Red teaming and adversary simulation
- Review of real‑world penetration testing cases
- Practical hands‑on exercises
- Capture the Flag (CTF) competitions
- Final project and presentations
Exam insights
Counted from 3 past CY-702 (A) papers.
Marks asked per paper, by unit
-
Unit 1 Introduction to penetration testing, Information Gathering and Scanning 33 marks
-
Unit 2 Exploitation and Post-Exploitation, Web Application Security 19 marks
-
Unit 3 Wireless Network Security, Social Engineering and Physical Security 19 marks
-
Unit 4 Cryptography and Secure Communications, Reporting and Remediation 23 marks
-
Unit 5 Advanced topics, red teaming and practical exercises 14 marks
Average marks of the questions from each unit in one paper. You answer only some of them, so the total is more than the paper’s maximum.
Asked again and again
-
What is a vulnerability scanner / vulnerability scanning, its tools and techniques, and how it helps organizations assess their security posture?
Asked 3 times: 2025, 2024
-
Explain why reconnaissance / information gathering and footprinting is the first and crucial phase of ethical hacking / penetration testing, including its process and techniques.
Asked 2 times: 2025
-
Define red teaming and compare it with penetration testing.
Asked 2 times: 2025