IT-801 Information Security - May 2023 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 7 Marks
   aDescribe the critical characteristics of information. How are they used in computer security?
   How to answer

   • Define availability, accuracy, authenticity, confidentiality, integrity, utility, possession
   • Explain each critical characteristic briefly
   • Explain use in computer security - CIA triad and protection mechanisms
   • Give examples of threats if characteristics violated
2. 7 Marks
   bHow many keys are required for two people to communicate via cipher?
   How to answer

   • Distinguish symmetric vs asymmetric cipher key requirement
   • State 1 key for symmetric / 2 keys for asymmetric for two people
   • Explain key sharing / key pair concept
   • Give formula for n users if needed
3. 7 Marks
   aWhat is Steganography? How it differs from Cryptography?
   How to answer

   • Define steganography - hiding existence of message
   • Define cryptography - hiding content by encryption
   • Compare on goal, visibility, security principle, example
   • Give examples of each
4. 7 Marks
   bWhat is Euler's totient? Also explain the Factoring problem of RSA algorithm.
   How to answer

   • Define Euler's totient function phi(n)
   • Give formula and example
   • Explain factoring problem - factoring n=p*q
   • Explain relevance to RSA security and key recovery
5. 7 Marks
   aWhat do you mean by the term IP Security? Discuss its basics Components.
   How to answer

   • Define IP Security (IPsec)
   • Explain basics - network layer security, services
   • Discuss components - AH, ESP, IKE, SA
   • Explain transport vs tunnel mode
6. 7 Marks
   bWhat is Authentication? Explain different types of authentication systems.
   How to answer

   • Define authentication
   • Explain need for identity verification
   • Explain types - password, biometric, token, multi-factor
   • Compare strengths and examples
7. 7 Marks
   aWhat types of attacks are addressed by message authentication?
   How to answer

   • Define message authentication
   • List attacks - masquerade, content modification, sequence modification, timing modification
   • Explain disclosure and repudiation aspects
   • Explain how MAC / hash addresses them
8. 7 Marks
   bWhat is SQL Injection (SQLi) and how to prevent from it?
   How to answer

   • Define SQL Injection with example query
   • Explain causes - unsanitized input
   • Explain prevention - prepared statements, input validation, least privilege
   • Mention testing and WAF
9. 7 Marks
   aWhat is Firewall? How Does a Firewall work?
   How to answer

   • Define firewall as network security barrier
   • Explain packet filtering, stateful inspection, proxy
   • Explain rule base and allow/deny action
   • Give types - hardware, software, next-gen
10. 7 Marks
    bWhat is URL and URI? Explain the differences between URL and URI with an example.
    How to answer

    • Define URL and URI with syntax
    • Explain URI as superset, URL as locator, URN
    • Give example of each
    • Tabulate differences
11. 7 Marks
    aWhat is Hashing? What are the benefits of Hashing?
    How to answer

    • Define hashing and hash function properties
    • Explain one-way, fixed size, collision resistance
    • List benefits - integrity, password storage, indexing
    • Give examples MD5, SHA
12. 7 Marks
    bWhat are six components of public key infrastructure? Explain.
    How to answer

    • Define Public Key Infrastructure (PKI)
    • List six components - CA, RA, certificates, keys, repository, CRL
    • Explain role of each component
    • Explain trust chain workflow
13. 7 Marks
    aWhat is Cross Site Scripting (XSS) and how does it work?
    How to answer

    • Define Cross Site Scripting (XSS)
    • Explain types - stored, reflected, DOM-based
    • Explain attack workflow with malicious script injection
    • Mention prevention - input sanitization, CSP
14. 7 Marks
    bWhat is Virus and Worms? Explain different types of viruses.
    How to answer

    • Define virus vs worms - need host vs self-replicating
    • Explain propagation differences
    • Explain types of viruses - boot, file, macro, polymorphic etc.
    • Give examples and prevention
15. 14 Marks
    Write short notes on the following:

    1. a)IDS
    2. b)Encrypted tunnel
    3. c)Cookies
    4. d)HTTP
    How to answer

    • Define IDS with types and function
    • Define encrypted tunnel / VPN concept
    • Define cookies and HTTP with uses
    • Give security relevance for each