(SEM IV) THEORY EXAMINATION 2024-25 CYBER SECURITY

This document contains the complete B.Tech (Semester IV) Theory Examination 2024–25 question paper for Cyber Security (BCC401). The paper spans three printed pages, carries 70 marks, and thoroughly assesses a student’s understanding of cyber threats, mobile security, cyber laws, digital forensics, attack techniques, and organizational cybersecurity practices.
 

Section A – Short Conceptual Questions (14 Marks)

Section A includes seven 2-mark questions designed to test foundational knowledge of cyber security. Key topics include:

Social engineering and its role in cybercrime

Security measures for mobile devices

Meaning and examples of anonymizers

Difference between cyber forensics and digital forensics

Objectives of the Digital Personal Data Protection Act 2023

Importance of registry settings in mobile devices

Meaning of intellectual property in cyber security

These questions verify a student’s understanding of key definitions, laws, and security fundamentals.
 

Section B – Analytical & Descriptive Questions (21 Marks)

Students must attempt any three out of five detailed questions. Topics include:

How cybercriminals plan attacks and what attack vectors they use

Components of a strong organizational security policy in the mobile computing era

Use of steganography in cybercrime and its difference from cryptography

Meaning and legal importance of Chain of Custody in digital forensics

Effectiveness of Indian Cyber Law in handling frauds and data breaches

This section tests deeper analytical abilities and understanding of real-world security practices.
 

Section C – Long Descriptive Questions (35 Marks)

Each question contains two subparts, and the student must attempt one part from each. This section covers advanced cyber security areas:

Q3 – Cybercrime Era & Botnets

Meaning of the “Cybercrime Era”, survival strategies for internet users

Definition of botnets and their role as the "fuel" of cybercrime

Q4 – Mobile & Wireless Security

Trends in the rise of mobile/wireless devices

Organizational measures for secure mobile device management within networks

Q5 – Web Attacks & Identity Theft

Working and impact of SQL Injection & Buffer Overflow attacks

Definition of identity theft, relation to phishing, and preventive measures

Q6 – Digital Forensics Life Cycle & Social Networks

Full explanation of the Digital Forensics Life Cycle with examples

Challenges social networking sites pose to computer forensics

Q7 – Cyber Laws & Security Policies

How copyright and patent laws protect intellectual property in IT

Need for information security policies and their role in strengthening cybersecurity

This section evaluates critical thinking, legal awareness, and technical depth.
 

Summary

The Cyber Security (BCC401) question paper comprehensively assesses student knowledge of:

Social engineering & cyber attack techniques

Mobile device security practices

Digital forensics & Chain of Custody

Cyber laws & data protection (DPDP Act 2023)

Botnets, SQL Injection, Buffer Overflow

Identity theft, phishing & preventive strategies

Organizational security policies

Copyright, patent laws & intellectual property protection

It serves as a complete academic resource for engineering students studying the foundations of cyber security in the digital age.