(SEM IV) THEORY EXAMINATION 2021-22 COMPUTER SYSTEM SECURITY

SECTION A — Short Descriptive Answers

Section A asks very basic security concepts like aspects of security, need for security, DAC vs MAC, IPsec benefits, sniffing, spoofing, cryptography terms, and covert channels. Each answer needs a short paragraph clearly explaining the meaning, purpose, and context of the topic.

Extra sample questions:
Explain “payload” in cyber security in 4–5 lines.
Describe brute-force attack in a short paragraph.
Explain malware in simple words.

SECTION B — Medium-Length Descriptive Paragraph

Section B asks conceptual questions such as system attacks, IDS, XSS, SSL encryption, firewall types, and packet filtering working. These answers require one proper paragraph that explains how the concept works, why it is important, and, if needed, one example.

Extra sample questions:
Describe SQL injection in one descriptive paragraph.
Explain the working of honeypot in security.
Write a descriptive paragraph on authentication factors.

SECTION C — Long Description Paragraph

Section C includes long, detailed questions like control hijacking, buffer overflow, ACL, web server threats, exploit techniques, secure electronic transactions, DNS, and IDS working. Each answer must be written as a long, continuous paragraph explaining the full concept, steps, or mechanism.

Extra sample questions:
Explain ransomware attack in a detailed paragraph.
Describe how encryption protects data during transmission.
Explain VPN working with a descriptive flow.