COMMON TO ALL BRANCHES THEORY EXAMINATION (SEM-IV) 2016-17 CYBER SECURITY

Subject: Cyber Security (AUC002)

Exam Type: Theory
Semester: IV (4th Semester)
Time: 3 Hours
Maximum Marks: 100
Common to All Branches

Section A – Short Questions (10 × 2 = 20 Marks)

This section includes 10 short questions testing basic cyber security concepts, terminology, and definitions

Topics covered:

CIA Triad: Confidentiality, Integrity, and Availability

Threats to Information Systems: Malware, phishing, insider threats, etc.

System Development Life Cycle (SDLC): Phases of secure system development

Banking Terms: RTGS (Real-Time Gross Settlement) and NEFT (National Electronic Funds Transfer)

Cyber Threats: Virus, worm, and IP spoofing

Cyber Security vs. Computer Security: Key differences in scope and focus

Risk Management vs. Risk Assessment: Process and analysis distinction

Data Disposal: Secure deletion and destruction of data

IT Assets and Security: Importance and protection methods

Need for Cyber Laws in India: Legal framework for cybercrime prevention

Section B – Descriptive / Analytical Questions (5 × 10 = 50 Marks)

Detailed explanations of cybersecurity tools, practices, and systems

Key questions include:

Biometrics in Access Control: Types, selection criteria, and applications

Intrusion Detection Systems (IDS): Definition, working, and types (host-based, network-based)

Backup Security Measures: Types such as full, incremental, and differential backup

Fundamental Principles of Information Security: CIA triad and supporting mechanisms

CCTV and its Applications: Role in surveillance and security monitoring

Electronic Cash: Differences between cash and credit card transactions

Virtual Private Networks (VPNs): Authentication mechanisms and secure data tunneling

Short Notes:

(i) Database Security

(ii) Email Security

(iii) Internet Security

Section C – Long Analytical Questions (2 × 15 = 30 Marks)

These are essay-style questions covering encryption, security protocols, and governance systems

Electronic Data Interchange (EDI):

Definition and benefits                                          Role in improving e-Governance and business communication

Digital Signature:

Working, requirements, and validation                 Security services offered (authentication, non-repudiation, integrity)

Cryptography and Firewall:

Private Key vs. Public Key Cryptosystem               Concept and working of a Firewall in network protection

Major Topics Covered

Fundamentals of Cyber Security             Encryption & Cryptography

Intrusion Detection Systems                   VPN & Network Security

Biometrics & Access Control                  Digital Signatures & EDI

Risk Management & Cyber Laws           Data Backup & Disposal Security

Purpose of the Paper

This exam evaluates both theoretical knowledge and practical understanding of cybersecurity measures, data protection, and secure communication systems. It emphasizes real-world applications like biometric access, data backup, digital signatures, firewalls, and VPNs — making it relevant for students of all engineering branches.