CYBER SECURITY

Which phase comes first in ethical hacking?

1. Gaining access
2. Scanning
3. Reconnaissance
4. Maintaining access

Which cryptographic technique provides non-repudiation?

1. Encryption
2. Digital signature
3. Hashing
4. Firewall

Which technique captures packets for analysis?

1. Encryption
2. Firewalling
3. Hashing
4. Packet sniffing

Which is a major cause of security vulnerability?

1. Strong passwords
2. Weak authentication
3. Firewall
4. Encryption

Which malware hides attacker presence?

1. Rootkit
2. Virus
3. Worm
4. Trojan

Which is a major IoT security challenge?

1. Large storage
2. Weak security controls
3. Fast processors
4. Large memory

Which security mechanism verifies identity first?

1. Authorization
2. Authentication
3. Encryption
4. Firewall

OWASP is mainly concerned with

1. Hardware security
2. Network security
3. Web application security
4. Physical security

Which malware provides attacker remote control?

1. Adware
2. Spyware
3. Bot/Zombie
4. Antivirus

Hash functions are used to ensure

1. Confidentiality
2. Integrity
3. Availability
4. Authorization

You receive an email from an unknown sender claiming to be from your bank. The email says that your bank account will be blocked unless you verify your details immediately. The email asks you to click a link and enter your username, password, and ATM PIN. You notice that the email address is not the official bank email, but it looks similar. Answer the following:
(i) What type of cyber-attack is this
(ii) Explain how the attacker is trying to trick the user
(iii) What are the risks if the user enters their details
(iv) What should the user do after receiving such an email
(v) Suggest two preventive measures to avoid such attacks

Explain the CIA triad in cyber security. Describe Confidentiality, Integrity, and Availability with suitable examples.

Explain the process of encryption and decryption. Describe how encryption protects data during transmission with examples.

Explain symmetric key cryptography and asymmetric key cryptography. Compare their advantages and limitations with examples.

Define digital signature. Explain its working and importance in ensuring data authenticity and integrity.

What is the role of Pretty Good Privacy in securing email communication?

What is DDoS attack? Explain how to protect from DDoS attack.

Define packet sniffing. Explain how packet sniffing works and describe its role in network security analysis.

Define cyber security vulnerabilities. Explain different types of vulnerabilities such as software vulnerability, network vulnerability, and human vulnerability with examples.

Explain authentication, authorization and access control. Compare their roles in cyber security with examples.

Define malware. Explain different types of malware such as virus, worm, Trojan, ransomware, spyware, and rootkit with examples.

Explain different methods used to protect systems from malware attacks using antivirus, OS hardening, and security tools.

Define mobile computing. Explain different security threats in mobile devices such as malware, data theft, and unauthorized access. Describe methods to secure mobile devices.

What is Secure Socket Layer? Explain its significance in web security and provide a detailed description of the various SSL protocols, including the phases of the Handshake Protocol.

Steganography

Types of Firewalls

National Cyber Security Policy 2013 of India

Cyber Forensics Investigation Steps