BSc CS Sem 5 2022 2023 Nov 2023 INFORMATION NETWORK SECURITY Question Paper - Mumbai University | munotes

Questions asked in this paper

• 2) Figures to the right indicate marks

1. Q3 Illustrations, in-depth answers and diagrams will be appreciated
2. Q4 Mixing of sub-questions is not allowed
3. Q1 Attempt All(Each of 1 Marks) (15M)
   • (a) Multiple Choice Question
   • i) of the following is not an example of a substitution cipher?
   • ii) A deliberate attempt to evade security services is called
   • a) threat b) attack
   • c) masquerade d) repudiation
   • ii) | Which security protocol is used at the transport Layer?
   • a) b) asymmetric-key Which of the following is a means to access a computer program or entire computer system bypassing all security mechanisms?
   • a) Backdoor b) Masquerading
   • vi) Passive attacks do not include
   • a) modification of data stream b) obtaining the information that is being transmitted c) eavesdropping on transmission the possibility of replay attack in future
   • vii) Public - key encryption is also known as
   • ix) AES has different configurations
   • a) one b) three
   • c) four c) five
4. Q10 One commonly used public-key cryptography method is the algorithm
   • a) RSS b) RAS
   • (b) Fill in the blanks
   • i) ciphers hide the message by rearranging the letter order without altering the actual letters used is an alternative to encryption which hides the very existence of a message by some means
   • iv) DES is cipher that encrypts and decrypts a data block of bits
5. Q2 Attempt the following (Any THREE)(Each of 5Marks) (15M)
   • (a) What is the CIA triad? Explain in detail
   • (b) Explain symmetric cipher model. Discuss different techniques used in traditional ciphers
   • (c) Explain DES cipher in detail
   • (d) Explain ECB block cipher mode of operation with its advantages and limitations
   • (e) Explain the differences between symmetric and asymmetric cryptography
   • (f) Discuss different categories of security services as per X-800 recommendations
6. Q3 Attempt the following (Any THREE) (Each of 5Marks) (15M)
   • (a) Explain key generation process in Diffie-Hellman key exchange algorithm
   • (b) Discuss different approaches of distribution of public key in public key cryptography
   • (c) What is Message authentication? Discuss different approaches that can be used to
   • (d) Explain various characteristics of Hash function
   • (e) Explain SHA algorithm
   • (f) Explain basic digital signature model. What security requirements do you feel can be achieved in digital communication by using digital signature?
7. Q4 Attempt the following (Any THREE) (Each of 5Marks) (15M)
   • (a) Discuss any one protocol which is used to add security in email applications
   • (b) What is SSL? Discuss its protocol stack
   • (c) What is a honeypot? How does it facilitate intrusion detection?
   • (d) What do you understand about malware? Explain any two types of malicious program
   • (e) Discuss the significance and limitations of firewalls
   • (f) What is the SET protocol? What business requirement does it fulfil?
8. Q5 Attempt the following (Any THREE) (Each of 5Marks) (15M)
   • (a) What is asymmetric key cryptography? Discuss its various applications
   • (b) Explain rail fence cipher with proper example
   • (c) Briefly explain Man in middle attack
   • (d) What is kerberos? Explain its different components
   • (e) Explain the key elements of public key infrastructure
   • (f) Discuss IPSec protocol with its different modes of operation
   • (g) What do you understand about security attacks? Discuss different types of attacks
   • (h) Explain the process of encryption and decryption using caesar cipher for plaintext “attack at dawn”

Read from the scan above, so a character or two may differ. The scan is the original.