B.Sc. (Information Technology) Sem VI March 2025 Information Security Question Paper - Mumbai University | munotes

Questions asked in this paper

SECTION I - 1. (Attempt any three of the following) 15 Marks

1. a. Describe any five counter measures to minimize the successful attack.
   Read the model answer
2. b. Explain the analogy of Onion Model and Lollipop Model.
   Read the model answer
3. c. What is the Concept of Man in the Middle Attack? Explain with suitable examples.
   Read the model answer
4. d. Discuss the significance of 3D`s of Security.
   Read the model answer
5. e. Explain the following: e-mail worms, Trojans.
   Read the model answer
6. f. How to Build a Security Program? Brief the components of it.
   Read the model answer

SECTION II - 2. (Attempt any three of the following) 15 Marks

1. a. Identify the key steps in the authentication process of Smart Card implementation and outline their role in secure access.
   Read the model answer
2. b. Summarize the concept of biometric authentication and discuss its applications in modern security systems.
   Read the model answer
3. c. Compare Symmetric key cryptography and asymmetric key cryptography.
   Read the model answer
4. d. What are the possible Availability risks in security? Explain.
   Read the model answer
5. e. What is the concept of zoning in the storage network? Explain.
   Read the model answer
6. f. Describe the concept of one-time password.
   Read the model answer

SECTION III - 3. (Attempt any three of the following) 15 Marks

1. a. Write a short note on Centralizing Account Management (AAA).
   Read the model answer
2. b. Explain the types of ICMP messages.
   Read the model answer
3. c. What are the features of Firewall? Explain.
   Read the model answer
4. d. Explain the following internal security practices: 1) Intranets 2) Extranets
   Read the model answer
5. e. Define network hardening and outline the key steps required to strengthen network security.
   Read the model answer
6. f. Explain the concept of Bluetooth IPS.
   Read the model answer

SECTION IV - 4. (Attempt any three of the following) 15 Marks

1. a. Write a short note on ACL.
   Read the model answer
2. b. Explain the following: First Generation IDS, Second Generation IDS
   Read the model answer
3. c. Describe the components of VoIP.
   Read the model answer
4. d. What are the vulnerabilities or problems of Operating system support protocol? Explain.
   Read the model answer
5. e. Explain the concept of Network Intrusion Detection Systems (NIDS) and describe how they function in threat detection.
   Read the model answer
6. f. Identify different types of network protocol attacks and explain it.
   Read the model answer

SECTION V - 5. (Attempt any three of the following) 15 Marks

1. a. Describe the concept of the Secure Development Life Cycle (SDLC) and summarize its importance in secure software development.
   Read the model answer
2. b. List different types of cloud services and explain their functions in cloud computing.
   Read the model answer
3. c. Define the terms "Fraud" and "Hijacking" and explain their significance in the context of information security.
   Read the model answer
4. d. Which are the areas of any physical vulnerability assessment? Explain
   Read the model answer
5. e. Explain the general types of attacks in web applications.
   Read the model answer
6. f. Explain the classification of corporate physical assets.
   Read the model answer

Read from the scan above, so a character or two may differ. The scan is the original.