BSc IT Sem VI March 2025 March 2025 Information Security Question Paper - Mumbai University | munotes

Questions asked in this paper

1. Q1 Attempt any three of the following: 15 marks
   • a. any five counter measures to minimize the successful attack
   • b. the analogy of Onion Model and Lollipop Model
   • c. | What is the Concept of Man in the Middle Attack? Explain with suitable examples
   • d. Discuss the significance of of Security
   • e. Explain the following: e-mail worms, Trojans
   • f. | How to Build a Security Program? Brief the components of it
2. Q2 Attempt any three of the following: 15 marks
   • a. the key steps in the authentication process of Smart Card implementation and outline their role in secure access
   • b. Summarize the concept of biometric authentication and discuss its applications in
   • c. Compare Symmetric key cryptography and asymmetric key cryptography
   • d. What are the possible Availability risks in security? Explain
   • e. What is the concept of zoning in the storage network? Explain
   • f. Describe the concept of one-time password
3. Q3 Attempt any three of the following: 15 marks
   • a. Write a short note on Centralizing Account Management (AAA)
   • b. Explain the types of ICMP messages
   • c. What are the features of Firewall? Explain
   • d. Explain the following internal security practices:
   • e. Define network hardening and outline the key steps required to strengthen network
   • f. Explain the concept of Bluetooth IPS
4. Q4 Attempt any three of the following: 15 marks
   • a. Write a short note on ACL
   • b. the following: First Generation IDS, Second Generation IDS
   • c. Describe the components of VoIP
   • d. What are the vulnerabilities or problems of Operating system support protocol?
   • e. the concept of Network Intrusion Detection Systems (NIDS) and describe how they function in threat detection
   • f. different types of network protocol attacks and explain it
5. Q5 Attempt any three of the following: 15 marks
   • a. Describe the concept of the Secure Development Life Cycle (SDLC) and summarize its importance in secure software development
   • b. List different types of cloud services and explain their functions in cloud computing
   • c. the terms "Fraud" and "Hijacking" and explain their significance in the context of information security
   • d. Which are the areas of any physical vulnerability assessment? Explain
   • e. the general types of attacks in web applications
   • f. the classification of corporate physical assets

Read from the scan above, so a character or two may differ. The scan is the original.