Mumbai University Solved Question Papers
March 2025
Previous Year Question Paper with Solution
BSc IT · Sem VI
March 2025 - Information Security Examination
munotes.in
Mumbai
BSc IT Sem VI March 2025 Information Security Question Paper with Solutions
Get access to whole semester resourcesSemester Pass
MU B.Sc. (Information Technology) student group
Free to join
First published on munotes.in on 4 November 2026.
Published by munotes.in, Mumbai.
Model answers written and edited by the munotes.in editorial desk.
Passages from this volume may be quoted, in print, online or by an AI system, with credit: name munotes.in and link to this volume's page. The volume may not be reproduced as a whole. Full terms at munotes.in/content-license.
munotes.in is an independent study resource for students of the University of Mumbai. It is not affiliated with the University of Mumbai, and is not endorsed by it.
The University does not publish an official answer key for this paper. The answers in this volume are model answers, written to show how a full-mark answer is built. They are a study aid, not an authority on what an examiner marked.
The question paper reproduced here is the paper as set by the University of Mumbai at the March 2025 - Information Security examination.
Contents
The questions below are the paper as the University of Mumbai set it at the March 2025 - Information Security examination, in the order it was set.
MarksPage
MarksPage
MarksPage
The Paper as Set
The questions in this volume are the questions asked at the March 2025 - Information Security examination, reproduced as the University of Mumbai set them, in the order it set them. Nothing has been reworded, added or left out. Only the answers are ours. See the original question paper.
Duration 2½ hours · Total marks 75 · 30 questions answered
How to use this volume
Solve the paper first, under exam conditions and against the clock. Then read the answers here and mark your own. Reading a solution before attempting the question feels productive and teaches very little, because recognising an answer is not the same as being able to write one.
SECTION I
1.
Attempt any three of the following · 15 Marks
a.Describe any five counter measures to minimize the successful attack.[5]
Answer
For full marks, cover: what a countermeasure is, five countermeasures each with what it does and the attack it blunts, and why they work best together.
What a countermeasure is
A countermeasure is any action, device or procedure that reduces a vulnerability or the harm an attack can do. No countermeasure stops every attack. The aim is to make a successful attack less likely, and to limit the damage when one gets through.
Five countermeasures
1. Defense in depth (layered security). Place several different controls one behind another: a firewall, then host protection, then access control on the data. RFC 4949 explains the idea: if one mechanism is defeated, another still protects. Blunts: an attacker who gets past the perimeter meets the next layer.
2. Least privilege and strong access control. Give each user and program only the rights its job needs, and no more. Review accounts and remove access when people change roles or leave. Blunts: a stolen account or a malicious insider can reach only a small part of the system.
3. Patching and secure configuration. Apply vendor fixes quickly, remove unused services and change default passwords. Most attacks use known weaknesses for which a fix already exists. Blunts: exploits against old, unpatched software.
4. Strong authentication. Use multi-factor authentication, so a stolen password alone is not enough. Lock accounts after repeated failures. Blunts: password guessing, phishing and reuse of leaked passwords.
5. Monitoring, detection and incident response. Collect logs, run intrusion detection and review alerts. Keep a tested plan for what to do when an attack is found. Blunts: an attack that gets in is noticed and contained before it spreads.
Two further measures
- Backups kept offline. They let the organisation recover from ransomware or destruction without paying.
- Security awareness training. People learn to spot phishing and social engineering, the most common way in.
Summary
| Countermeasure | Kind of control | Main attack it limits |
|---|---|---|
| Defense in depth | Architectural | Breach of a single control |
| Least privilege | Preventive | Misuse of accounts |
| Patching and hardening | Preventive | Known exploits |
| Multi-factor authentication | Preventive | Stolen passwords |
| Monitoring and response | Detective and corrective | Undetected, spreading attacks |
Conclusion. Five strong countermeasures are defense in depth, least privilege, patching and hardening, multi-factor authentication, and monitoring with incident response. Each removes one easy path for an attacker. Used together, with backups and training, they make a successful attack rare and its damage small.
The rest of the answers
The first answer is free. The rest come with the B.Sc. (Information Technology) Semester 6 solved papers.
You have read the question paper and its first answer in full. Buy the solved papers once and you can read every answer of every solved paper in this semester.
Notes + practical solutions + solved papers: ₹798 Already bought it? Sign in
Or solved papers only: ₹499
Or notes + practical solutions: ₹499
The question paper itself stays free, and so does the syllabus.
Found an error in this volume? Report it and we will check it against the paper.