Mumbai University Solved Question Papers
October 2025
Previous Year Question Paper with Solution
BSc IT · Sem VI
October 2025 - Information Security Examination
munotes.in
Mumbai
BSc IT Sem VI October 2025 Information Security Question Paper with Solutions
Get access to whole semester resourcesSemester Pass
MU B.Sc. (Information Technology) student group
Free to join
First published on munotes.in on 4 November 2026.
Published by munotes.in, Mumbai.
Model answers written and edited by the munotes.in editorial desk.
Passages from this volume may be quoted, in print, online or by an AI system, with credit: name munotes.in and link to this volume's page. The volume may not be reproduced as a whole. Full terms at munotes.in/content-license.
munotes.in is an independent study resource for students of the University of Mumbai. It is not affiliated with the University of Mumbai, and is not endorsed by it.
The University does not publish an official answer key for this paper. The answers in this volume are model answers, written to show how a full-mark answer is built. They are a study aid, not an authority on what an examiner marked.
The question paper reproduced here is the paper as set by the University of Mumbai at the October 2025 - Information Security examination.
Contents
The questions below are the paper as the University of Mumbai set it at the October 2025 - Information Security examination, in the order it was set.
MarksPage
MarksPage
The Paper as Set
The questions in this volume are the questions asked at the October 2025 - Information Security examination, reproduced as the University of Mumbai set them, in the order it set them. Nothing has been reworded, added or left out. Only the answers are ours. See the original question paper.
Duration 2½ hours · Total marks 75 · 30 questions answered
How to use this volume
Solve the paper first, under exam conditions and against the clock. Then read the answers here and mark your own. Reading a solution before attempting the question feels productive and teaches very little, because recognising an answer is not the same as being able to write one.
SECTION I
1.
Attempt any three of the following · 15 Marks
a.Describe the CIA triad model and explain its fundamentals.[5]
Answer
For full marks, cover: what the triad is, each of the three objectives with its definition, what a loss of each looks like, how each is attacked and protected, and the tension between them.
What the CIA triad is
The CIA triad is the model of the three basic goals of information security: confidentiality, integrity and availability. Every security control protects at least one of the three. Every attack damages at least one of them. The standard definitions come from United States federal law (44 U.S.C. 3542), which FIPS 199 quotes.
Confidentiality
Confidentiality means "preserving authorized restrictions on information access and disclosure, including means for protecting personal privacy and proprietary information". A loss of confidentiality is the unauthorised disclosure of information. The key word is authorised: teachers may see marks, a stranger may not.
- Attacks: eavesdropping, sniffing, theft of a laptop, phishing, spyware.
- Controls: access control, encryption, classification of data, least privilege.
Integrity
Integrity means "guarding against improper information modification or destruction". It also covers non-repudiation and authenticity. A loss of integrity is unauthorised modification or destruction. RFC 4949 adds that integrity covers accidental change too, such as a disk error that changes a figure.
- Attacks: modification of messages, viruses that alter files, an insider changing records.
- Controls: hash values and digital signatures, input validation, separation of duties, backups.
Availability
Availability means "ensuring timely and reliable access to and use of information". A loss of availability is the disruption of access to information or a system. Results that load a week late have lost availability, even if nothing was destroyed.
- Threats: denial of service, ransomware, disk or power failure, fire and flood.
- Controls: redundancy, tested backups, uninterruptible power, contingency plans.
The triad at a glance
| Objective | Question it asks | Example of a loss |
|---|---|---|
| Confidentiality | Who can see it? | A classmate reads your marks |
| Integrity | Can it be trusted? | A mark is changed from 34 to 54 |
| Availability | Can we reach it when needed? | The portal is down on results day |
Fundamentals to remember
- The three pull against each other. Encryption protects confidentiality, but a lost key makes the data unavailable. Many copies protect availability, but each copy can leak.
- Each is rated separately. FIPS 199 rates the impact of losing each one as low, moderate or high.
- Indian law uses the same words. The Digital Personal Data Protection Act, 2023 defines a personal data breach as one that compromises "the confidentiality, integrity or availability of personal data".
Conclusion. The CIA triad is the base of information security. Confidentiality stops unauthorised disclosure, integrity stops unauthorised or accidental change, and availability keeps information usable on time. A good design protects all three in proportion to the harm each loss would cause.
The rest of the answers
The first answer is free. The rest come with the B.Sc. (Information Technology) Semester 6 solved papers.
You have read the question paper and its first answer in full. Buy the solved papers once and you can read every answer of every solved paper in this semester.
Notes + practical solutions + solved papers: ₹798 Already bought it? Sign in
Or solved papers only: ₹499
Or notes + practical solutions: ₹499
The question paper itself stays free, and so does the syllabus.
Found an error in this volume? Report it and we will check it against the paper.