BSc CS Sem 6 BSc CS Semester 6 ATKT (2018 2019) Apr 2019 CYBER FORENSICS Question Paper - Mumbai University | munotes

Questions asked in this paper

• 2) Figures to the right indicate marks

1. Q3 Illustrations, in-depth answers and diagrams will be appreciated
2. Q4 Mixing of sub-questions is not allowed
3. Q1 Attempt All (Each of 15 marks
   • (a) Multiple Choice Questions
   • i) ____ command that shows all Registry data in real time on a Windows
   • ii) unique number is referred to as a “digital fingerprint.”
   • iii) Corporations often follow the doctrine, which is what happens when a civilian or corporate investigative agent delivers evidence to a law enforcement officer
   • iv) E-mail messages are distributed from one central server to many connected client
   • c. central distribution d. peer-to-peer architecture
   • v) you testimony, you present this evidence and explain what it is and how it was obtained
   • c. expert d. deposition
   • (b) the blanks (3, voir dire, 4, image, motion in limine, linear, picture, key escrow, hierarchical, key
4. Q1 is designed to recover encrypted data if users forget their passphrases or if the user key is corrupted after a system data failure lil) is the process of qualifying a witness as an expert
   • iv) The file where the bit-stream copy is stored; usually referred to as
   • v) The file system fora SIM structure
   • (c) Answer in | —2 sentences State two types of deposition
   • ii) What is meant by Chain of Custody?
   • iii) List two hashing algorithms commonly used for forensic purposes
   • iv) Define Plain view doctrine
   • v) What is TOR?
5. Q2 Attempt the following (Any THREE) 15 marks
   • (a) Define Data Acquisition. State its types and goals
   • (b) What guidelines an investigator has to keep in mind while seizing digital evidence at
   • (c) List standard systems analysis steps to be applied when preparing a for forensic
   • (d) | What is the standard procedure used for network forensics?
   • (e) State and explain various sub functions of extractions
   • (f) is an Investigation triad? State and Explain its parts
6. Q3 Attempt the following (Any THREE) 15 marks
   • (a) State and explain any two ways to trace information on the internet
   • (b) What are the two most common caveats an Internet Forensics investigator will encounter? Explain any one in brief
   • (c) List the different fields of Web Server logs
   • (d) What are the different types of Personal Information that can be found on Social
   • (e) Explain the following
   • (f) Describe tasks in investigating e-mail crimes and violations
7. Q4 Attempt the following (Any THREE) 15 marks
   • (a) Explain the legal process to conduct computer investigation for potential criminal violations of law
   • (b) are the steps to create image files of digital evidence?
   • (c) What is an Expert Witness? State the four criteria based on which the quality of a report is judged?
   • (d) Briefly outline the steps of trial process
   • (e) Explain Digital Signature and Electronic Signature w.r.t to the IT Act
   • (f) Write a Short note on Electronic Governance Attempt the following (Any THREE) (15)
   • (a) Write a short note on SIM & its structure
   • (b) — State and explain various Cyber Forensic tools
   • (c) What are privacy controls? Explain its importance
   • (d). List various guidelines for writing reports
   • (e) the following terms:

Read from the scan above, so a character or two may differ. The scan is the original.