Cyber Security (CCS340) model question paper

Cyber Security (CCS340) course for Anna University students, Regulation 2021.

Model Question Paper

Part A (20marks)

1. Define the CIA Triad and explain its significance in cyber security.

2. List and briefly describe the main reasons for cybercrime.

3. What is the scope of cyber-attacks?

4. Describe what a social engineering attack is.

5. What is the purpose of using tools like Harvester in reconnaissance?

6. Explain the concept of port scanning.

7. Differentiate between host-based and network-based intrusion detection systems.

8. What are honeypots and how are they used in cyber security?

9. Describe the characteristics of a firewall.

10. Explain the difference between firewalls and intrusion prevention systems.

Part B (65 marks)

11a) Discuss the impact of the internet on society and business. 

   

   b) Explain the Indian IT Act and its role in combating cybercrime. 

12. a) Describe the various types of malicious software and the countermeasures that can be taken to protect against them. 

   - 

   b) Explain in detail the common attack vectors used by cybercriminals. 

13. a) What is vulnerability scanning? Describe the methodology involved in conducting a vulnerability scan. 

   

   b) Explain the Nmap command switches for performing SYN, stealth, XMAS, NULL, IDLE, and FIN scans.

14. a) Discussthe different types of intrusion detection systems and their advantages and disadvantages.

   

   b) Describe the Snort intrusion detection system and its features. 

15. a) Explain the different types of firewalls and their configurations

   

   b) what is Unified Threat Management (UTM)? Discuss some example UTM products and their features. 

 Part C 

16a. Explain the different types of web application attacks and the countermeasures that can be implemented to prevent them.

   

16b. Discuss the various techniques for extracting information from DNS and email servers during the reconnaissance phase of a cyber-attack.