JNTU
JNTU B.Tech III INFORMATION SECURITY MANAGEMENT (SECURITY ANALYST I) Previous Question Paper (August/September - 2024 - R16)
Note: i) Question paper consists of Part A, Part B. ii) Part A is compulsory, which carries 25 marks. In Part A, Answer all questions. iii) In Part B, Answer any one question from each unit. Each question carries 10 marks and may have a, b as sub questions.
Part A
What is a Common Vulnerability and Exposure (CVE)?
Answer
A Common Vulnerabilities and Exposures (CVE) is a publicly available, standardized list of identified cybersecurity vulnerabilities. It provides a unique identifier for each vulnerability, allowing security professionals to share information and coordinate efforts to mitigate risks across different platforms and tools.
Discuss the characteristics of Man-In-The-Middle (MITM) attacks.
Answer
A Man-In-The-Middle (MITM) attack is characterized by the following:
- Interception: The attacker secretly intercepts communication between two parties who believe they are directly connected.
- Eavesdropping and Manipulation: The attacker can monitor, capture, or alter the data being exchanged in real-time.
- Transparency: The attack is designed to remain undetected, ensuring the legitimate parties continue their communication without realizing a third party is involved.
What are the different states of information?
Answer
Sign in to view the complete answer paper.
What is the role of access control mechanisms in securing networks and information?
Answer
Sign in to view the complete answer paper.
What are the common sources and causes of data leakage within organizations?
Answer
Sign in to view the complete answer paper.
What are Key Performance Indicators (KPIs) related to data leakage prevention?
Answer
Sign in to view the complete answer paper.
Define security policy implementation.
Answer
Sign in to view the complete answer paper.
What metrics can be used to measure the effectiveness of information security policy implementation?
Answer
Sign in to view the complete answer paper.
Mention the security roles in information security management.
Answer
Sign in to view the complete answer paper.
What is the risk analysis process in information security management?
Answer
Sign in to view the complete answer paper.
Part B
What is information security, and why is it important in today's digital age?
Answer
Sign in to view the complete answer paper.
Describe the categories of cyber-attacks based on their objectives (e.g., denial of service, data breach).
Answer
Sign in to view the complete answer paper.
Discuss the role of DNS (Domain Name System) in translating domain names to IP addresses.
Answer
Sign in to view the complete answer paper.
Explain the concepts of confidentiality, integrity, and availability (CIA) in relation to critical information.
Answer
Sign in to view the complete answer paper.
Describe the financial and reputational consequences of data leakage for organizations.
Answer
Sign in to view the complete answer paper.
Explain the importance of employee training and awareness programs in mitigating data leakage risks.
Answer
Sign in to view the complete answer paper.
Explain the role of senior management in endorsing and enforcing information security policies.
Answer
Sign in to view the complete answer paper.
Describe the role of security standards and guidelines in shaping organizational security posture.
Answer
Sign in to view the complete answer paper.
Explain the role of security administrators and analysts in maintaining information security.
Answer
Sign in to view the complete answer paper.
Explain the post-incident analysis and lessons learned process in improving incident response capabilities.
Answer
Sign in to view the complete answer paper.