Jawaharlal Nehru Technological University Hyderabad B.Tech III INFORMATION SECURITY MANAGEMENT (SECURITY ANALYST I) Previous Question Paper (January/February - 2021 - R16)

A Trojan is a type of malware that disguises itself as legitimate software to deceive users into executing it. Once activated, it can perform malicious actions such as data theft, system control, or installing further malware. Common types include:

• Remote Access Trojans (RATs): Provide attackers with full administrative control over the victim's system, allowing them to monitor activity, steal files, or use the webcam.
• Backdoor Trojans: Create a hidden entry point in the system, allowing unauthorized remote access and bypassing standard authentication.
• Downloader/Dropper Trojans: Designed specifically to download or install additional malicious payloads onto the target machine.
• Banking Trojans: Specifically programmed to steal financial information, such as login credentials for online banking or credit card details.
• DDoS Trojans: Infect multiple systems to form a botnet, which is then used to launch coordinated Distributed Denial of Service attacks against a target server.
• Rootkit Trojans: Conceal their presence and the presence of other malicious files by modifying system-level processes or files to avoid detection by security software.

To protect confidential information, an employer must implement a comprehensive security framework that combines technical, physical, and administrative controls:

• Information Classification: Categorize data based on sensitivity (e.g., Public, Internal, Confidential, Restricted) to determine the appropriate level of protection required for each type.
• Access Control Policies: Implement the principle of least privilege, ensuring employees only have access to the specific data necessary for their job functions. Use multi-factor authentication (MFA) for all sensitive systems.
• Non-Disclosure Agreements (NDAs): Require employees, contractors, and third-party vendors to sign legally binding NDAs to ensure they understand their obligation to maintain confidentiality.
• Security Awareness Training: Conduct regular training programs to educate employees on recognizing social engineering, phishing, and the importance of handling sensitive data securely.
• Technical Safeguards: Deploy encryption for data at rest and in transit, maintain up-to-date firewalls, and use Data Loss Prevention (DLP) tools to monitor and block unauthorized data exfiltration.
• Physical Security: Secure physical offices, server rooms, and filing cabinets. Use badge access and surveillance to restrict entry to sensitive areas.
• Incident Response Planning: Establish a clear procedure for reporting and responding to potential data breaches to minimize damage and ensure regulatory compliance.
• Offboarding Procedures: Implement strict protocols for revoking access rights, collecting company assets, and ensuring the return of confidential documents immediately upon an employee's departure.