JNTU B.Tech III INFORMATION SECURITY MANAGEMENT (SECURITY ANALYST I) Previous Question Paper (July - 2023 - R16)

Information Security is the practice of protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. Its primary goal is to ensure the CIA triad, which consists of maintaining the Confidentiality, Integrity, and Availability of data throughout its lifecycle.

A Direct attack occurs when an attacker interacts directly with the target system or network to exploit vulnerabilities, such as performing a brute-force login attempt, launching a DoS attack, or executing a buffer overflow on a specific service. These attacks are typically characterized by a clear, observable connection between the attacker's source and the target.

An Indirect attack involves the attacker compromising an intermediary system, a third-party service, or a user's environment to eventually reach the primary target. Examples include Man-in-the-Middle (MitM) attacks, supply chain compromises, or using a compromised workstation as a pivot point to gain access to a secure internal network. These attacks often remain stealthy because the initial activity does not target the final objective directly, making them harder to detect through standard perimeter defenses.