JNTU
JNTU B.Tech III ETHICAL HACKING Previous Question Paper (August - 2022 - R18)
Answer any five questions. All questions carry equal marks.
Main
What is hacking? Briefly explain any three types of hackers.
Answer
Hacking is the practice of identifying and exploiting vulnerabilities in computer systems, networks, or applications to gain unauthorized access, manipulate data, or disrupt services. While often associated with malicious intent, it is a broad technical discipline that can be used for security research, system improvement, and defensive purposes.
Three common types of hackers are:
- White Hat Hackers (Ethical Hackers): These individuals are security professionals who use their skills to identify vulnerabilities in systems with the explicit permission of the owner. Their goal is to strengthen security posture and fix flaws before malicious actors can exploit them.
- Black Hat Hackers: These are malicious actors who gain unauthorized access to systems with the intent to steal data, cause damage, or perform illegal activities for personal gain or disruption. They operate without authorization and often violate laws.
- Grey Hat Hackers: These hackers fall between white and black hats. They may access systems without permission to find vulnerabilities, but they do not typically intend to cause harm or steal data. Often, they notify the system owner of the flaw, sometimes requesting a bounty or recognition, though their methods remain legally ambiguous.
Explain the various characteristics of Network Security.
Answer
Network security is defined by several core characteristics that ensure the protection of data as it traverses a network:
- Confidentiality: Ensures that sensitive information is accessible only to authorized users through mechanisms like encryption and access controls.
- Integrity: Guarantees that data remains accurate and unaltered during transmission or storage, typically maintained via hashing algorithms and digital signatures.
- Availability: Ensures that network resources and data are accessible to authorized users whenever required, protecting against DoS attacks and hardware failures.
- Authentication: Verifies the identity of users or systems attempting to access the network, often using multi-factor authentication or certificates.
- Non-repudiation: Provides proof of the origin and integrity of data, ensuring that a sender cannot deny having sent a message.
- Access Control: Restricts network access based on the principle of least privilege, ensuring users only interact with resources necessary for their roles.
List the Pros and Cons of Ethical Hacking and Risk analysis.
Answer
Sign in to view the complete answer paper.
Write about the following drivers fueling the need for security: i) Increasing network complexity ii) Mobile workforce.
Answer
Sign in to view the complete answer paper.
Briefly discuss about the security policy.
Answer
Sign in to view the complete answer paper.
Illustrate about sequential testing without permitting information to flow from one phase to the next.
Answer
Sign in to view the complete answer paper.
List the Pros and Cons of following types of multi-phased attacks: i) Serial Shared only ii) Parallel Isolated only.
Answer
Sign in to view the complete answer paper.
Briefly explain the attacking network architecture with neat sketch.
Answer
Sign in to view the complete answer paper.
What are the tools used for the reconnaissance phase? Explain.
Answer
Sign in to view the complete answer paper.
Write a short note on the following: i) SYN Scanning ii) UDP Scanning.
Answer
Sign in to view the complete answer paper.
Explain about Rootkits.
Answer
Sign in to view the complete answer paper.
Briefly explain about Incident Management.
Answer
Sign in to view the complete answer paper.
Write a short note on Mitigation.
Answer
Sign in to view the complete answer paper.