JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD MCA ETHICAL HACKING Previous Question Paper (August - 2017 - R09)

Online scams are fraudulent schemes conducted over the internet to deceive individuals or organizations into revealing sensitive information or transferring money. Common types include:

• Phishing: Attackers send deceptive emails or messages masquerading as legitimate entities to steal login credentials, credit card numbers, or personal data.
• Advance-Fee Fraud: Scammers promise a large reward or inheritance in exchange for an upfront payment, which is never returned.
• Online Shopping Scams: Fake websites or listings offer products at heavily discounted prices but fail to deliver the goods after payment.
• Tech Support Scams: Fraudsters pose as IT professionals, claiming a user's computer is infected with malware to trick them into paying for unnecessary software or remote access.
• Investment Scams: Promises of high returns with low risk, often involving cryptocurrencies or fake trading platforms, designed to drain victim accounts.

Creating a security evaluation plan is a structured approach to identifying, assessing, and mitigating vulnerabilities within an information system. The process involves the following key steps:

1. Define Scope and Objectives: Clearly identify the assets, networks, and systems to be evaluated. Establish the boundaries of the assessment and the specific goals, such as compliance verification or threat detection.
2. Information Gathering: Collect documentation, network diagrams, and system configurations to understand the environment's architecture and potential attack surfaces.
3. Vulnerability Identification: Utilize automated scanning tools and manual inspection techniques to detect weaknesses, misconfigurations, and outdated software.
4. Risk Analysis: Evaluate the identified vulnerabilities based on their severity, the likelihood of exploitation, and the potential impact on business operations.
5. Reporting and Remediation: Document all findings in a comprehensive report, prioritizing risks based on severity. Propose actionable remediation steps and timelines for patching or policy changes.
6. Post-Evaluation Review: Verify that implemented controls effectively address the identified vulnerabilities and ensure the security posture has improved.