JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD
JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD MCA 2022 ETHICAL HACKING Previous Question Paper (February - 2022 - R17)
Answer any five questions
All questions carry equal marks
Main
Explain the Passive and Active Reconnaissance.
Answer
Passive Reconnaissance involves gathering information about a target system without directly interacting with the target's infrastructure. The primary goal is to remain undetected by avoiding direct contact. Techniques include searching public databases, WHOIS lookups, social media analysis, and monitoring public forums or search engine caches. Since no traffic is sent to the target, it is difficult for security systems to identify the reconnaissance activity.
Active Reconnaissance involves direct engagement with the target system to discover vulnerabilities, open ports, and service configurations. This method is more intrusive and carries a higher risk of detection by firewalls, Intrusion Detection Systems (IDS), or Intrusion Prevention Systems (IPS). Common techniques include port scanning using tools like Nmap, banner grabbing, and network enumeration. Because this process generates traffic directed at the target, it leaves logs that can be analyzed by security administrators.
List and explain the different types of DNS Records.
Answer
DNS records are essential for mapping domain names to IP addresses and managing mail routing. The most common types include:
- A (Address) Record: Maps a hostname to its corresponding 32-bit IPv4 address.
- AAAA (IPv6 Address) Record: Maps a hostname to its 128-bit IPv6 address.
- CNAME (Canonical Name) Record: Creates an alias for an existing hostname, allowing multiple names to point to the same IP.
- MX (Mail Exchanger) Record: Specifies the mail servers responsible for receiving email on behalf of the domain.
- NS (Name Server) Record: Identifies the authoritative DNS servers for the domain.
- PTR (Pointer) Record: The reverse of an A record, mapping an IP address back to a hostname.
- SOA (Start of Authority) Record: Contains administrative information about the zone, including the primary name server and contact details.
- TXT (Text) Record: Stores arbitrary text information, often used for domain verification and security protocols like SPF or DKIM.
Discuss four methods to eliminate or reduce the level of risk associated with the vulnerabilities and asset valuation.
Answer
Sign in to view the complete answer paper.
List and explain various characteristics of network security.
Answer
Sign in to view the complete answer paper.
What is Source Point? Explain any six major areas where the attack is launched.
Answer
Sign in to view the complete answer paper.
List and explain any four security drivers and security characteristics in Business Challenges.
Answer
Sign in to view the complete answer paper.
Discuss the policy structure with an example.
Answer
Sign in to view the complete answer paper.
What is reconnaissance in ethical hacking? Explain.
Answer
Sign in to view the complete answer paper.
Why do hackers do reconnaissance? Explain with your answer.
Answer
Sign in to view the complete answer paper.
Explain the terms Social Engineering and Physical Security.
Answer
Sign in to view the complete answer paper.
List and explain the different types of security attacks in OS.
Answer
Sign in to view the complete answer paper.
List and explain the steps of incident management in ethical hacking.
Answer
Sign in to view the complete answer paper.