JNTU
JNTU MCA 2019 PRINCIPLES OF INFORMATION SECURITY Previous Question Paper (December - 2019 - R15)
Note: This question paper contains two parts A and B. Part A is compulsory which carries 25 marks. Answer all questions in Part A. Part B consists of 5 Units. Answer any one full question from each unit. Each question carries 10 marks and may have a, b, c as sub questions.
PART - A
List and explain the key characteristics of an information security.
Answer
The key characteristics of information security are defined by the CIA triad and additional supporting principles:
- Confidentiality: Ensures that information is accessible only to those authorized to have access.
- Integrity: Guarantees that data is accurate and has not been modified in an unauthorized manner.
- Availability: Ensures that authorized users have reliable and timely access to information and resources when needed.
- Authenticity: Verifies the identity of the user or system, ensuring the source of the data is genuine.
- Non-repudiation: Provides proof of the origin and integrity of data, preventing a sender from denying they sent a message.
Differentiate between laws and Ethics?
Answer
Laws and ethics differ primarily in their source, enforcement, and consequences:
| Feature | Laws | Ethics |
|---|---|---|
| Definition | Formal rules established by a governing authority. | Socially accepted standards of right and wrong. |
| Enforcement | Enforced by judicial systems and police. | Enforced by social pressure, professional bodies, or conscience. |
| Consequences | Legal penalties like fines or imprisonment. | Social stigma, loss of reputation, or professional expulsion. |
| Scope | Codified and written down. | Often subjective and culturally dependent. |
List the five generations of firewall technology. Which generations is still in common use?
Answer
Sign in to view the complete answer paper.
What is the fundamental difference between symmetric and asymmetric encryption.
Answer
Sign in to view the complete answer paper.
Describe the special requirements needed to ensure the privacy of personnel data.
Answer
Sign in to view the complete answer paper.
PART - B
With a neat diagram explain the approaches used for the implementation of information security?
Answer
Sign in to view the complete answer paper.
What are the unique steps performed in security systems development life cycle model?
Answer
Sign in to view the complete answer paper.
Describe the functions and relationships among laws, regulations, and professional organizations in information security?
Answer
Sign in to view the complete answer paper.
Identify major national laws that affect the practice of information security.
Answer
Sign in to view the complete answer paper.
Explain the fundamental aspects of documenting risk via the process of risk assessment?
Answer
Sign in to view the complete answer paper.
Describe the technology that enables the use of virtual private networks.
Answer
Sign in to view the complete answer paper.
Discuss the nature and execution of the dominant methods of attack used against cryptosystems.
Answer
Sign in to view the complete answer paper.
Describe key physical security considerations, including fire control and surveillance systems.
Answer
Sign in to view the complete answer paper.
Illustrate how an organization’s employment policies and practices can support the information security effort.
Answer
Sign in to view the complete answer paper.
Describe how planning, risk assessment, vulnerability assessment, and remediation tie into information security maintenance.
Answer
Sign in to view the complete answer paper.