JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD
JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD MCA 2018 PRINCIPLES OF INFORMATION SECURITY Previous Question Paper (January - 2018 - R15)
Note: This question paper contains two parts A and B. Part A is compulsory which carries 25 marks. Answer all questions in Part A. Part B consists of 5 Units. Answer any one full question from each unit. Each question carries 10 marks and may have a, b, c as sub questions.
Part A
What is the need of information security explain?
Answer
Information security is essential to protect an organization's information assets from unauthorized access, disclosure, disruption, modification, or destruction. The primary needs include: 1) Protecting the organization's ability to function by ensuring the availability of critical systems. 2) Enabling the safe operation of applications implemented on the organization's IT systems. 3) Protecting the data the organization collects and uses, ensuring confidentiality, integrity, and availability (the CIA triad). 4) Safeguarding technology assets to prevent financial loss and reputational damage. 5) Ensuring compliance with legal, regulatory, and contractual obligations.
Which law amended the Computer Fraud and Abuse Act of 1986, and what did it change?
Answer
The National Information Infrastructure Protection Act of 1996 amended the Computer Fraud and Abuse Act (CFAA) of 1986. This amendment significantly expanded the scope of the original act by broadening the definition of a "protected computer" to include any computer used in interstate or foreign commerce or communication. It also increased the penalties for unauthorized access and specifically criminalized the transmission of programs, information, codes, or commands that cause damage to such systems.
Write a short notes on Residual Risks.
Answer
Sign in to view the complete answer paper.
Establish the need for professional project management for complex projects.
Answer
Sign in to view the complete answer paper.
Explain the issues and concerns related to staffing the information security function
Answer
Sign in to view the complete answer paper.
Part B
Explain in detail about the top down approach for implementing the information security?
Answer
Sign in to view the complete answer paper.
Describe in detail about the concept of CNSS security model.
Answer
Sign in to view the complete answer paper.
Explain in detail about Information Security Planning and Governance.
Answer
Sign in to view the complete answer paper.
Explain the role of culture as it applies to ethics in information security.
Answer
Sign in to view the complete answer paper.
Identify and describe the categories and operating models of intrusion detection and prevention systems.
Answer
Sign in to view the complete answer paper.
Describe in detail about various risk control strategies.
Answer
Sign in to view the complete answer paper.
How does Public-Key Infrastructure protect information assets?
Answer
Sign in to view the complete answer paper.
Compare and Contrast between Symmetric and Asymmetric key cryptography.
Answer
Sign in to view the complete answer paper.
List and describe the options available for the location of the information security functions within the organization. Discuss the advantages and disadvantages of each option?
Answer
Sign in to view the complete answer paper.
What does CERT stand for? Is there more than one CERT? What is the purpose of a CERT? Explain.
Answer
Sign in to view the complete answer paper.