Cyber Security — DU B.Sc. (Hons) Computer Science Previous Year Question Papers

1. (a) A hospital stores patient records digitally. One day, records are modified without authorization, and later, the system becomes unavailable for doctors during emergencies. Analyze which components of the CIA triad are affected and recommend cybersecurity controls for each. (b) Employees unknowingly connect to a fake wireless hotspot named similarly to the company’s Wi‐Fi. Identify the attack type and explain how wireless security policies can prevent such incidents. (d) Explain why having a structured incident response plan is essential for minimizing damage and restoring operations quickly. (e) Explain why continuous monitoring and secure configuration practices are important in maintaining system security. (f) Discuss why endpoint security is equally important in a cybersecurity strategy. 2. (a) Multiple employees in an organization use the same password for personal social media and office systems. Attackers exploit leaked credentials. Analyze vulnerabilities in the scenario. Suggest cybersecurity practices, authentication methods, and organizational policies to reduce credential compromise. (b) A bank wants to redesign its on line banking platform to improve security against fraud and identity theft. Design a cybersecurity plan using encryption, hashing, digital signatures, and access‐control policies. Explain how each mechanism contributes to confidentiality, integrity, and authentication. 3. 4. (a) System administrators use Telnet for remote access to servers instead of SSH. Explain why Telnet is insecure. Compare Telnet, SSH, and HTTPS with respect to confidentiality, authentication, and integrity. Suggest migration steps to secure protocols. (b) Employees report that their devices automatically connect to a Wi‐Fi network named similarly to the company’s official Wi‐Fi. Sensitive credentials are leaked. Identify the attack type. Explain how such attacks work. Suggest technical and policy‐ based measures to prevent recurrence. (b) A banking application written in C crashes when a user enters very long input values. Later, attackers exploit this flaw to execute malicious code. Explain buffer overflow vulnerability and how attackers exploit it. Recommend secure coding techniques, compiler protections, memory safety controls, and testing approaches. 5. (a) (b) 6 (a) (b) A company migrates customer data to cloud storage, but due to improper access configuration, confidential files become publicly accessible on line. Identify the cloud security weakness involved. Explain risks associated with cloud misconfiguration, insecure APIs, and shared responsibility models. Suggest security controls for prevention. A hacker gains access to smart locks, cameras, and thermostats in a connected smart home ecosystem by exploiting default passwords and unencrypted communication. Analyze the vulnerabilities and suggest security mechanisms for device authentication, encryption, firmware updates, and network isolation.