M.Sc. DEGREE EXAMINATION, NOVEMBER 2017
Third Semester
Computer Science And Information Technology
Elective — INFORMATION SECURITY
(CBCS 2014 onwards)
Time 3 Hours Maximum 75 Marks
Part A (10 X 2 20)
Answer all questions.
1. What is meant by an information security?
2. Mention the various components of information system.
3. Define Virus.
4. What do you understand by information Extortion?
5. Define the term Residual Risk.
6. Who is responsible for risk management in an
organization?
7. What is computer forensics?
8. Define Firewall.
9. What is a vulnerability scanner? How is it used to
improve security?
10. What is a honey pot?
Sub. Code
4MCI3E5
AFF-5004
2
wk14
Part B X 5 25)
Answer all questions.
11. Describe about the characteristics of information.
Or
How does computer security evolve into modern
information security? Explain.
12. Write short note on four important functions for an
organization performed by information security.
Or
What is privacy in an information security context?
Discuss it.
13. Write a short note on cost benefit analysis.
Or
What are vulnerabilities? How do you identify
them?
14. Who is responsible for enforcing policy that affects
the use of a technology?
Or
Explain in detail the NIST security models.
15. Explain the capabilities should a wireless security
toolkit include.
Or
Write a short note on Trap -and -Trace systems
and port scanners.
AFF-5004
3
wk14
Part C X 10 30)
Answer any three questions.
16. Explain in detail about the Security Systems
Development Life Cycle.
17. Write in detail on any three information attacks.
18. Write in detail on the components of risk identification.
19. Explain in detail about Major steps in contingency
planning.
20. Discuss in detail the various IDPS control strategies.
————————