Total No. of Questions : 8] SEAT No.

8
23
P-6556 [Total No. of Pages : 2

ic-
tat
[6181]-106

0s
5:3
B.E. (Computer Engineering)

02 91
3:4
CYBER SECURITY AND DIGITAL FORENSICS

0
31
7/1 13
(2019 Pattern) (Semester - VII) (410244 C) (Elective - III)
0
2/2
Time : 2½ Hours] [Max. Marks : 70
.23 GP

Instructions to the candidates :

E
80

1) Answer Q.1 or Q.2, Q.3 or Q.4, Q.5 or Q.6, Q.7 or Q.8.

8
C

23
2) Neat diagrams must be drawn wherever necessary.

ic-
3) Figures to the right indicate full marks.
16

tat
4) Assume suitable data, if necessary.
8.2

0s
.24

5:3
91
49

Q1) a) What are the typical steps followed by computer forensics specialists in
3:4
30

an investigation? Explain any 2 in detail. [9]

31

b) In what ways can business benefit from computer forensics technology?

01
02

Explain in detail. [9]

2/2
GP

OR
7/1
CE

Q2) a) What kind of digital evidences can be collected in computer forensics?

80

38
Explain in detail. [9]

c-2
.23

b) Why is data backup & recovery important in computer forensics? [9] i

16

tat
8.2

0s
.24

Q3) a) What is the primary purpose of collecting evidence in digital forensics?

5:3
91

Explain in detail. [9]

49

3:4
30

b) What are the typical steps involved in the collection of digital evidences?
31

[8]
01
02

OR
2/2
GP

Q4) a) Explain the different types of digital evidence that can be collected in
7/1
CE

computer forensics? [8]

80

b) What method & techniques are commonly used to verify & authenticate
.23

computer images. explain any two in detail? [9]

16
8.2

P.T.O.
.24
49
Q5) a) How do investigators determine which data is relevant to collect & analyze

8
23
in digital forensics investigation? [8]

ic-
b) What is the honeynet project, how does it contribute to network

tat
forensics? [9]

0s
OR

5:3
Q6) a) Why is data validation crucial in digital forensics & what methods are

02 91
3:4
commelily used for data validation? [8]

0
31
b) 7/1 13
Describe the process of seizing digital evidence at a crime or incident
scene? [9]
0
2/2
.23 GP
E

Q7) a) How does email play a significant role in digital investigations? What
80

8
C

23
types of information can be obtain from email Header that may be relevant

ic-
in investigations? [9]
16

tat
b) What factors should be considered when evaluating computer forensics
8.2

0s
tool needs for an investigations. Explain any two in detail? [9]
.24

5:3
91
49

OR
3:4
30
31

Q8) a) What is function e-mail server, how does it store & manage e-mail data?
01

[9]
02
2/2
GP

b) Write short note (any one) : [9]

7/1

i) e-mail forensics tools.

CE
80

38
ii) Computer forensics hardware tools

c-2
.23

i
16

tat

8.2

0s
.24

5:3
91
49

3:4
30
31
01
02
2/2
GP
7/1
CE
80
.23
16
8.2
.24

[6181]-106 2
49
Total No. of Questions : 8] SEAT No. :

8
23
PA-1663 [Total No. of Pages : 2

ic-
[5927]-347

tat
B.E. (Computer Engg.)

6s
CYBER SECURITY AND DIGITAL FORENSICS

5:3
(2019 Pattern) (Elective-III) (Semester-VII) (410244(C))

02 91
3:5
0
Time : 2½ Hours] [Max. Marks : 70

31
9/0 13
Instructions to the candidates:
1) Answer Q1 or Q2, Q3, or Q4, Q5 or Q6, Q7 or Q8.
0
1/2
2) Neat diagrams must be drawn wherever necessary.
.23 GP

3) Figures to the right indicate full marks.

4) Assume suitable data if necessary.
E
80

8
5) Use of scientific calculator is permitted.
C

23
ic-
16

tat
Q1) a) What is computer forensics? What is the use of Computer Forensics in
8.2

6s
Law Enforcement? What are different computer forensics schemes? [9]
.24

5:3
91
b) Explain in detail different Computer Forensics Services. [9]
49

3:5
30
31

OR
01
02

Q2) a) Explain in details Computer Forensics Assistance to Human Resources.[9]

1/2
GP

b) What are the benefits of professional forensics methodology? What are

9/0

steps taken by computer forensics specialist? [9]

CE
80

38
c-2
.23

Q3) a) What are evidences? What are the simple reasons to collect evidences? i
16

tat
8.2

What are different options for collecting evidences? [8]

6s
.24

5:3

b) What is chain of custody? Explain the process of chain of custody. [9]

91
49

3:5

OR
30
31

Q4) a) What is the general procedure for evidence collection? [8]

01
02

b) What are general computer evidence processing steps? Explain in detail.[9]

1/2
GP
9/0
CE
80

Q5) a) Explain how to perform remote and live acquisitions with an appropriate
.23

example. [9]
16

b) What are the different approaches for validating forensic data? [9]
8.2

OR
.24

P.T.O.
49

[5927]-347 1
Q6) a) Brief about the approaches for seizing digital evidence at the crime scene.[9]

8
23
b) Give in detail the different techniques to hide data in digital forensics.[9]

ic-
tat
6s
Q7) a) Explain types of digital forensics tools. Also explain the task performed

5:3
02 91
by these tools. [8]

3:5
0
b) State the features of any five computer forensics software tools. [9]

31
9/0 13 OR
0
1/2
.23 GP

Q8) a) Explain the role of client and server in email and some of the tools for
email forensics. [8]
E
80

8
b) Explain the process for validating and testing forensics software. [9]
C

23
ic-
16

tat
8.2

6s
.24

 5:3
91
49

3:5
30
31
01
02
1/2
GP
9/0
CE
80

38
c-2
.23

i
16

tat
8.2

6s
.24

5:3
91
49

3:5
30
31
01
02
1/2
GP
9/0
CE
80
.23
16
8.2
.24
49

[5927]-347 2
Total No. of Questions : 8] SEAT No. :

8
23
PB2248 [Total No. of Pages : 2

ic-
[6263]-86

tat
B.E. (Computer Engineering)

6s
CYBER SECURITY AND DIGITAL FORENSICS

9:2
(2019 Pattern) (Semester - VII) (410244 C) (Elective - III)

02 91
3:5
Time : 2½ Hours] [Max. Marks : 70

0
41
8/0 13
Instructions to the candidates:
1) Answer Q.1 or Q.2, Q.3 or Q.4, Q.5 or Q.6, Q.7 or Q.8.
0
2) Neat diagrams must be drawn wherever necessary.
5/2
.23 GP

3) Figures to the right side indicate full marks.

4) Assume suitable data if necessary.
E
81

8
C

23
ic-
Q1) a) What are the typical services offered by computer forensics
16

tat
professionals? (explain any two) [9]
8.2

6s
b) What specific technologies are utilized in the field of business computer
.24

9:2
forensics? (Describe any two) [9]
91
49

3:5
OR
30
41

Q2) a) How does computer forensics technology vary cross different sectors
01
02

like miltary law enforcement & business? [9]

5/2

b) What are the key components of a data recovery solutions in computer

GP

forensics? Explain in detail. [9]

8/0
CE
81

38
Q3) a) What are various options available for collecting digital evidences? Explain

c-2
.23

in detail? [8]
i
16

tat
b) Explain the essential steps in processing digital evidence from the crime
8.2

6s

scene? [9]
.24

9:2

OR
91
49

3:5

Q4) a) What is the volatile evidence in the context of computer forensics, and
30
41

why is it important to collect in quickly? [8]

01
02

b) What are the hypical steps involve in the collection of digital evidence?[9]
5/2
GP
8/0

Q5) a) What are some common data hiding techniques? Explain any one in
CE
81

detail? [8]
.23

b) What is the honey net project, and how does it contribute to network
forensics? [9]
16
8.2

OR
.24

P.T.O.
49

[6263]-86 1
Q6) a) What precautions should investigators take to prevent data alteration or

8
23
loss during the seicure process? Explain any one in detail? [8]

ic-
b) What are the challenges and best practices associated with performing

tat
remove acqisitions? [9]

6s
9:2
Q7) a) Whar are the common examples of email crime & violations that may

02 91
3:5
necessitate investigation? Explain any one in detail? [9]

0
41
b) 8/0 13
Explain any software tool using in computer forensics investigation and
its respective purpose? [9]
0
5/2
.23 GP

OR
E

Q8) Write short note (any two) [18]

81

8
C

23
a) Computer forensics hardware tools

ic-
16

tat
b) Validating & testing forensics software
8.2

6s
c) e-mail investigation
.24

9:2
91
49

3:5
30
41

  
01
02
5/2
GP
8/0
CE
81

38
c-2
.23

i
16

tat
8.2

6s
.24

9:2
91
49

3:5
30
41
01
02
5/2
GP
8/0
CE
81
.23
16
8.2
.24
49

[6263]-86 2
Total No. of Questions : 8] SEAT No. :

8
23
P550 [Total No. of Pages : 2

ic-
[6004]-485

tat
B.E. (Computer Engineering)

8s
CYBER SECURITY AND DIGITAL FORENSICS

2:4
02 91
(2019 Pattern) (Semester - VII) (Elective - III) (410244C)

4:4
0
31
4/0 13
Time : 2½ Hours] [Max. Marks : 70
0
6/2
Instructions to the candidates:
.23 GP

1) Answer Q.1 or Q.2, Q.3 or Q.4, Q.5 or Q.6, Q.7 or Q.8.

2) Neat diagrams must be drawn wherever necessary.
E
82

8
C

3) Figures to the right indicate full marks.

23
ic-
4) Use of Calculator is allowed.
16

tat
5) Assume suitable data if necessary.
8.2

8s
.24

2:4
Q1) a) Explain in brief computer forensic services. Write the applications of
91
49

4:4
digital forensics in military. [8]
30
31

b) What is the significance of data recovery and backup? Explain various

01

data recovery solutions.

02

[9]
6/2

OR
GP
4/0

Q2) a) What are the various business oriented digital forensic techniques? [8]
CE
82

38
b) How does computer forensics help in law enforcement? [9]

c-2
.23

i
16

tat
Q3) a) Discuss the various legal aspects of collecting and storing digital evidence.[9]
8.2

8s

b) What are different computer evidence processing steps? [9]

.24

2:4
91

OR
49

4:4
30

Q4) a) What is chain custody? How we can control the contamination of digital
31

evidence? [9]
01
02

b) What are various methods of collecting digital evidence ?Enlist the various
6/2
GP

digital collection steps. [9]

4/0
CE
82

Q5) a) Explain different approaches for validating forensic data. [9]

.23

b) Explain the approaches for seizing digital evidence at the crime scene.[8]
16
8.2

OR
.24
49

P.T.O.
Q6) a) Explain the process of identifying digital evidence in computer forensics.[9]

8
23
b) Explain Network forensics and order of volatility for computer system.[8]

ic-
tat
8s
Q7) a) State the features of any five computer forensic software tools. [9]

2:4
b) Write short notes on [9]

02 91
4:4
i) Task performed by digital forensic tool

0
31
ii)
4/0 13
Tools for email forensics
0
6/2
iii) Techniques for email forensic investigation
.23 GP

OR
E
82

8
C

Q8) a) State the features of any five computer forensic hardware tools. [9]

23
ic-
b) Write short notes on [9]
16

tat
8.2

i) Role of client and server in email

8s
.24

2:4
ii) Investigating Email crimes and investigations
91
49

4:4
iii) NIST standards for forensic technologies
30
31
01
02
6/2
GP


4/0
CE
82

38
c-2
.23

i
16

tat
8.2

8s
.24

2:4
91
49

4:4
30
31
01
02
6/2
GP
4/0
CE
82
.23
16
8.2
.24

[6004]-485 2
49