SECURITY ASPECTS
TWO MARKS QUESTIONS
1. Why is a computer considered to be safe if it is not connected to a network
or Internet?
A computer is considered safe if it is not connected to a network or the Internet
because it becomes isolated from external threats. Hackers, viruses, and malware
cannot reach it without a connection.
2. How is a computer worm different from a virus?
Virus Worm
1. A virus needs a host program or 1. A worm is a standalone program that
software to spread. can spread on its own.
2. A virus is activated when the 2. A worm replicates and spreads
infected file is opened by the user. automatically, without needing user action.
3. Viruses usually require human 3. Worms spread automatically across
interaction to spread (e.g., opening a networks, without needing human
file). interaction.
Examples: CryptoLocker, ILOVEYOU Examples: Storm Worm, Sobig
3. What is a computer virus?
Computer viruses are malicious software programs created over the years.
Computer viruses are malicious software designed to damage or disrupt devices and
systems.
Some popular viruses include CryptoLocker, ILOVEYOU, MyDoom, and
Stuxnet.
4. What is ransomware used to extract money from users?
Ransomware is a type of virus that locks or hides your files so you cannot use
them. It then asks you to pay money, usually in digital currency like Bitcoin, to
unlock your files or restore access.
5. How did a Trojan get its name?
The name "Trojan" is derived from the ancient Greek story of the Trojan Horse.
[Type text] Page 1
SECURITY ASPECTS
A Trojan looks like safe and useful software, but once you install it, it secretly does
harmful things.
6. What is spyware and how does it affect a user's privacy?
Spyware is a type of malware that secretly collects information about a person or
organization without their knowledge or consent.
It tracks activities like interests, captures sensitive data and details (passwords and
personal information), and sends this data to an external source.
It is mainly used to gather information for advertisers or to steal personal
information for malicious purposes.
7. What is adware, and how does it generate revenue for its developer?
Adware is a type of malware designed to generate revenue for its creator by
displaying unwanted advertisements.
These ads appear as pop-up web pages or during software installations.
Adware earns money through mechanisms like "pay per click," where the
developer gets paid every time a user clicks on an ad.
While adware is usually annoying but not harmful, it can lead to further security
risks by displaying unsafe or malicious links.
8. What are the key differences between a Virtual Keyboard and an On-Screen
Keyboard?
Online Virtual Keyboard On-Screen Keyboard
1. Key layout is randomized each time it is 1. Key layout is fixed QWERTY
used. layout.
2. More secure, as randomized keys make 2. Less secure, as the fixed layout can
it difficult for keyloggers to track inputs. be exploited by keylogger software.
3. Often used for online logins of high- 3. Typically used as a built-in
security applications. accessibility tool in operating systems.
4. Requires Internet access for some online 4. Available on operating systems
keyboards. without Internet access.
9. Briefly explain two threats that may arise due to a keylogger installed on a
computer.
[Type text] Page 2
SECURITY ASPECTS
1. Sensitive Information Theft:
Keyloggers can capture login credentials, banking information, or private messages.
2. Identity Theft:
Stolen information can be used to pretend to be you or to commit fraud.
10. How is a Virtual Keyboard safer than an On-Screen Keyboard?
A Virtual Keyboard changes the order of the keys every time, so keyloggers
cannot easily track what you type.
An On-Screen Keyboard keeps the keys in the same order (like a regular
keyboard), making it easier for keyloggers to steal your information.
11. What are the risks associated with HTTP? How can we resolve these risks
by using HTTPS?
HTTP: Data sent through HTTP is in plain text, which means it is not protected
and can be easily intercepted by hackers.
HTTPS: HTTPS encrypts the data, so it is secure during transmission, keeping
sensitive information like passwords and bank details safe.
Sure. I have kept the same content and meaning, and only polished spelling,
grammar, punctuation, and alignment.
12. What is spam and how do email services help with security aspects?
Spam refers to unwanted emails, such as advertisements, links, or invitations.
Spam can be used to trick users and can also carry harmful content.
Email services like Gmail and Hotmail have spam filters that automatically detect
suspicious emails. Users can mark emails as "Spam" to prevent similar emails
from appearing in the future.
13. Write the difference between HTTP and HTTPS.
[Type text] Page 3
SECURITY ASPECTS
HTTP (HyperText Transfer
HTTPS (HyperText Transfer Protocol Secure)
Protocol)
1. Sends data over plain text 1. Encrypts data before sending it over the
without encryption. network.
2. Suitable for websites that 2. Used for websites handling sensitive
handle public information. information.
3. Less secure, as data can be 3. More secure, as data is encrypted and
seen by hackers. protected, like passwords and banking details.
4. Does not require a digital 4. Uses SSL (Secure Socket Layer) digital
certificate. certificate to enable secure communication.
14. List one advantage and disadvantage of using Cookies.
Advantage:
Cookies help improve your experience by remembering things like your
preferences or login details.
Disadvantage:
Cookies can be used to track what you do online or share your information with
others without your permission.
15. How are crackers different from hackers in terms of their actions and
intentions?
Crackers and hackers both know a lot about computers, but they use their skills
differently.
Hackers may look for vulnerabilities to improve security or for fun, and sometimes
they help fix problems.
Crackers use their skills to harm someone or break into systems without
permission.
16. Differentiate between DoS and DDoS attacks.
[Type text] Page 4
SECURITY ASPECTS
DoS (Denial of Service) DDoS (Distributed Denial of Service)
1. DoS is an attack where one
1. DDoS is a more advanced attack where
computer tries to make a website or
many computers work together to overload a
service stop working by sending too
website or service, making it stop working.
many requests.
2. It fills the system with too many 2. It fills the system with requests from
requests from one place. many different places.
3. Easier to stop because it is only 3. Harder to stop because it is coming from
coming from one place. many places.
FIVE MARKS QUESTIONS
1. Briefly explain any five types of malware.
1. Virus:
A computer virus is malicious software that attaches to files and spreads when
opened, causing damage to data and system performance.
2. Worm:
A worm is malware that spreads on its own through networks, slowing down or
crashing systems.
3. Ransomware:
Ransomware locks or encrypts user data and demands payment to restore access.
Example: WannaCry.
4. Spyware:
Spyware secretly collects personal information, like passwords and bank details,
and sends it to hackers.
5. Adware:
Adware displays unwanted ads and pop-ups to make money, sometimes tracking
user activity.
Sure. I have kept the same content and meaning, and only polished spelling,
grammar, punctuation, and alignment.
2. What is malware? List and briefly explain different modes of malware
distribution.
Malware is malicious software designed to harm users and their devices.
[Type text] Page 5
SECURITY ASPECTS
Modes of Malware Distribution:
1. Downloaded from the Internet:
Sometimes, when we download files from the Internet, especially from untrusted
sources, malware is hidden inside them and gets installed.
2. Spam Email:
We might receive attachments that are malicious. Clicking on them can infect our
computers.
3. Removable Storage Devices:
Malware can spread through USB drives, memory cards, or phones. When we
connect these to other computers, the malware spreads.
4. Network Propagation:
Some malware can move from one computer to another through the Internet or
network without us doing anything.
3. Write a short note on different methods of malware identification used by
antivirus software.
1. Signature-Based Detection:
The antivirus compares files to a list of known virus patterns (signatures). If it finds
a match, it flags the file as malware. It is important to update this list regularly to
catch new threats.
2. Sandbox Detection:
New programs are tested in a safe, virtual environment first. The antivirus watches
how they behave to see if they are harmful, without affecting the real computer.
3. Data Mining Techniques:
The antivirus uses smart technology (like machine learning) to analyse file
behaviour and figure out if it is safe or dangerous.
4. Heuristics:
The antivirus looks for suspicious patterns in a file's code, even if it is a new or
modified virus that does not have a known signature.
5. Real-Time Protection:
The antivirus runs in the background and checks for any strange behaviour in files
or programs while they are running, helping to catch malware that activates later.
4. List some common signs of malware infection.
1. We see lots of pop-up windows asking us to visit websites or download
software.
[Type text] Page 6
SECURITY ASPECTS
2. The homepage of our web browser changes without us doing it.
3. Our computer becomes very slow and crashes often.
4. Unknown programs start automatically when we turn on the computer.
5. Programs open and close by themselves.
6. We suddenly run out of storage space, or random messages, sounds, or music
play.
7. Files or programs appear or disappear without us touching them.
5. List some preventive measures against malware infection.
1. Use antivirus and anti-malware software and keep them updated regularly.
2. Avoid using unlicensed software. Instead, use Free and Open Source
Software (FOSS).
3. Never enter sensitive information like passwords on public or unknown
computers.
4. Don't use public Wi-Fi for sensitive activities like banking or shopping.
5. Avoid clicking on suspicious links or downloading attachments from
unknown emails.
6. Scan any USB drives or other storage devices with antivirus software before
transferring data.
7. Never share your passwords or PINs with anyone.
6. Explain firewall with its types.
A firewall is a network security system designed to protect a private network from
unauthorized access.
It acts as the first line of defence against malware and unauthorized users by
filtering and monitoring incoming and outgoing data based on predefined security
rules.
Firewalls can be implemented as software, hardware, or both.
Sure. I have kept the same content and meaning, and only polished spelling,
grammar, punctuation, and alignment.
Types of Firewalls
1. Network Firewall:
It is placed between two or more networks to protect one network from another.
Example: Protecting a school network from the Internet.
2. Host-Based Firewall:
Installed on a single computer and controls traffic to and from that specific
computer.
Example: Personal firewalls on laptops or desktops.
[Type text] Page 7
SECURITY ASPECTS
7. Define Cookies. What are the threats associated with Cookies?
A computer cookie is a small file or data packet placed on the user's computer by a
website to store information.
Threats due to Cookies:
1. Some malware can pretend to be cookies (e.g., "supercookies").
2. "Zombie cookies" can reappear after being deleted.
3. Third-party cookies can track your activity and share data for advertising
without your permission.
4. Cookies can show targeted ads based on your previous searches.
5. Unauthorized parties may access your cookie data, leading to privacy
concerns.
8. What are the different types of network intrusion attacks, and how do they
work?
There are a few common types of network intrusion attacks:
1. Asymmetric Routing:
The attacker sends harmful data through different paths to avoid detection, making
it harder for security systems to catch the attack.
2. Buffer Overflow Attacks:
The attacker puts harmful code into the computer's memory, which is triggered by a
programming mistake. This can allow the attacker to disrupt the system or gain
access to the network.
3. Traffic Flooding:
The attacker floods the network with too much data, making it difficult for security
systems to monitor the network properly. This lets the attacker sneak in without
being noticed.
9. What is the difference between White Hat, Black Hat, and Grey Hat
hackers?
White Hats (Ethical Hackers):
These hackers use their skills to help improve security. They find and fix flaws in
[Type text] Page 8
SECURITY ASPECTS
systems to protect against attacks. Companies hire them to test and secure their
systems. White hats work to stop bad hackers (black hats).
Black Hats (Crackers):
These hackers use their skills for illegal or harmful purposes. They break into
systems, steal information, or cause damage. Black hats are the ones who create
security threats.
Grey Hats:
Grey hats are somewhere in between. They hack systems without permission, but
they don't do it for money or to cause harm. They usually do it out of curiosity or
for fun, but their actions can still cause problems.
10. Explain how Snooping is different from Eavesdropping.
Snooping:
Snooping is the act of secretly monitoring or capturing network traffic or
communication without the knowledge or permission of the people involved.
Snooping happens after the data is collected, when it is being checked or analysed.
It is sometimes done by network administrators for troubleshooting.
Eavesdropping:
Eavesdropping is the act of secretly listening to private conversations or
communications without the consent of the people involved.
Eavesdropping happens while the conversation or data exchange is happening, in
real time. It is always unauthorized and done to spy or steal information.
[Type text] Page 9