Q1. What is web engineering? Write the need of web engineering.

4
Web Engineering is the application of systematic, disciplined and quantifiable
approaches to development, operation, and maintenance of Web-based applications.
Web engineering is multidisciplinary and encompasses contributions from diverse
areas: systems analysis and design, software engineering, hypermedia/hypertext
engineering, requirements engineering, human-computer interaction, user interface,
information engineering, information indexing and retrieval, testing, modelling and
simulation, project management, and graphic design and presentation.
Need of web engineering:
Industries such as Construction, Education, Hospitality, manufacturing, banking,
government and business utilized, Web based applications to improve and increase their
operations. In addition, the Web allows for development of corporate intranet web
applications.
To Date the development of web applications has been in general ad hoc, resulting in
poor quality applications, which are difficult to maintain. The main reasons for such
problems are Unsuitable Design and Development Process, poor Project Management
Practices.
Q2. What is the scope for web designer, web developer and application developer? 5
Scope for web designer and developer:
It is an integral part of today’s IT industry. Web Designing deals with planning &
creation of website. A good web designer having a thorough knowledge in HTML, CSS,
JS, working with jQuery plugins, bootstrap, designing sites with word press application is
required to establish a good name in this field.

Career & Jobs in Web Designing:

• Front end web developer

• Design and Layout Analyst
• UI Designer
• UX Designer
• UI Developer
• Web Analyst / Designer

Future Scope of Web designer and developer:

1. In software Industry: Many MNC’s like oracle, Wipro, cognizant etc., are
recruiting the web designers mainly for maintaining the websites of clients
2. In Media: Maintaining advertising agencies, publishing, audio-visual media etc.,
websites require a skilled web designer.
3. In Educational: Educating students visually by using some animated designs,
also maintaining websites of colleges, schools etc.,

Scope for application developer:

While most of the industries hire technology for their excellence there are some
industries hire various types of application developer.
Mobile application developer: The demand for mobile users has always seen an
incremental tendency. Android application has seen a revolution with a more user-
friendly interface.

Entertainment industry: There is great scope for developers in the animation industry.
These have immensely used application development technologies.

Page 1 of 21
Medicine and healthcare industry: Application developers have a huge demand in
medical and healthcare industry. Sophisticated software has led to the following roles to
play in the healthcare industry. These considerations are truly important.

In manufacturing industry: There is great scope in the manufacturing industry. Now

manufacturing has been quite systematic and time oriented. Productivity level is
measured in each step.

Banking industry: The banking and finance sector has undergone a huge revolution with
the introduction of mobile banking. Nowadays, there is basically no need to be physically
present in the bank for any transactions.

Web application developers for the insurance industry: The insurance industry has
great space for web developers. It’s been easier for customers to buy insurance policy
directly from mobile and computer rather than being physically present near the agent.

Q3. What is World Wide Web (www)? How does it work? Who invented www and
when? 5

Definition of World Wide Web (WWW):

The World Wide Web is most often referred to simply as "the Web". The World Wide
Web (WWW) is a network of online content that is formatted in HTML and accessed via
HTTP. The term refers to all the interlinked HTML pages that can be accessed over the
Internet.
How does it work?
The World Wide Web is based on several different technologies that make it possible for
users to locate and share information through the Internet. These include Web browsers,
Hypertext Markup Language (HTML) and Hypertext Transfer Protocol (HTTP).
The web server sends out pages when they are requested by a web browser, such as
Microsoft Internet Explorer, Mozilla Firefox or Google Chrome. The host and client
communicate using an agreed 'language' called HTTP (Hypertext Transfer Protocol).
Sir Tim Berners-Lee invented the World Wide Web in 1989. Sir Tim Berners-Lee is
a British computer scientist.

Q4. What’s the Difference Between the Internet and the Web?
The Internet, linking your computer to other computers around the world, is a way of
transporting content. The Web is software that lets you use that content…or contribute
your own. The Web, running on the mostly invisible Internet, is what you see and click
on in your computer’s browser.

The Internet’s roots are in the U.S. during the late 1960s. The Web was invented 20 years
later by an English scientist Tim Berners-Lee invented the World Wide Web in 1989. He
wrote the first web browser in 1990 while employed at CERN in Switzerland.

Page 2 of 21
 Q5. What is http? What is the purpose of the HTTP? What is the HTTP POST and
GET methods? 5
HTTP (Hypertext Transfer Protocol) is the set of rules for transferring files (text, graphic
images, sound, video, and other multimedia files) on the World Wide Web. This protocol
defines how messages are formatted and transmitted, and what actions Web servers and
browsers should take in response to various commands.
The Hypertext Transfer Protocol (HTTP) is an application protocol for distributed,
collaborative, hypermedia information systems. HTTP is the foundation of data
communication for the World Wide Web. Hypertext is structured text that uses logical
links (hyperlinks) between nodes containing text.
Both GET and POST method is used to transfer data from client to server in HTTP
protocol but Main difference between POST and GET method is that GET carries
request parameter appended in URL string while POST carries request parameter in
message body which makes it more secure way of transferring data from client to server.
Q6. What is URL? Describe it with an example. 3
URL is an acronym for Uniform Resource Locator and is a reference (an address) to a
resource on the Internet. A URL has two main components: Protocol identifier: For the
URL [Link] , the protocol identifier is http . Resource name: For the URL
[Link] , the resource name is [Link] .
Q7. What are the components of a web address/URL? 5
The general syntax of URLs is the following:
scheme://host:port/path?query-string#fragment-id
A URL has a linear structure and normally consists of some of the following:
• Scheme name — The scheme identifies the protocol to be used to access the resource on
the Internet. The scheme names followed by the three characters ://. The most commonly
used protocols are [Link] [Link] [Link] and [Link]
• Host name — The host name identifies the host where resource is located. A hostname is
a domain name assigned to a host computer.

For example, [Link] consists of host's machine name www and the
domain name [Link].

• Port Number — Servers often deliver more than one type of service, so you must also
tell the server what service is being requested. These requests are made by port number.

Page 3 of 21
 Well-known port numbers for a service are normally omitted from the URL. For
example, web service HTTP is commonly delivered on port 80.
• Path — The path identifies the specific resource within the host that the user wants to
access. For example, /html/[Link]
• Query String — The query string contains data to be passed to server-side scripts,
running on the web server. The query string preceded by a question mark, is usually a
string of name and value pairs separated by ampersands,

for example, ?first_name=John&last_name=Corner.

• Fragment identifier — The fragment identifier, if present, specifies a part or a position

within the overall resource or document. The fragment identifier introduced by a hash
mark "#" is the optional last part of a URL for a document.
When fragment identifier used with HTTP, it usually specifies a section or location
within the page, and the browser may scroll to display that part of the page.\

Q8. What is domain name and web hosting? Write the differences between them. 5

Domain Name:
Domain name is the address of your website that people type in the browser’s URL bar to
visit your website.
In other words, if your website was a house, then your domain name will be its address.
Now let’s get into the detailed explanation.
Internet is basically a giant network of computers connected to each other through cables.
To easily identify them, each computer is assigned a series of numbers called IP Address.
This IP address is a combination of numbers separated with dots. Typically, IP addresses
look like this:
[Link]
Computers have no problem identifying and remembering these numbers. However, it is
impossible for humans to remember and use these numbers to connect to websites on the
internet.
To solve this problem, domain names were invented.
A domain name can have words which makes it easy to remember website addresses.
Now if you wanted to visit a website on the internet, you don’t need to type a string of
numbers. Instead, you can type in an easy to remember domain name, for example,
[Link].

Web Hosting:
Web hosting is the place where all the files of your website live. It is like the home of
your website where it actually lives.
A good way to think about this is if the domain name was the address of your house, then
web hosting is the actual house that address points to. All websites on the internet, need
web hosting.
When someone enters your domain name in a browser, the domain name is translated
into the IP address of your web hosting company’s computer. This computer contains
your website’s files, and it sends those files back to the users’ browsers.

Page 4 of 21
Q9. Differentiate between Domain name and web hosting
The domain registrar and the web host really are two totally separate services. One is a
place for your domain name; the other is the place for your website’s files themselves.
Also very important to understand is the fact that you can have two totally different
companies handling these different entities—just because you want to move your website
hosting to a different company doesn’t mean that you have to move your domain name to
a new domain registrar at all. In fact, we usually recommend that our clients simply keep
their domain name with the service that it is currently at (unless there are ongoing issues
with that company).

In fact, there are benefits to keeping your domain name and web host totally separate.
One instance would be if you want to move your website away from your current website
host, then you are in complete control. As long as you still have your domain name
hosted separately, that account can be accessed and the settings changed in just minutes
to point the domain to a new web host ASAP. Some high traffic sites actually rely on a
variation of this tactic, having the site replicated on multiple web hosts and managing the
domain name settings to direct traffic to the best hosting option at the time according to
server loads, etc.

Q10. What is IP address? Differentiate between IP4 and IP6. 5

"IP" stands for Internet Protocol Protocol address. An IP address is a fascinating product
of modern computer technology designed to allow one computer (or other digital device)
to communicate with another via the Internet. IP addresses allow the location of literally
billions of digital devices that are connected to the Internet to be pinpointed and
differentiated from other devices.

Definition of IPv4

An IPv4 address is a 32- bit binary value, which can be displayed as four decimal digits.
The IPv4 address space offers about 4.3 billion addresses. Only 3.7 billion addresses can
only be assigned out of 4.3 billion address. The other addresses are conserved for specific
purposes such as multicasting, private address space, loopback testing, and research.
IP version 4 (IPv4) uses Broadcasting for transferring packets from one computer to all
computers; this probably generates problems sometimes.

Dotted-Decimal Notation of IPv4

[Link]

Definition of IPv6

An IPv6 address is a 128-bit binary value, which can be displayed as 32 hexadecimal

digits. Colons isolate entries in a sequence of 16-bit Hexadecimal fields. It provides 3.4 x
Page 5 of 21
1038 IP addresses. This version of IP addressing is designed to fulfill the needs of
exhausting IP’s and providing sufficient addresses for future Internet growth
requirements.
As IPv4 uses two-level address structure where the use of address space is insufficient.
That was the reason for proposing the IPv6, to overcome the deficiencies IPv4. The
format and the length of the IP addresses were changed along with the packet format and
protocols were also modified.

Hexadecimal Colon Notation of IPv6

FDEC:BA98:7654:3210:ADBF:BBFF:2922:FFFF

Comparison table:

BASIS OF IPV4 IPV6

COMPARISON
Address Supports Manual and Supports Auto-configuration and
Configuration DHCP configuration. renumbering
Address Space It can generate 4.29 x It can produce quite a large
109 addresses. number of addresses, i.e., 3.4 x
1038.
Security features Security is dependent on IPSEC is inbuilt in the IPv6
application protocol
Address length 32 bits (4 bytes) 128 bits (16 bytes)
Address In decimal In hexadecimal
Representation

Q11. Write the differences between static and dynamic IP address. Write the merits
and demerits of them. 5

BASIS FOR STATIC IP DYNAMIC IP ADDRESS

COMPARISON ADDRESS
Provided by ISP (For external IP DHCP
address)
Change acquirement Once static IP is Dynamic IP changes each time
assigned, it doesn't when a user connects to a
change. network.
Security Risk is high. More secure than static IP
address.
Device tracking Trackable Untraceable

Static IP address Advantages

• Address does not change - good for web servers, email servers and other Internet
servers.
• Use DNS to map domain name to IP address, and use domain name to address the
static IP address. Similar can be achieved with Dynamic DNS for dynamic IP
address, but it's not as clean as the static IP address.

Static IP address Disadvantages

• Expensive than dynamic IP address - ISPs generally charge additional fee for static
IP addresses.
• Need additional security - Since same IP is assigned to a machine, hackers try
brute force attack on the machine over period of time.
Page 6 of 21
Dynamic IP address Advantages

• Cheaper than static IP address.

• Changing IP address gives more privacy.

Dynamic IP address Disadvantages

• Requires DHCP server to obtain an IP address.

• Non-static. Each time IP address changes, you may have to find you IP address
again.

Q12. What do you mean by subnet? Write the advantages of subnetting. 4

What does Subnetting mean?

Subnetting is the strategy used to partition a single physical network into more than one
smaller logical sub-networks (subnets). An IP address includes a network segment and a
host segment. Subnets are designed by accepting bits from the IP address's host part and
using these bits to assign a number of smaller sub-networks inside the original network.
Subnetting allows an organization to add sub-networks without the need to acquire a new
network number via the Internet service provider (ISP). Subnetting helps to reduce the
network traffic and conceals network complexity. Subnetting is essential when a single
network number has to be allocated over numerous segments of a local area network
(LAN).
Subnets were initially designed for solving the shortage of IP addresses over the Internet.

Subnets provides the following benefits:

• Reduces the network traffic by reducing the volume of broadcasts

• Helps to surpass the constraints in a local area network (LAN), for example, the
maximum number of permitted hosts.
• Enables users to access a work network from their homes; there is no need to open
the complete network.

Q13. What do you mean by Internet security? 3

Internet security relies on specific resources and standards for protecting data that gets
sent through the Internet. This includes various kinds of encryption such as Pretty Good
Privacy (PGP). Other aspects of a secure Web setup includes firewalls, which block
unwanted traffic, and anti-malware, anti-spyware and anti-virus programs that work from
specific networks or devices to monitor Internet traffic for dangerous attachments.

Internet security is generally becoming a top priority for both businesses and
governments. Good Internet security protects financial details and much more of what is
handled by a business or agency’s servers and network hardware. Insufficient Internet
security can threaten to collapse an e-commerce business or any other operation where
data gets routed over the Web.

Q14. What is meant by internet threats? What are the different types of internet
threats? Discuss about them. 6
A threat, in the context of computer security, refers to anything that has the potential to
cause serious harm to a computer system. A threat is something that may or may not
happen, but has the potential to cause serious damage. Threats can lead to attacks on

Page 7 of 21
computer systems, networks and more.
Search
THE TOP 10 MOST COMMON INTERNET THREATS

There is no doubt that you need to be vigilant online. As the World Wide Web has
evolved over the years, many internet nasties have been playing on vulnerabilities to
attack computers and retrieve sensitive data from individuals. Half the time, we aren’t
even aware it is happening until it is too late.
Whilst the internet is a fantastic place for communication and information, there are
many malicious threats you need to dodge along the way.

Spam
The fact that most of our emails accounts come with a ‘Spam’ or ‘Junk’ folder insinuates
that spam emails are a huge issue, with more than 50% of emails being syphoned into
these folders. Aside from being an annoyance, spam emails are not a direct threat.
However, many can contain malware.

Adware
Adware is a type of malware software that displays unwanted ads when a user is surfing
the internet. The ads often redirect your searches to advertising websites and collect
marketing-type data about you, behind your back, which is considered malicious.
Adware is often included in many shareware or freeware downloads as a legitimate way
of generating advertising revenues that help fund development. However, some websites
are infected with malicious adware that us automatically downloaded to your computer.
When this has been completed, Trojans can be used.

Trojan
Trojans leave your computer completely unprotected, which can mean that hackers can
steal any data from your system. Trojans often present themselves as harmless computer
programmes so that hackers can penetrate your computer without being detected.

Virus
One of the most talked about internet threats is a virus. Viruses usually attach themselves
covertly to downloads as they are designed to spread at an alarming rate. Viruses are
often attached to files for download, shared via CDs, DVDs, and USB sticks, or loaded
on to computers by opening infected email attachments.

Worms
Worms usually make their way on to a computer via a malicious email attachment or
USB stick. Once your computer has been infected by a worm, it will likely send itself to
every email address logged in your system. To the receiver, your email will appear
harmless, until they open it and are infected by the same worm.

Phishing
In its simplest terms, phishing is a form of fraudulent activity. More often than not,
official-looking emails are sent impersonating a well-known provider, such as a bank.
These emails are sent to acquire people’s passwords and credit card details.

Spyware
Another form of malware is spyware. Spyware is an all-encompassing internet nasty and
is usually attached to pop-ups of downloadable files. Once installed on your computer,
spyware can monitor your keystrokes, read and delete your files, reformat your hard
drive, and access your applications. Whoever is controlling the spyware has access to
your personal details without you even knowing.

Keyloggers
Page 8 of 21
Similar to a part of spyware, keyloggers record a user’s keyboard actions. Most
keyloggers will be looking for distinguishable key entries, such as bank card details and
passwords. Keylogging is often linked to identity and intellectual property theft.

Pharming
Pharming is a more complex version of phishing that exploits the DNS system. Pharmers
often create web pages mimicking that of a trustworthy business, such as an online
banking log-in page. Users will then enter their details, thinking they are logging in to
their usual service, and their details will be stolen by the pharmer.

Rogue Security Software

If you are ever downloading antivirus or antispyware programmes, make sure you have
purchased it from a legitimate source. Rogue security software will often ask you to pay
for extra protection, which is a huge con. The security software is completely useless and
criminals have robbed you of your money.

Q15. What is cybercrime? Describe about different types of cybercrime. / Write

various types of activities performed by cyber-criminal. 5
Cybercrime is defined as a crime in which a computer is the object of the crime
(hacking, phishing, spamming) or is used as a tool to commit an offense (child
pornography, hate crimes). ... Criminals can also use computers for communication and
document or data storage.

The Internet is a dangerous place. That's because some tech-savvy individuals engage in
various types of criminal activities online or by abusing computer networks. Those
nefarious operations usually result in the theft of unsuspecting users' personal or financial
information, data which actors on the dark web monetize for their own gain.

In acknowledgement of European Cyber Security Month (ECSM), for which

Metacompliance has already created a guide on how to stay safe online and a resource
for creating a security culture at the workplace, it's important that users train themselves
on how to recognize the common signs of cybercrime and protect themselves against
those campaigns.
Here's five types of cybercrime with which users should familiarize themselves.

Phishing

Phishing is a type of attack were actors attempt to trick unsuspecting users into doing
something they wouldn't ordinarily do, such as clicking on a malicious URL or email
attachment. Actors usually leverage phishing attacks to steal users' login credentials,
details which they can then abuse to gain unauthorised access to their victims' emails or
financial accounts.
Users can protect themselves against phishing by exercising caution around suspicious
links or email attachments. They should also be on the lookout for other tell-tale signs of
a phishing scam, like frequent grammar or spelling mistakes in what might seem to be an
official piece of correspondence from a bank or other institution.

Ransomware

Ransomware is a subset of crimeware that in most cases infects a victim's computer via
phishing attacks or an exploit kit campaign. Upon successful infection, the ransomware
commonly encrypts the victim's data. It then demands a ransom payment in exchange for

Page 9 of 21
the return of their data. But that's not set in stone. There's no guarantee victims will ever
get their data back.

In addition to following the anti-phishing steps laid out above, users should formulate a
data recovery plan for their computers. Such a program will help ransomware victims
recover their data for free if they ever experience an infection. As part of that plan, users
should in the very least maintain two local backups to which they copy their data on a
regular basis.

Malware

Malware comes in many different forms. Some specifically target users' financial
information by installing keyloggers onto victims' computers. Malware samples can also
reach users via a number of delivery methods, including phishing attacks and malicious
software packages that exploit unpatched software vulnerabilities.
People can protect against malware by always checking the domain of a login page for
their web accounts. If something seems off, the website might be a fake and could
attempt to steal users' login information. Users should also implement security updates as
soon as possible and store their passwords in a secure location such as a password
manager.

Identity Theft

Attackers can do all kinds of things with a person's identity. They can seize control of
victims' banking credentials, apply for new banking accounts, steal users' hard-earned
savings, and more. All they need are some key bits of information about you to convince
a bank or a customer service representative that they're you.

To protect against identity theft, users should take care not to reveal too much about
themselves on social media and other websites. There is no reason to ever publicly
disclose financial information. In addition, users should never use email to transmit their
Social Security Number or other personal information to another person, especially
someone they don't know.
Scams

Scams don't come in one size. But many of them have something in common: they
convey an enticing offer that in many cases attempts to trick users into sending over
money. Of course, those offers are baseless, and victims end up losing money in the
process.

In life, when something sounds too good to be true, it probably is. Users should never
buy into incredible scenarios where they're offered money or other rewards in exchange
for a fee. Instead they should see those messages for what they are: campaigns designed
specifically to steal their money.

What is cyber law? What are the roles of cyber law? 4

Meaning of Cyber Law:

Cyber means the use of Internet technologies and computers it includes computers,
networks, software, data storage devices, Internet, websites, emails, ATM machines etc.
To protect the cyber crime over Internet, this law is Passed to protect the Internet cyber
crime. This law is approved by the government. Cyber law Includes:

~~ Cyber crimes
~~ Electronic and Digital Signatures
~~ Intellectual Property

Page 10 of 21
~~ Data protection and privacy

Importance of Cyber Law:

~~ Companies now be able to carry out electronic commerce using the legal
infrastructure provided by the Act
~~ Act allows Government to issue notification on the web thus heralding e-governance
~~ Protect Computer fraud and Unauthorized access.
~~ Consumers are now increasingly using credit cards for shopping.
~~ Most people are using email, cell phones and SMS messages for communication as
well as Deal with Internet Banking Transactions.
~~It helps to prevent content or software that are copyrighted and distribution on net is
not allowed and punishable.
~~It helps to prevent spamming.
~~It helps to prevent the illegal bank transactions.
~~It plays a vital role in implementing the E commerce,net banking and all other
transaction which is available on internet.

What is Ecommerce? Discuss about various Types of Ecommerce. 5

Ecommerce (e-commerce) or electronic commerce, a subset of ebusiness, is the
purchasing, selling, and exchanging of goods and services over computer networks (such
as the Internet) through which transactions or terms of sale are performed electronically.

Ecommerce can be broken into four main categories: B2B, B2C, C2B, and C2C.

• B2B (Business-to-Business)
Companies doing business with each other such as manufacturers selling to
distributors and wholesalers selling to retailers. Pricing is based on quantity of
order and is often negotiable.

• B2C (Business-to-Consumer)
Businesses selling to the general public typically through catalogs utilizing
shopping cart software. By dollar volume, B2B takes the prize, however B2C is
really what the average Joe has in mind with regards to ecommerce as a whole.

Having a hard time finding a book? Need to purchase a custom, high-end computer
system? How about a first class, all-inclusive trip to a tropical island? With the
advent ecommerce, all three things can be purchased literally in minutes without
human interaction. Oh how far we've come!

• C2B (Consumer-to-Business)
A consumer posts his project with a set budget online and within hours companies
review the consumer's requirements and bid on the project. The consumer reviews
the bids and selects the company that will complete the project. Elance empowers
consumers around the world by providing the meeting ground and platform for
such transactions.

• C2C (Consumer-to-Consumer)
There are many sites offering free classifieds, auctions, and forums where
individuals can buy and sell thanks to online payment systems like PayPal where
people can send and receive money online with ease. eBay's auction service is a
great example of where person-to-person transactions take place everyday since
1995.

Companies using internal networks to offer their employees products and services online-
-not necessarily online on the Web--are engaging in B2E (Business-to-Employee)
ecommerce.
Page 11 of 21
G2G (Government-to-Government), G2E (Government-to-Employee), G2B
(Government-to-Business), B2G (Business-to-Government), G2C (Government-to-
Citizen), C2G (Citizen-to-Government) are other forms of ecommerce that involve
transactions with the government--from procurement to filing taxes to business
registrations to renewing licenses. There are other categories of ecommerce out there, but
they tend to be superfluous.

Write History of Ecommerce. Write the advantages and disadvantages of e-

commerce. 6
Around 1972: The ARPANET is used to arrange a cannabis sale between students at the
Stanford Artificial Intelligence Laboratory and the Massachusetts Institute of
Technology. This activity is later described as “the seminal act of e-commerce” in John
Markoff’s book What the Dormouse Said.
1981: Thomson Holidays UK is the first business-to-business online shopping system to
be installed.

1984: In April 1984, CompuServe launches the Electronic Mall in the USA and Canada.
It is the first comprehensive electronic commerce service.

1990: Tim Berners-Lee writes the first web browser, WorldWideWeb, using
a NeXTcomputer.

1995: Jeff Bezos launches [Link]. Dell and Cisco begin to aggressively use
Internet for commercial transactions. eBay is founded by computer programmer Pierre
Omidyar as AuctionWeb.

1999: Alibaba Group is established in China.

2012: US eCommerce and Online Retail holiday sales reach $33.8 billion, up 13 percent.
Also in 2012, eCommerce sales topped $1 trillion for the first time in history.

Today, mobile devices are playing an increasing role in the mix of eCommerce. Some
estimates show that purchases made on mobile devices will make up 25% of the market
by 2017. According to the Cisco Visual Networking Index, in 2014 the amount of mobile
devices will outnumber the number of world population.

ADVANTAGES AND DISADVANTAGES OF ECOMMERCE

The invention of faster internet connectivity and powerful online tools has resulted in a
new commerce arena – Ecommerce. Ecommerce offered many advantages to companies
and customers but it also caused many problems.

ADVANTAGES OF ECOMMERCE
• Faster buying/selling procedure, as well as easy to find products.
• Buying/selling 24/7.
• More reach to customers, there is no theoretical geographic limitations.
• Low operational costs and better quality of services.
• No need of physical company set-ups.
• Easy to start and manage a business.
• Customers can easily select products from different providers without moving
around physically.
DISADVANTAGES OF ECOMMERCE
• Any one, good or bad, can easily start a business. And there are many bad sites
which eat up customers’ money.
• There is no guarantee of product quality.

Page 12 of 21
 • Mechanical failures can cause unpredictable effects on the total processes.
• As there is minimum chance of direct customer to company interactions, customer
loyalty is always on a check.
• There are many hackers who look for opportunities, and thus an ecommerce site,
service, payment gateways, all are always prone to attack.

What is cryptography? 2
Definition: Cryptography is associated with the process of converting ordinary plain text
into unintelligible text and vice-versa. It is a method of storing and transmitting data in a
particular form so that only those for whom it is intended can read and process it.
Cryptography not only protects data from theft or alteration, but can also be used for user
authentication.

Description: Earlier cryptography was effectively synonymous with encryption but

nowadays cryptography is mainly based on mathematical theory and computer science
practice.

Modern cryptography concerns with:

Confidentiality - Information cannot be understood by anyone
Integrity - Information cannot be altered.
Non-repudiation - Sender cannot deny his/her intentions in the transmission of the
information at a later stage
Authentication - Sender and receiver can confirm each
Cryptography is used in many applications like banking transactions cards, computer
passwords, and e- commerce transactions.

What are the methods of encryption? Why data encryption is necessary? 4

Three types of encryption methodsused in general.

1. Symmetric-key cryptography
2. Hash functions.
3. Public-key cryptography

Symmetric-key Cryptography: Both the sender and receiver share a single key. The
sender uses this key to encrypt plaintext and send the cipher text to the receiver. On the
other side the receiver applies the same key to decrypt the message and recover the plain
text.

Public-Key Cryptography: This is the most revolutionary concept in the last 300-400
years. In Public-Key Cryptography two related keys (public and private key) are used.
Public key may be freely distributed, while its paired private key, remains a secret. The
public key is used for encryption and for decryption private key is used.

Hash Functions: No key is used in this algorithm. A fixed-length hash value is

computed as per the plain text that makes it impossible for the contents of the plain text
to be recovered. Hash functions are also used by many operating systems to encrypt
passwords.
Encryption is important because it allows you to securely protect data that you don't
want anyone else to have access to. Businesses use it to protect corporate secrets,
governments use it to secure classified information, and many individuals use it to protect
personal information to guard against things like identity theft.
Espionage uses encryption to securely protect folder contents, which could contain
emails, chat histories, tax information, credit card numbers, or any other sensitive
information. This way, even if your comptuer is stolen that data is safe.

Page 13 of 21
What is meant by digital signature in cryptography? What is the use of digital
signature? 5

A digital signature is basically a way to ensure that an electronic document (e-mail,

spreadsheet, text file, etc.) is authentic. Authentic means that you know who created the
document and you know that it has not been altered in any way since that person created
it.

Digital signatures rely on certain types of encryption to ensure authentication.

Encryption is the process of taking all the data that one computer is sending to another
and encoding it into a form that only the other computer will be able to decode.
Authentication is the process of verifying that information is coming from a trusted
source. These two processes work hand in hand for digital signatures.

Uses of Digital Signature

The Uses of digital signature is the same as that of a handwritten signature. A digital
signature uses digital keys to authenticate a person. A digital signature certificate
attached to any document is a binding commitment by the signature holder in accordance
to IT Law in India. The use of digital signature is going uphill because unlike a
handwritten signature, it is considered impossible to counterfeit or fake a digital
signature. With technological advancement we are moving away from the pen and paper
world to an electronic era. Now-a-days most of the government and private tenders are
collected electronically only. In India it mandatory for most, to file taxes like Income
Tax, Sales tax etc electronically. In all this electronic transactions uses of digital
signature is mandatory to make it legally [Link] of digital signature certificate also
include sending secure email as well as doing web-based monitory transactions. You can
also use Digital Certificate for code singing of any software developed by you or to prove
ownership of your domain name. In India uses of digital signature is also mandatory for
patent and trademark [Link] signatures are especially important
for electronic commerce and are a key component of most authentication schemes.

What is encryption? Define symmetric and asymmetric encryption. 5

Encryption is the process of using an algorithm to transform information to make it

unreadable for unauthorized users. This cryptographic method protects sensitive data
such as credit card numbers by encoding and transforming information into unreadable
cipher text. This encoded data may only be decrypted or made readable with a key.
Symmetric-key and asymmetric-key are the two primary types of encryption.

Encryption is essential for ensured and trusted delivery of sensitive information.

Symmetric encryption
In symmetric encryption, you use the same key for both encryption and decryption of
your data or message. Taking the example I gave above, sending a secure message to your
granny, both of you need to have the same key in order to encrypt and decrypt the
messages that you may exchange with each other.

Have a look at the following image:

Page 14 of 21
Asymmetric encryption
Asymmetric encryption is quite the opposite to the symmetric encryptionas it uses not
one key but a pair of keys: a private one and a public one. One might ask:
Why do you need two keys?

You use one to encrypt your data, which is called public key, and the other
to decrypt the encrypted message, which is called the private key..

Private keys
Your private key, as the name states, is yours and it must be kept private, as it’s the only
key that can decrypt any messaged that was encrypted with your public key.

Public keys
Public keys as, yet again, the name states, are public and thus no security is required
because of it should publicly available and can be passed over the internet. The public
key is used to encrypt a message that can only be decrypted using, as I written above,
its private counterpart.

In order to understand what I’ve written above take a look at the image below:

Write the difference between symmetric and asymmetric encryption. 4

Page 15 of 21
 BASIS FOR SYMMETRIC ASYMMETRIC
COMPARISON ENCRYPTION ENCRYPTION

Basic Symmetric encryption uses Asymmetric encryption uses a

a single key for both different key for encryption
encryption and Decryption. and decryption.

Performance Symmetric encryption is Asymmetric Encryption is

fast in execution. slow in execution due to the
high computational burden.

Algorithms DES, 3DES, AES, and Diffie-Hellman, RSA.

RC4.

Purpose The symmetric encryption The asymmetric encryption is

is used for bulk data often used for securely
transmission. exchanging secret keys.

Explain about Internet Telephony/ VoIP? 4

A category of hardware and software that enables people to use the Internet as the
transmission medium for telephone calls. For users who have free, or fixed-price Internet
access, Internet telephony software essentially provides free telephone calls anywhere in
the world. To date, however, Internet telephony does not offer the same quality of
telephone service as direct telephone connections.
There are many Internet telephony applications available. Some, like CoolTalk and
NetMeeting, come bundled with popular Web browsers. Others are stand-alone products.
Internet telephony products are sometimes called IP telephony, Voice over the Internet
(VOI) or Voice over IP (VOIP)products.

Write the advantages and disadvantages of VoIP.

Advantages of VoIP:
VoIP phone service providers offer many advantages to the residential and small
office/home office user. If you have a high speed internet connection then choosing a
VoIP phone service might be right for you.

Low Cost :
This technology leads to greater financial savings. This happens because there exists only
one network carrying the voice and data provided by only one supplier. If you have a
broadband Internet connection (DSL or cable), you can make PC-to-PC phone calls
anywhere in the world for free. If you wish to make a PC-to-phone connection, there's
usually a charge for this but probably much cheaper than your regular phone service.

You can pay as you go or you can sign up with a VOIP service provider and pay a
monthly fee in return for unlimited calls within a certain geographic area. For example,
some VOIP services in the United States allow you to call anywhere in North America at
no extra charge.

Low Taxes :
Since the calls are being carried over the Internet, governments have not heavily taxed
VoIP phone services. Compare that to your local telephone bill (go ahead and take a close
Page 16 of 21
look) and you will see you are spending quite a bit on taxes each month. Therefore,
choosing a VoIP provider could add up to significant savings for you and your family.

Portability :
One important concept to understand about VoIP is that unlike it’s forefathers (let’s call
them PSTN for now), it is not distance or location dependent. As far as VoIP is
concerned, you could be calling your supplier 1,000 miles away in Indonesia or calling
your business partner on the other end of town, and it doesn’t make any difference at all,
in terms of connectivity and cost.

You can make and receive phone calls wherever there is a broadband connection simply
by signing in to your VoIP account. This makes VoIP as convenient as e-mail – if you are
traveling, simply pack a headset or Internet phone and you can talk to your family or
business associates for almost nothing.

No extra cables, no extra cost :

A VoIP phone number, unlike your regular phone number, is completely portable. Most
commonly referred to as a virtual number, you can take it with you anywhere you go.

Even if you change your office address to another state, you phone number can go with
you. Heck, you can even take your whole business with you wherever you travel.

Features :
Unlike regular phone service which usually charges more for extra features, VOIP comes
with a host of advanced communication features. For example, call forwarding, call
waiting, voicemail, caller ID and three-way calling are some of the many services
included with VOIP telephone service at no extra charge. You can also send data such as
pictures and documents at the same time you are talking on the phone.

VoIP phones can integrate with other services available over the Internet, including video
conversation, message or data file exchange in parallel with the conversation, audio
conferencing, managing address books and passing information about whether others
(e.g. friends or colleagues) are available online to interested parties.

Flexibility :
When you choose a VoIP phone service provider, you will be sent a converter to allow a
regular phone to use the VoIP phone service. Your phone number is programmed into the
converter. This means that you can take your phone converter and phone number and use
them wherever you travel in the world, just as long as you have access to a high-speed
Internet connection. Because your telephone number is based in your converter (and not
your home/office), you have the option of choosing any area code for your phone
number. Some carriers will allow you to have more than 1 phone number in different area
codes for a small additional fee (called a virtual phone number).

video-conferencing :
VoIP enables advanced bandwidth capabilities and improved video-conferencing and at a
reasonable price.
Page 17 of 21
Disadvantages of VoIP:
If VOIP is starting to sound really good to you, make sure you understand the following
downsides as well.

No service during a power outage :

During a blackout a regular phone is kept in service by the current supplied through the
phone line. This is not possible with IP phones, so when the power goes out, there is no
VOIP phone service. In order to use VoIP during a power outage, an uninterruptible
power supply or a generator must be installed on the premises. It should be noted that
many early adopters of VoIP are also users of other phone equipment such as PBX and
cordless phone bases that also rely on power not provided by the telephone company.

Emergency calls :
Another major concern with VOIP involves emergency 911 calls. Traditional phone
equipment can trace your location. Emergency calls are diverted to the nearest call center
where the operator can see your location in case you can't talk. However, because a
voice-over-IP call is essentially a transfer of data between two IP addresses, not physical
addresses, with VOIP there is currently no way to determine where your VOIP phone call
is originating from.

Although many companies are making an effort to provide for emergency calls in their
service, this issue remains an important deterrent against VoIP.

Reliability :
Because VOIP relies on an Internet connection, your VOIP service will be affected by the
quality and reliability of your broadband Internet service and sometimes by the
limitations of your PC. Poor Internet connections and congestion can result in garbled or
distorted voice quality. If you are using your computer at the same time as making a
computer VOIP call, you may find that voice quality deteriorates dramatically.

This is more noticeable in highly congested networks and/or where there are long
distances and/or internetworking between end points.

VoIP Voice Quality :

VoIP has a bit to improve on Voice Quality, but not in all cases. VoIP QoS(Quality of
service) depends on so many factors: your broadband connection, your hardware, the
service provided by your provider, the destination of your call etc. More and more people
are enjoying high quality of phone calls using VoIP, but still many users complain of
hearing Martian, having to wait a lot before hearing an answer etc.

Security :
This one is the last in this list, but it is not the least! Security is a main concern with
VoIP, as it is with other Internet technologies. The most prominent security issues over
VoIP are identity and service theft, viruses and malware, denial of service, spamming,
call tampering and phishing attacks.

Define Internet, Intranet and Extranet. 3

Page 18 of 21
 Internet: It is a Global system of interconnected computer [Link] is not regulated by
any [Link] content in the network isaccessible to everyone [Link] is
owned by no [Link] can access Internet anonymously.
Intranet: It is a Private network specific to an [Link] is regulated by an
[Link] is owned by single [Link] should have valid
username/password to access [Link] Intranet is regulated by theorganization
policies.
Extranet:It is a Private network that uses public network to share information with
suppliers and [Link] is regulated by multiple [Link] content in the network
is accessible to members of organization & external members with access to [Link]
is owned by single/multiple [Link] is also regulated by contractual
agreements between organizations.
Differentiate among internet, Intranet and extranet. 5
Internet Intranet Extranet
It is a Private network that uses
It is a Global system of It is a Private
public network to share
interconnected computer network specific to an
information with suppliers and
network. organization.
vendors.
Not regulated by any It is regulated by an It is regulated by multiple
authority. organization. organization.
The content in the network is
Thus content in the network Thus content in the network
accessible to members of
isaccessible to everyone is accessible only to
organization & external
connected. members of organization.
members with access to network.
It is largest in terms of It is small network with
The number of devices connected
number of connected minimal number of
is comparable with Intranet.
devices. connected devices.
It is owned by single It is owned by single/multiple
It is owned by no one.
organization. organization.
It is means of sharing
It is means ofsharing It is means of sharing
sensitive
information throughout the informationbetween members
informationthroughout
world. and externalmembers.
organization.
Security is dependent of the
Security is enforced via a Security is enforced via a firewall
user of device connected to
firewall. that separates internet & extranet.
network.
Example: TCS using internal Example: HP and Intel using
Example: What we are
network for its business network for business related
normally using is internet.
operations. operations.
Users should have valid Users should have valid
Users can access Internet
username/password to access username/password to access
anonymously.
Intranet. Extranet.
Extranet is also regulated by
Internet is unregulated and But Intranet is regulated by
contractualagreements between
uncensored. theorganization policies.
organizations.

What is a Firewall? Need/Advantages of Firewall. 3

Page 19 of 21
A firewall is a piece of software or hardware that filters all network traffic between your
computer, home network, or company network and the Internet. It is our position that
everyone who uses the Internet needs some kind of firewall protection. A firewall will
protect your computer from outside attempts to control or gain access your computer.
Advantages of a firewall
• It protects against intruders. It only allows authorized users to access the network,
according to the security policies defined.
• It optimizes access. It identifies internal network components and allows more direct
communication between these components, if necessary.
• It protects confidential information. It allows access to information based on certain
levels of trustworthiness.
• It controls access to the computer.
• It detects possible fraudulent use.
• It monitors the traffic in the computer.
• It controls access to privileged services.

What is the role of a Web server? 2

A web server’s main purpose is to store web site files and broadcast them over the
internet for you site visitor’s to see. In essence, a web server is simply a powerful
computer that stores and transmits data via the internet. When someone visits a web page
on your site their browser communicates with your web server, sending and receiving
information that ultimately dictates what appears on the visitor’s computer screen. Thus,
the main purpose of a web server is to store and transfer web site data upon the request of
a visitor’s browser.

In a computer network, a proxy server is any computer system offering a service that
acts as an intermediary between the two communicating parties, the client and the server.
In the presence of a proxy server, there is no direct communication between the client and
the server. Instead, the client connects to the proxy server and sends requests for
resources such as a document, web page or a file that resides on a remote server. The
proxy server handles this request by fetching the required resources from the remote
server and forwarding the same to the client.

Page 20 of 21
Proxy Server

Page 21 of 21