Question 1

Distinguish between Authentication and Authorization.

Accepted Answer

Authentication mathematically verifies the absolute identity of a user (who you are), while Authorization dictates the strict access permissions granted to that verified identity (what you can do).

Question 2

Define cryptanalysis.

Accepted Answer

Cryptanalysis is the highly aggressive mathematical science of violently breaking cryptographic architectures to decrypt ciphertext without possessing the legitimate decryption key.

Question 3

What is a Denial of Service (DoS) attack?

Accepted Answer

A DoS attack is a malicious, aggressive network assault designed to violently overwhelm a target server's hardware resources, mathematically rendering it unavailable to legitimate users.

Question 4

Briefly explain the concept of Public Key Infrastructure (PKI).

Accepted Answer

PKI is the massive, hierarchical trust architecture that mathematically manages, issues, and validates Digital Certificates using public-key cryptography across global networks.

Question 5

What is Pretty Good Privacy (PGP) primarily used for?

Accepted Answer

PGP is a highly secure cryptographic architecture utilized primarily for mathematically encrypting, decrypting, and digitally signing email communications to guarantee privacy and non-repudiation.

Question 6

Describe a Cross-Site Scripting (XSS) attack.

Accepted Answer

XSS is a catastrophic web vulnerability where an attacker violently injects malicious client-side JavaScript into a trusted website, which is then unknowingly executed by victim browsers.

Question 7

What is a botnet?

Accepted Answer

A botnet is a massive, coordinated network of globally compromised computers (zombies) controlled mathematically by a single malicious hacker (the botmaster) via a Command and Control server.

Question 8

List two advantages of biometric authentication.

Accepted Answer

Biometric authentication provides absolute physical non-repudiation and completely eradicates the severe human vulnerabilities associated with weak or forgotten alphanumeric passwords.

Question 9

What is a logic bomb in malware?

Accepted Answer

A logic bomb is a highly insidious, dormant piece of malicious code that violently executes a catastrophic payload only when a strict mathematical condition is met.

Question 10

Define a Key Distribution Center (KDC).

Accepted Answer

A KDC is a highly secure, centralized server architecture in symmetric cryptography (like Kerberos) that mathematically generates and securely distributes temporary session keys between communicating parties.

Question 11

Explain the round structure in the Data Encryption Standard (DES).

Accepted Answer

A rigorous architectural breakdown of the DES Feistel Round Structure. Violently details the Expansion Permutation, the catastrophic non-linear S-Box substitution, and the final P-Box permutation executed over 16 iterations.

Question 12

Discuss the working principles of the SHA-1 algorithm.

Accepted Answer

A deep theoretical exposition on the SHA-1 Hashing Algorithm. Explains how it mathematically processes 512-bit message blocks through 80 aggressive compression iterations to generate an irreversible 160-bit cryptographic digest.

Question 13

Explain the concept of a Virtual Private Network (VPN) and its tunneling prot…

Accepted Answer

An architectural review of Virtual Private Networks (VPNs). Details how tunneling protocols like IPsec and OpenVPN mathematically encapsulate and violently encrypt private IP packets inside public internet packets to create impenetrable digital tunnels.

Question 14

Describe the Bell-LaPadula security model and its primary properties.

Accepted Answer

A critical analysis of the Bell-LaPadula model. Explains the strict military architecture of "No Read Up" and "No Write Down" that mathematically guarantees absolute data confidentiality across highly classified clearance levels.

Question 15

Compare and contrast DoS and DDoS attacks with examples.

Accepted Answer

A definitive comparison between DoS and DDoS attacks. Contrasts the limited mathematical power of a single-source TCP flood against the catastrophic, globally distributed bandwidth exhaustion executed by massive botnet architectures.

Question 16

Outline the Secure Electronic Transaction (SET) protocol for e-commerce.

Accepted Answer

A concise outline of the SET Protocol architecture. Explains how Dual Signatures and public-key cryptography are mathematically executed to shield credit card data from merchants while authenticating all parties involved.

Question 17

Discuss role-based access control (RBAC) and its benefits.

Accepted Answer

A detailed review of Role-Based Access Control (RBAC). Explains how mathematically decoupling user accounts from file permissions via intermediate "Roles" drastically reduces administrative chaos in massive enterprise architectures.

Question 18

Analyze the RSA cryptographic algorithm in detail. Provide a mathematical exa…

Accepted Answer

A massive mathematical exposition on the RSA Cryptographic Algorithm. Violently executes prime number generation, modulus calculation, and Euler's Totient to derive Public/Private keys, followed by a rigorous analysis of the Integer Factorization problem that secures it.

Question 19

Detail the architecture and modes (Transport and Tunnel) of IPSec. Discuss ho…

Accepted Answer

A comprehensive architectural dissection of IPSec. Explains how Authentication Headers (AH) and Encapsulating Security Payloads (ESP) operate within Transport and Tunnel modes to brutally secure the IP layer of the OSI model.

Question 20

Elaborate on the working of Intrusion Detection Systems (IDS). Compare Networ…

Accepted Answer

A deep dive into Intrusion Detection Systems (IDS). Explains the mathematical anomaly detection engines, and violently contrasts the global network surveillance of NIDS against the deep OS-level kernel inspection executed by HIDS.

Question 21

Discuss major Web Security threats including SQL Injection and Cross-Site Req…

Accepted Answer

A critical review of Web Application Security. Violently analyzes the catastrophic database destruction caused by SQL Injection and the psychological hijacking of CSRF, detailing the rigid mathematical countermeasures (Parameterized Queries and Anti-CSRF Tokens) required to defeat them.

Question 22

Explain the Digital Signature Standard (DSS) approach. Detail the algorithm u…

Accepted Answer

A massive mathematical exposition on the Digital Signature Standard (DSS). Details how the architecture utilizes the Secure Hash Algorithm and the ElGamal-based DSA to generate and verify signatures, providing absolute proof of origin and data integrity.

Information Security Systems