RTU Kota B.Tech 7th Semester Cyber Security Question Paper 2022

RTU Cyber Security 7th Semester 2022 Paper Review

The Cyber Security course in the 7th semester at Rajasthan Technical University (RTU) is a critical subject for modern engineering students. It addresses the fundamental vulnerabilities of digital infrastructure and the advanced methods required to protect data integrity, confidentiality, and availability. For B.Tech students, this subject integrates mathematical concepts from cryptography with practical network security protocols and the legal framework governing the internet.

The 2022 examination focused on the shift from theoretical security concepts to practical threat mitigation. Examiners expected students to demonstrate a clear understanding of attack vectors, defensive mechanisms, and the strategic importance of information security policies.

Understanding the Exam Pattern

The RTU theory examination for this 7th-semester subject is typically a three-hour paper worth 100 marks, organized into three parts:

• Part I (20 Marks): Ten compulsory questions, two marks each. These test foundational definitions. Expect questions on "CIA Triad," "Man-in-the-Middle (MITM) attacks," "Symmetric vs. Asymmetric encryption," "Firewalls," and "Phishing." Keep answers concise.
• Part II (48 Marks): Twelve questions provided; you must answer eight. Each is worth six marks. These are analytical. Prepare to explain the OSI security architecture, compare DES and AES, describe the mechanics of RSA, outline the steps in ethical hacking, and discuss digital signatures.
• Part III (32 Marks): Four questions provided; you must answer two. Each is worth sixteen marks. These require detailed technical explanations or design-oriented answers. Expect problems on cryptographic protocols, Intrusion Detection Systems (IDS), secure socket layer (SSL) implementation, and IT Act provisions.

Core Topics Evaluated in the 2022 Curriculum

Focus your study time on these specific modules to maximize your score:

1. Foundations of Cryptography

• Symmetric Encryption: Understand block and stream ciphers. Know the operational differences between DES, 3DES, and AES.
• Asymmetric Encryption: Master the math behind RSA. Understand how public and private keys are generated and used for encryption and digital signatures.
• Hashing: Explain the importance of SHA and MD5 in verifying data integrity.

2. Network and System Security

• Access Control: Differentiate between Authentication, Authorization, and Accounting (AAA).
• Defensive Tools: Study the role of Firewalls, VPNs, and Intrusion Detection/Prevention Systems (IDS/IPS). Understand how these tools filter traffic and detect malicious patterns.
• Web Security: Understand SSL/TLS protocols and how they secure communication between clients and servers.

3. Attacks and Ethical Hacking

• Threat Modeling: Be able to describe common attack vectors like SQL Injection, Cross-Site Scripting (XSS), DoS/DDoS, and social engineering.
• Phases of Hacking: Understand the ethical hacking lifecycle: Reconnaissance, Scanning, Gaining Access, Maintaining Access, and Clearing Tracks.

4. Cyber Laws and Ethics

• Legal Framework: Study the basics of the IT Act (Information Technology Act) and how it addresses cybercrimes like identity theft, electronic fraud, and data privacy.

Answer Writing Strategy for High Marks

RTU evaluators prioritize technical precision and clarity:

• Diagrams: Use a ruler for diagrams. Whether it is a cryptographic key exchange flow, a firewall architecture, or an OSI security model, a clean, labeled diagram is mandatory for full marks in Part III.
• Formatting: Use headings and bullet points to break down complex explanations. For Part III, start with a formal definition, follow with a well-labeled architecture diagram, and provide a practical real-world scenario.
• Precision: If the question asks for a cryptographic algorithm, clearly define the key length, block size, and rounds of operations involved.
• Comparative Tables: Whenever the paper asks to compare technologies—like "Symmetric vs. Asymmetric encryption" or "IDS vs. IPS"—always use a table to show your understanding of their technical differences.

Time Management During the Exam

• Part I (20 minutes): Finish these first to secure foundation marks. Aim for one point per minute.
• Part II (70 minutes): Allocate roughly 8-9 minutes per question. If a question requires a small diagram, draw it first and then explain the components.
• Part III (90 minutes): Dedicate 45 minutes to each of the two major questions. Use this time to write out detailed steps for security protocols or comprehensive explanations of defensive strategies.