RTU Kota B.Tech 7th Semester Information Security System Question Paper 2022 (CSE/IT)

RTU Information Security System 7th Semester 2022 Paper Review

The Information Security System course in the 7th semester at Rajasthan Technical University (RTU) is a vital component of the CSE and IT curriculum. It addresses the protection of digital assets against unauthorized access, use, disclosure, disruption, modification, or destruction. For B.Tech students, this subject integrates complex mathematical foundations of cryptography with the practical requirements of securing networked systems and adhering to global security standards.

The 2022 examination emphasized the transition from theoretical security models to the practical implementation of defensive strategies. Examiners expected students to demonstrate proficiency in architecting secure systems and diagnosing vulnerabilities within existing network configurations.

Understanding the Exam Pattern

The RTU theory examination for this 7th-semester core subject is a three-hour paper worth 100 marks, organized into three parts:

• Part I (20 Marks): Ten compulsory questions, two marks each. These test foundational definitions. Expect questions on the "CIA Triad," "Symmetric vs. Asymmetric encryption," "Firewalls," "Digital Signatures," and "Security Policies." Keep answers concise.
• Part II (48 Marks): Twelve questions provided; you must answer eight. Each is worth six marks. These are analytical. Prepare to explain the OSI security architecture, compare DES and AES, describe the mechanics of RSA, outline the steps in ethical hacking, and discuss authentication protocols like Kerberos.
• Part III (32 Marks): Four questions provided; you must answer two. Each is worth sixteen marks. These require detailed technical explanations or design-oriented answers. Expect problems on cryptographic protocols, Intrusion Detection Systems (IDS), SSL implementation, and information security management systems (ISMS).

Core Topics Evaluated in the 2022 Curriculum

Focus your study time on these specific modules to maximize your score:

1. Foundations of Cryptography

Master the core concepts of data confidentiality and integrity. Understand the mathematical basis of symmetric ciphers (AES/DES) and asymmetric ciphers (RSA/ECC). You must be able to explain how digital signatures provide non-repudiation and how hashing algorithms (SHA) ensure data integrity.

2. Network and System Security

This is a high-yield area. Focus on:

• Access Control: Differentiate between Authentication (identifying who the user is) and Authorization (defining what they can do).
• Defensive Tools: Study the role of Firewalls (packet filtering, stateful inspection) and Intrusion Detection Systems (IDS).
• Communication Security: Understand how SSL/TLS secures the handshake and subsequent data exchange between clients and servers.

3. Attacks and Threat Modeling

Be prepared to identify and explain common attack vectors, including SQL Injection, Cross-Site Scripting (XSS), and DoS/DDoS. Understand the phases of a cyberattack and how defensive layering can mitigate these risks.

4. Security Management and Governance

Learn how organizational policies (ISMS based on ISO 27001) define the framework for managing risks. Understand the balance between security, functionality, and cost.

Answer Writing Strategy for High Marks

RTU evaluators prioritize technical precision and logical structure:

• Diagrams: Use a ruler for diagrams. Whether it is a cryptographic key exchange flow, a firewall architecture, or an OSI security model, a clean, labeled diagram is mandatory for full marks in Part III.
• Formatting: Use headings and bullet points for your explanations. For Part III, start with a formal definition, follow with a well-labeled architecture diagram, and provide a practical real-world scenario.
• Precision: If the question involves an algorithm (like RSA), show the key generation and encryption/decryption process clearly with mathematical steps.
• Comparative Tables: Whenever the paper asks to compare technologies—like "Symmetric vs. Asymmetric encryption" or "IDS vs. IPS"—always use a table to delineate technical differences in speed, security, and use cases.

Time Management During the Exam

• Part I (20 minutes): Finish these first to secure foundation marks. Aim for one point per minute.
• Part II (70 minutes): Allocate roughly 8-9 minutes per question. If a question requires a small diagram, draw it first and then explain the components.
• Part III (90 minutes): Dedicate 45 minutes to each of the two major questions. Use this time to write out detailed steps for security protocols or comprehensive explanations of defensive strategies.