MCA DCA71C3  ETHICAL HACKING

Description

SESSION	JULY/SEPT 2025
PROGRAM	MASTER OF COMPUTER APPLICATIONS (MCA)
SEMESTER	03
COURSE CODE & NAME	DCA71C3  ETHICAL HACKING

 

 

Set – I

 

Q1. Analyse the evolution of ethical hacking as a professional discipline. How has its perception and practice changed over time, and what factors have influenced these changes? 10           

Ans 1.

Ethical hacking has evolved significantly as a professional discipline over the past few decades. Initially associated with illegal activities and cybercrime, hacking gradually transformed into a recognized and essential component of cybersecurity. Ethical hacking today refers to the authorized and systematic testing of computer systems, networks, and applications to identify vulnerabilities before malicious attackers can exploit them. This transformation reflects

 

Its Half solved only

Buy Complete from our online store

 

https://smuassignment.in/online-store/

 

MUJ Fully solved assignment available for session Jul-Aug 2025.

 

Lowest price guarantee with quality.

Charges INR 198 only per assignment. For more information you can get via mail or Whats app also

Mail id is aapkieducation@gmail.com

 

Our website www.smuassignment.in

After mail, we will reply you instant or maximum

1 hour.

Otherwise you can also contact on our

whatsapp no 8791490301.

 

Q2. Analyse the relationship between the CIA triad and ethical hacking activities. How do confidentiality, integrity, and availability considerations influence the approach and methodology of security testing? 10    

Ans 2.

The CIA triad—Confidentiality, Integrity, and Availability—is a fundamental model in information security. It provides a framework for protecting information systems from threats and vulnerabilities. Ethical hacking is closely aligned with the CIA triad, as security testing methodologies are designed to assess and strengthen these three core principles. Understanding this relationship helps ethical hackers conduct comprehensive and effective security assessments.

Confidentiality and Ethical

 

Q3. Compare active and passive sniffing techniques, including their effectiveness in switched vs. hub networks. 10 

Ans 3.

Sniffing is a network monitoring technique used to capture and analyze data packets traveling across a network. In ethical hacking, sniffing is performed to identify security weaknesses, misconfigurations, and potential data leakage. Sniffing techniques are broadly classified into active sniffing and passive sniffing based on how data is intercepted. The effectiveness of these techniques varies

 

Set – II

 

 

Q4. Define social engineering and explain how it differs from traditional hacking techniques. 10

Ans 4.

Social engineering is a psychological manipulation technique used to deceive individuals into revealing confidential information or performing actions that compromise security. Unlike traditional hacking, which focuses on exploiting technical vulnerabilities in systems and software, social engineering targets human behavior. It is considered one of the most effective attack methods because it exploits trust, fear, curiosity, and lack of awareness.

Meaning and Nature of Social Engineering

Social engineering involves manipulating people into providing sensitive data such as passwords, financial information, or access credentials. Attackers pose as trusted entities like company

Q5. Explain the OWASP Top 10 and discuss its role in guiding web security practices.

Ans 5.

The OWASP Top 10 is a globally recognized awareness document published by the Open Web Application Security Project (OWASP). It identifies the most critical security risks faced by web applications. The list is updated periodically based on real-world data, expert input, and industry trends

 

Q6. Define penetration testing and explain its importance in organisational cybersecurity. 10

Ans 6.

Penetration testing is a controlled and authorized security assessment process used to identify vulnerabilities in an organization’s IT infrastructure. It involves simulating real-world cyberattacks on systems, networks, and applications to evaluate their security posture. Penetration testing helps organizations understand how attackers might exploit weaknesses and what impact such attacks could have.

Definition of Penetration