Questions
1–2 questions in university theory exams
Difficulty
Medium
Importance
Core curriculum for BCA, MCA, and Engineering degree exams
Overview
Network Security is the practice of protecting the integrity, confidentiality, and accessibility of computer networks and data. For university exams, it is essential to distinguish between preventative mechanisms like firewalls and the mathematical foundations of encryption. Mastery of this topic allows students to categorize threats and implement layered defense strategies.
Firewalls
A firewall acts as the primary barrier between a trusted internal network and an untrusted external network, such as the internet. It evaluates incoming and outgoing traffic based on a predefined set of security rules to prevent unauthorized access.
- Packet Filtering: Inspects headers of individual packets
- Stateful Inspection: Tracks the state of active network connections
- Application-Level Gateway: Operates at the Application Layer (Layer 7) as a proxy
- NAT (Network Address Translation): Hides internal IP addresses from external entities
Encryption Basics
Encryption is the cryptographic process of transforming plaintext into ciphertext to ensure data confidentiality. Aspirants must understand the difference between symmetric and asymmetric algorithms to score well in architecture-related questions.
- Symmetric Key: Uses the same key for encryption and decryption (e.g., AES, DES)
- Asymmetric Key: Uses a public key for encryption and a private key for decryption (e.g., RSA)
- Hash Functions: One-way transformations like SHA-256 for integrity verification
- Digital Signatures: Used for sender authentication and non-repudiation
Common Network Attacks
Understanding common attacks is crucial for writing effective incident response and security design answers. These attacks exploit vulnerabilities in network protocols or human behavior to compromise system resources.
- DoS/DDoS: Flooding a target with traffic to exhaust system resources
- Man-in-the-Middle (MitM): Intercepting communication between two unsuspecting parties
- Phishing: Using social engineering to trick users into revealing sensitive credentials
- SQL Injection: Inserting malicious code into server-side database queries
Formula Sheet
Symmetric: Ciphertext = E(K, Plaintext)
Asymmetric: Ciphertext = E(Public_Key, Plaintext)
Hash: H = Hash(Message)
Exam Tip
When asked about security measures, always frame your answer using the CIA Triad (Confidentiality, Integrity, and Availability) to demonstrate a structured security mindset.
Common Mistakes
- Confusing symmetric encryption with hashing algorithms during explanation
- Failing to mention that a firewall operates at specific layers of the OSI model
- Using the terms 'authentication' and 'authorization' interchangeably
More Revision Notes
Ready to test yourself?
Play topic-wise Network Security Basics questions in Aspirant Arcade — gamified MCQ practice.
Download Free