About this previous year paper
Cyber Forensic Analytics (BCAI061)
Section-Wise Important Questions & Study Notes
SECTION A
(Attempt all questions | 2 × 7 = 14 marks)
Write short, crisp answers (2–3 lines each). No examples unless asked.
(a) Cybercrime & Types
Cybercrime refers to illegal activities carried out using computers, networks, or the internet.
Common types include hacking, phishing, identity theft, cyber stalking, and online fraud.
(b) Cyber Stalking vs Cyber Extortion
| Cyber Stalking | Cyber Extortion |
|---|---|
| Harassment or monitoring online | Threatening victim for money/data |
| Psychological harm | Financial or data loss |
| Repeated unwanted contact | Demand-based crime |
(c) Disk Imaging in Cyber Forensics
Disk imaging is the process of creating an exact bit-by-bit copy of a storage device to preserve digital evidence without altering the original data.
(d) Role of Audit Logs in Investigation
Audit logs record system activities, user actions, logins, file access, and are used to trace events, detect misuse, and establish timelines.
(e) Warranted vs Warrantless Searches
| Warranted Search | Warrantless Search |
|---|---|
| Requires court approval | No prior court approval |
| Legal authorization | Allowed in emergencies |
| Strong legal validity | Limited scope |
(f) Pre-Search Activities in Digital Evidence Management
Includes legal authorization, case briefing, tool preparation, risk assessment, documentation planning, and ensuring chain of custody.
(g) Key Components of Indian Cyber Law (Any Three)
Information Technology Act, 2000 Cyber Appellate Tribunal
Digital signatures & electronic records Cybercrime penalties
SECTION B
(Attempt any THREE | 7 × 3 = 21 marks)
Answers should be descriptive, use headings + examples.
(a) Types of Cybercrime with Real-World Examples
Hacking – Unauthorized system access Phishing – Fake emails/websites stealing credentials
Cyber Fraud – Online financial scams Identity Theft – Misuse of personal data
Cyber Terrorism – Attacks on critical infrastructure
(b) Wireshark & PCAP Analysis in Forensics
Wireshark captures and analyzes network traffic packets (PCAP files) to detect suspicious activity, malware communication, data exfiltration, and intrusion attempts.
(c) Cybercriminal Profiling
Cybercriminal profiling analyzes behavior patterns, tools used, attack style, language, and targets to identify attacker type (insider, hacker group, script kiddie).
(d) Evidence Collection Process & Legal Importance
Steps:
Identification Preservation
Collection Examination
Documentation
Importance: ensures admissibility of evidence in court and maintains integrity.
(e) Legal Frameworks in India to Combat Cybercrime
IT Act, 2000
Indian Penal Code (IPC sections) CERT-In guidelines
Cyber Crime Cells Digital Evidence Rules
SECTION C
(Attempt any ONE | 7 marks)
(a) Cyber Terrorism & Cyber Warfare
Cyber Terrorism involves politically motivated cyber-attacks causing fear or damage.
Cyber Warfare is state-sponsored digital attacks targeting national infrastructure, defense systems, and communication networks.
OR
(b) Mobile Payments & Their Exploitation
Mobile payments use apps like UPI, wallets, and banking apps.
Exploitation methods: Phishing links
Fake payment requests Malware apps
SIM swapping