RTU Kota B.Tech 6th Semester Information Security System Question Paper 2022 (IT)

RTU Information Security System 2022 Paper Review

The Information Security System (ISS) course is a cornerstone of the 6th-semester curriculum for Information Technology students at Rajasthan Technical University. It moves beyond basic networking to focus on the CIA triad: Confidentiality, Integrity, and Availability. Achieving a high score requires you to bridge the gap between theoretical cryptographic protocols and real-world system vulnerabilities.

The 2022 question paper reflected a strong emphasis on modern security challenges, including network hardening, authentication protocols, and the mathematical foundations of encryption. This review breaks down the exam structure and identifies the essential modules to help you prepare systematically for this course.

Understanding the Exam Pattern

The RTU theory examination consists of a three-hour paper totaling 70 marks, organized into three distinct parts:

• Part A (20 Marks): Ten compulsory questions, two marks each. These test your baseline knowledge. Expect definitions of terms like digital signatures, firewalls, man-in-the-middle attacks, and basic hashing functions. Keep your answers concise, typically under 30 words.
• Part B (20 Marks): Seven questions; answer five. Each is worth four marks. This section tests your analytical ability. You may be asked to compare symmetric and asymmetric encryption, explain the differences between various access control models (like MAC, DAC, and RBAC), or describe the phases of a system hack.
• Part C (30 Marks): Five major questions; answer three. Each is worth ten marks. These require detailed technical explanations or calculations. Prepare for long-form questions on RSA algorithm implementation, DES/AES cipher architectures, Public Key Infrastructure (PKI), and advanced intrusion detection systems.

Core Topics Evaluated in the 2022 Curriculum

Focus your study time on these specific modules to maximize your performance:

Cryptography Foundations

This is the heart of the course. You must master the difference between substitution and transposition ciphers. Practice the math behind the RSA algorithm—ensure you are comfortable calculating public and private keys given prime numbers $p$ and $q$. Study the block cipher modes of operation, specifically the security trade-offs between ECB, CBC, and CTR modes.

Network and Transport Security

Security is only as strong as its weakest link in the communication path. Review the OSI model layers and identify where specific threats occur. Understand the handshake protocol of SSL/TLS and how IPsec provides security at the network layer. Be prepared to explain how firewalls, VPNs, and Intrusion Detection Systems (IDS) protect enterprise networks.

Access Control and Authentication

Learn to distinguish between identification, authentication, and authorization. Understand how multi-factor authentication (MFA) works and the underlying principles of biometrics. Study the implementation of Kerberos and how it manages tickets to provide secure authentication in distributed environments.

Software and System Security

Security starts with code. Study common vulnerabilities like buffer overflows, SQL injection, and cross-site scripting (XSS). Learn the principles of secure software development and how to perform basic vulnerability assessments to identify potential entry points for attackers.

Answer Writing Strategy for High Marks

RTU evaluators prioritize technical accuracy and structured, readable responses:

• Diagrams: Always include a visual representation when explaining protocols or architectures. Draw the packet flow for a firewall or the key exchange process for Diffie-Hellman. Use a ruler to ensure your diagrams are clean and professional.
• Formatting: Use a black pen for writing technical terms, protocol names, and formulas. Use a blue pen for your explanatory text. Use bullet points or numbered lists to make multi-step processes scannable.
• Precision: When discussing encryption algorithms, explicitly state the block size and key size. If a question asks for a comparison, use a table to clearly delineate the differences between the two concepts.
• Structured Steps: For Part C, start with an introduction, follow with the technical mechanism, provide a diagram, and conclude with the practical application or security limitation of the protocol.

Time Management During the Exam

• Part A (20 minutes): Complete these early to secure your initial marks. Aim for one point per minute.
• Part B (40 minutes): Spend approximately eight minutes per question. If a question requires a comparison, draw the table first and then fill in the points.
• Part C (120 minutes): Devote 40 minutes to each of the three major questions. Use this time to carefully draw diagrams and explain the multi-step processes involved in cryptographic exchanges or complex system security architectures.