Section A — 1 Mark Questions
1. Define Cyber Law. [1 Mark]
Answer: Cyber law is the legal framework that governs the use of information and communication technologies to regulate cyber activities and protect digital assets.
2. What is cybercrime? [1 Mark]
Answer: Cybercrime is any criminal activity that involves the use of computers, networks, or digital devices as a tool, target, or place of criminal activity.
3. Why is cyber security important? [1 Mark]
Answer: Cyber security is essential to protect information, systems, and networks from unauthorized access, theft, damage, or disruption.
4. Define a hardware vulnerability. [1 Mark]
Answer: A hardware vulnerability is a weakness or flaw present in the physical components of a system, such as chips, circuits, or storage devices.
5. What is a threat in cyber security? [1 Mark]
Answer: A threat is any potential event or action that could cause harm to a system or organization by compromising the confidentiality, integrity, or availability of data.
6. Name one category of cybercrime. [1 Mark]
Answer: Crimes against individuals, such as harassment or cyberstalking.
7. What is meant by software vulnerability? [1 Mark]
Answer: Software vulnerability refers to flaws or bugs in programs, operating systems, or applications that can be exploited by attackers.
8. What is the primary focus of cyber criminology? [1 Mark]
Answer: It focuses on the study of cybercrimes and the behavior of cybercriminals.
9. Define a cyber-attack. [1 Mark]
Answer: A cyber-attack is an intentional attempt by an unauthorized entity to gain access to, damage, or manipulate computer systems or networks.
10. State one domain of cyber security. [1 Mark]
Answer: Network security.
11. Does cyber law only protect governments? [1 Mark]
Answer: No, it protects individuals, businesses, and government entities alike.
12. What is the purpose of identifying vulnerabilities? [1 Mark]
Answer: The purpose is to apply necessary security measures to patch or mitigate risks before they are exploited.
13. Is a computer virus considered a threat? [1 Mark]
Answer: Yes, it is a type of malicious software threat.
14. What is another domain of cyber security? [1 Mark]
Answer: Application security.
15. What does cyber law help resolve? [1 Mark]
Answer: It helps resolve legal disputes arising from internet usage and digital transactions.
16. Can hardware vulnerabilities lead to data theft? [1 Mark]
Answer: Yes, they can be exploited to bypass security controls and access sensitive information.
17. What is a digital threat? [1 Mark]
Answer: Any digital action that poses a risk to system data or infrastructure.
18. What is cloud security? [1 Mark]
Answer: A domain of cyber security focused on protecting data and infrastructure stored on cloud platforms.
19. Does cybercrime always involve internet access? [1 Mark]
Answer: Not necessarily, it can involve standalone digital devices or local networks.
20. Why is cyber law dynamic? [1 Mark]
Answer: Because technology and methods of cybercrime are constantly evolving.
Section B — 2/3 Mark Questions
1. Explain the difference between hardware and software vulnerabilities. [2 Marks]
Answer: Hardware vulnerabilities are flaws in the physical components of a device (like processors). Software vulnerabilities are weaknesses in the code of operating systems or applications.
2. List three categories of cybercrime. [3 Marks]
Answer: 1. Crimes against individuals (e.g., stalking). 2. Crimes against property (e.g., intellectual property theft). 3. Crimes against government (e.g., cyber terrorism).
3. Why is Cyber Law important? Give two reasons. [2 Marks]
Answer: 1. It provides a legal framework to prosecute cybercriminals. 2. It protects the rights of digital users and promotes secure electronic commerce.
4. Identify two types of cyber threats. [2 Marks]
Answer: 1. Malware (viruses, ransomware). 2. Phishing attacks used to steal user credentials.
5. Explain the concept of 'Cyber Criminology'. [3 Marks]
Answer: Cyber criminology is an interdisciplinary field that studies the intersection of cyberspace and human behavior. It examines the motivations of cybercriminals, the impact of technology on crime, and prevention strategies.
6. How does software vulnerability occur? [2 Marks]
Answer: Software vulnerabilities typically occur due to coding errors, poor design, or lack of proper testing during the software development lifecycle.
7. Briefly explain the term 'Cyber-attack'. [3 Marks]
Answer: A cyber-attack is an offensive maneuver employed by individuals or organizations to target computer information systems, infrastructures, or networks. Its goal is to steal data, disrupt services, or destroy digital assets.
8. Name two domains of cyber security and their significance. [2 Marks]
Answer: 1. Network Security: protects data during transmission. 2. Cloud Security: ensures safety of data in off-site storage.
9. What is the role of the government in cyber law? [3 Marks]
Answer: Governments enact laws to define punishable offenses, establish enforcement agencies for investigation, and set standards for data privacy to ensure national security in the digital space.
10. Define 'Threat' in the context of security. [2 Marks]
Answer: A threat is a potential negative action that can exploit a system vulnerability, resulting in a breach of security principles like confidentiality, integrity, or availability.
Section C — 5 Mark Questions
1. Discuss the importance of Cyber Security in the modern digital age. [5 Marks]
Answer:
Introduction
Cyber security is the practice of protecting systems, networks, and programs from digital attacks.
Explanation
In the digital age, almost all critical infrastructure, personal data, and financial systems are interconnected. The importance of cyber security stems from the need to maintain trust and operational continuity.
Key Points
- Data Protection: Prevents the loss of sensitive personal and corporate data.
- Economic Stability: Protects financial systems and digital commerce from massive fraud.
- National Security: Defends essential services like power grids and communication networks from cyber warfare.
- Maintaining Privacy: Ensures that individual and organizational information remains confidential.
- Preventing Disruption: Minimizes the risk of downtime that can cause significant financial and reputational damage.
Conclusion: Without robust cyber security, the modern digital economy would face constant threats of instability and data loss.
2. Explain the different categories of Cybercrime with examples. [5 Marks]
Answer:
Categories
- Crimes against Individuals: Targets include bullying, stalking, or harassment. Example: Cyberstalking an individual via social media.
- Crimes against Property: Targets involve stealing digital data or intellectual property. Example: Creating a virus to damage a company database.
- Crimes against Government: Targets include state infrastructure or military sites. Example: A coordinated attack on a national government portal.
- Crimes against Society: Targets include public platforms and distribution of illegal content. Example: Spreading misinformation or illegal material online.
Summary
Cybercrime categories are essential for law enforcement to classify offenses and determine the severity and jurisdiction of the investigation required.
3. Elaborate on hardware and software vulnerabilities. [5 Marks]
Answer:
Introduction
Vulnerabilities are weaknesses that can be exploited. They are categorized based on whether they reside in the physical components (hardware) or the programming (software).
Hardware Vulnerabilities
These are often harder to fix because they are integrated into the device. Examples include unauthorized physical access ports or flaws in processor chip architectures (like side-channel attacks) that can allow data leakage.
Software Vulnerabilities
These are more common and relate to the code. Common types include:
- Buffer Overflows: Occurs when a program tries to write data beyond its allocated memory.
- SQL Injection: When an attacker inserts malicious code into a database query.
- Lack of Updates: Running outdated software that has known security patches available.
Conclusion: A strong security posture requires addressing both hardware and software layers to ensure comprehensive defense.
4. Describe the nature of cyber threats and classify them. [5 Marks]
Answer:
What is a Threat?
A threat is any potential risk that aims to exploit a vulnerability. It is the catalyst that transforms a potential vulnerability into a real security incident.
Classification of Threats
- Malware: Malicious software like viruses, worms, and ransomware designed to damage or gain unauthorized access to a system.
- Social Engineering: Manipulating people into giving up sensitive information, such as through phishing emails.
- Denial-of-Service (DoS) Attacks: Attempting to make a machine or network resource unavailable by flooding it with traffic.
- Unauthorized Access: Gaining entry to systems without permission to view, copy, or alter data.
- Man-in-the-middle (MitM): An attacker secretly intercepts and relays messages between two parties who believe they are communicating directly.
Application: Understanding these threats allows organizations to implement effective firewalls, encryption, and training programs.
5. Discuss the role and necessity of Cyber Law in today’s world. [5 Marks]
Answer:
Introduction
Cyber law serves as the legal foundation for the internet, ensuring that activities performed in the digital world are subject to legal scrutiny and accountability.
Necessity of Cyber Law
- Regulating Electronic Transactions: Provides legal validity to digital signatures and online contracts.
- Combating Cybercrime: Gives law enforcement agencies the power to investigate, trace, and prosecute perpetrators of online fraud and cyber-attacks.
- Data Privacy: Establishes standards for how personal and sensitive data must be handled by corporations and governments.
- Protecting Intellectual Property: Defends against digital piracy and unauthorized distribution of copyrighted material.
- Defining Jurisdiction: Determines which country's laws apply when an attack happens across borders, which is common in the global nature of the internet.
Conclusion: As cybercrimes grow more sophisticated, cyber law provides the essential framework for deterrence, justice, and the protection of citizens in a digital society.