UNIVERSITY EXAMINATIONS: 2018/2019
EXAMINATION FOR THE DEGREE OF MASTER OF SCIENCE IN
DATA COMMUNICATIONS/MASTER OF SCIENCE INFORMATION
SYSTEMS MANAGEMENT/MASTER OF SCIENCE DATA ANALYTICS
MDC6302, MISM5405, MDA5403, COMPUTER FORENSICS & CYBER
SECURITY AND FORENSICS
DATE: DECEMBER, 2018 TIME: 2 HOURS
INSTRUCTIONS: Answer Question One & ANY OTHER TWO questions.
QUESTION ONE [20 MARKS]
a) (i) What is social engineering? 1 Mark
(ii) With the aid of examples, explain the different types of social engineering.
6 Marks
b) Discuss the need for computer forensics. 4 Marks
c) Outline the list of elements that should be planned before building the computer forensics
lab. 4 Marks
d. Explain how an attacker hacks the network using sniffers 5 Marks
QUESTION TWO [15 MARKS]
a) Discuss briefly each of the different types of expert witnesses 5 Marks
b) Discuss the precautions to be taken before a mobile phone investigation. 5 Marks
c) Outline any three indications of a web attack. 3 Marks
d) Explain any two challenging aspects of digital evidence. 2 Marks
QUESTION THREE [15 MARKS]
a) Discuss in detail Encase Forensic features. 6 Marks
b) Discuss in detail the procedure used in session hijacking. 7 Marks
c) Differentiate between a technical expert and an expert witness. 2 Marks
QUESTION FOUR [15 MARKS]
a) Discuss in detail all the phases of vulnerability assessment. 5 Marks
b) Discuss any four common social engineering attack targets, attack techniques and
defence strategies for each. 8 Marks
c) What makes a good penetration test? 2 Marks
