How to Use This Page
This page provides complete exercise solutions for Chapter 17 — Computer Ethics and Cyber Security from the Samacheer Kalvi Class 11 Computer Applications textbook. Work through the textbook exercises on your own first, then use these solutions to verify your answers, clarify doubts, and strengthen your exam preparation. Each section follows the textbook question pattern and includes detailed explanations so you understand the reasoning behind every answer.
Key Concepts (Quick Recap)
| Term | Definition |
|---|---|
| Computer Ethics | Moral principles that govern the use of computers and technology |
| Cyber Security | Practices and measures to protect computers, networks, and data from cyber attacks |
| Cyber Crime | Any criminal activity that involves a computer or a network as the target or tool |
| Hacking | Gaining unauthorised access to a computer system or network |
| Cracker | A person who breaks into a computer system with malicious or criminal intent |
| Virus | A malicious program that attaches itself to a legitimate program and replicates when executed |
| Worm | A self-replicating malicious program that spreads across networks without attaching to a host file |
| Trojan Horse | A malicious program disguised as legitimate software that performs harmful actions secretly |
| Malware | Any software intentionally designed to cause damage to a computer, server, or network |
| Spam | Unsolicited bulk messages sent over the internet, usually for advertising or phishing |
| Phishing | A fraudulent attempt to obtain sensitive information by disguising as a trustworthy entity |
| Firewall | A security system that monitors and controls incoming and outgoing network traffic based on rules |
| Antivirus | Software designed to detect, prevent, and remove malicious software from a computer |
| Encryption | The process of converting data into an unreadable format using a key to protect it from unauthorised access |
| Digital Signature | An electronic signature that verifies the authenticity and integrity of a digital message or document |
| IT Act 2000 | Indian law providing legal framework for electronic transactions and addressing cyber crime |
| Password | A secret string of characters used to authenticate a user and restrict access to a system |
| Backup | A copy of data stored separately to restore in case of data loss or damage |
| Identity Theft | Fraudulently obtaining and using another person's personal information for illegal purposes |
| Spyware | Malware that secretly monitors and collects user activity and information without consent |
I. Choose the Correct Answer (MCQ)
1. Which of the following is a cyber crime?
- (a) Using licensed software
- (b) Hacking into someone's email account ✓
- (c) Creating data backup
- (d) Installing antivirus software
2. The primary purpose of a firewall is to:
- (a) Speed up internet connectivity
- (b) Block unauthorised network access while permitting authorised traffic ✓
- (c) Remove viruses from a computer
- (d) Compress data for storage
3. The Information Technology Act in India was enacted in the year:
- (a) 1995
- (b) 1998
- (c) 2000 ✓
- (d) 2005
4. What is hacking?
- (a) Protecting data with encryption
- (b) Gaining unauthorised access to a computer system ✓
- (c) Creating a backup of data
- (d) Installing security software
5. A computer virus is:
- (a) A hardware problem
- (b) A malicious program that replicates by attaching to a legitimate program ✓
- (c) A network protocol
- (d) An operating system feature
6. Phishing is a type of:
- (a) Antivirus software
- (b) Cyber crime involving fraudulent attempts to steal sensitive information ✓
- (c) Network protocol
- (d) Data backup method
7. Encryption is the process of:
- (a) Deleting unwanted files
- (b) Converting data into an unreadable format to protect it ✓
- (c) Installing software updates
- (d) Speeding up the processor
8. A person who breaks into computer systems with malicious intent is called:
- (a) Ethical hacker
- (b) Cracker ✓
- (c) Network administrator
- (d) Programmer
II. Very Short Answer Questions (2 Marks)
1. What is computer ethics?
Computer ethics refers to the set of moral principles and guidelines that govern the responsible use of computers and technology. It addresses issues such as:
- Privacy — respecting the confidentiality of others' data
- Intellectual property — not using pirated or unlicensed software
- Authorised access — using only systems and data you have permission to access
- Responsible behaviour — avoiding harm to others through technology
Computer ethics ensures that individuals and organisations use technology in a lawful, fair, and socially responsible manner.
2. What is cyber crime?
Cyber crime is any criminal activity that involves a computer or a network either as the target or as the tool of the crime. Common types of cyber crime include:
- Hacking — unauthorised access to systems
- Identity theft — stealing personal information to impersonate someone
- Phishing — tricking users into revealing sensitive information
- Cyber stalking — harassing someone using digital means
- Online fraud — deceiving people for financial gain through the internet
Cyber crimes are punishable under the IT Act 2000 and related laws.
3. What is hacking?
Hacking is the act of gaining unauthorised access to a computer system, network, or digital account. A hacker exploits vulnerabilities in security systems to enter without permission. Hacking can lead to:
- Theft of confidential data
- Modification or deletion of files
- Disruption of services
- Financial loss
Under Section 66 of the IT Act 2000, hacking is a punishable offence with imprisonment up to three years and/or a fine up to five lakh rupees.
4. What is a virus?
A computer virus is a malicious software program that attaches itself to a legitimate program or file. When the infected program is executed, the virus activates and:
- Replicates itself by attaching to other files
- Can corrupt or delete data on the infected computer
- May display unwanted messages or slow down the system
- Spreads through infected storage devices, emails, or downloads
A virus requires a host program to run and cannot execute on its own. Common examples include file infectors, boot sector viruses, and macro viruses.
5. What is a firewall?
A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and an untrusted external network (such as the internet). Key functions of a firewall include:
- Blocking unauthorised access attempts from external sources
- Allowing legitimate traffic to pass through
- Filtering data packets based on source, destination, and content
- Logging network activity for security audits
Firewalls can be hardware-based, software-based, or a combination of both.
6. What is encryption?
Encryption is the process of converting readable data (plaintext) into an unreadable format (ciphertext) using an encryption algorithm and a key. This ensures that even if data is intercepted, it cannot be read without the correct decryption key. Encryption is essential for:
- Securing online transactions (such as banking and e-commerce)
- Protecting sensitive personal and business data
- Ensuring confidentiality of communications
- Complying with data protection regulations
Common encryption methods include symmetric key encryption (same key for encryption and decryption) and asymmetric key encryption (public and private key pair).
III. Short Answer Questions (3 Marks)
1. Explain the types of cyber crimes.
Cyber crimes can be classified into several categories:
1. Hacking and Unauthorised Access — Illegally breaking into computer systems to steal, modify, or destroy data. Example: accessing someone's bank account without permission.
2. Identity Theft — Fraudulently obtaining personal information (such as Aadhaar number, bank details) to impersonate someone for financial gain or illegal activities.
3. Phishing and Spoofing — Creating fake websites or sending fraudulent emails that appear to come from legitimate sources to trick users into revealing passwords or financial details.
4. Cyber Stalking and Harassment — Using the internet to stalk, threaten, or harass an individual repeatedly through emails, social media, or messaging platforms.
5. Online Fraud and Scams — Conducting financial fraud through the internet, such as lottery scams, investment frauds, or fake e-commerce sites.
6. Distributing Malware — Creating and spreading viruses, worms, trojans, and other malicious software to damage systems or steal information.
All these crimes are punishable under the IT Act 2000 and the Indian Penal Code.
2. Differentiate between virus and worm.
| Feature | Virus | Worm |
|---|---|---|
| Host file | Requires a host file to attach itself | Does not need a host file; operates independently |
| Replication | Replicates when the infected program is executed | Self-replicates and spreads automatically across networks |
| Spread | Spreads through infected files, USB drives, or email attachments | Spreads through network connections without user action |
| Trigger | Needs user action (running infected program) to activate | Activates and spreads on its own |
| Damage | Can corrupt or delete files | Consumes network bandwidth and system resources |
| Detection | Often detected by scanning specific files | Detected by monitoring unusual network activity |
| Example | CIH virus, Melissa virus | ILOVEYOU worm, Conficker worm |
A virus depends on a host program, while a worm is self-contained and can propagate without any user intervention.
3. Explain the role of a firewall in cyber security.
A firewall is a critical component of cyber security that protects a network from unauthorised access and threats. Its roles include:
1. Traffic Filtering — The firewall examines all incoming and outgoing data packets and allows or blocks them based on predefined security rules. It checks the source and destination IP addresses, port numbers, and protocols.
2. Access Control — It prevents unauthorised external users from accessing the private network while allowing authorised users to communicate securely with external networks.
3. Threat Prevention — Firewalls block known malicious IP addresses, suspicious traffic patterns, and common attack types such as denial-of-service (DoS) attacks.
4. Logging and Monitoring — Firewalls keep records of all network activity, which helps in security audits and identifying potential threats.
5. Types of Firewalls — Hardware firewalls are standalone devices placed between the network and the internet. Software firewalls are installed on individual computers. Many organisations use both for layered security.
4. Explain the IT Act 2000.
The Information Technology Act 2000 is the primary law in India that addresses cyber crime and provides legal recognition for electronic commerce. Key features include:
1. Legal Recognition of Electronic Records — The Act gives legal validity to electronic documents and digital signatures, enabling e-commerce and e-governance.
2. Cyber Crime Provisions — It defines and penalises cyber crimes including:
- Hacking (Section 66) — imprisonment up to 3 years and/or fine up to Rs. 5 lakh
- Publishing obscene content electronically (Section 67) — imprisonment up to 5 years and fine
- Identity theft (Section 66C) — imprisonment up to 3 years and/or fine up to Rs. 1 lakh
3. Cyber Appellate Tribunal — The Act provides for a tribunal to hear appeals against orders of the adjudicating officer.
4. Amendment in 2008 — The IT Act was amended to include provisions for data protection (Section 43A), cyber terrorism (Section 66F), and stricter penalties for various offences.
5. Significance — The Act provides a legal framework for prosecuting cyber criminals and protecting digital rights, making India one of the early adopters of cyber legislation globally.
IV. Long Answer Questions (5 Marks)
1. Explain computer ethics in detail with its principles.
Computer ethics is the branch of applied ethics that studies the moral, social, and legal issues arising from the use of computers and information technology. It provides a framework for responsible and fair use of technology.
Principles of Computer Ethics:
1. Privacy Principle — Every individual has the right to control their personal information. Users must not access, collect, or share someone else's personal data without consent. Organisations must protect the data they collect and use it only for stated purposes.
2. Intellectual Property Principle — Software, digital content, and creative works are protected by copyright and intellectual property laws. Users should not copy, distribute, or use pirated software or media. Respecting intellectual property encourages innovation and creativity.
3. Authorised Access Principle — Users should access only those computer systems, networks, and data for which they have explicit permission. Unauthorised access (hacking) is unethical and illegal.
4. No Harm Principle — Technology should not be used to cause harm to others. This includes not creating or distributing malware, not engaging in cyber bullying, and not using technology to deceive or defraud people.
5. Responsibility Principle — Every user is accountable for their actions in the digital world. This includes taking responsibility for mistakes, not blaming others, and reporting security vulnerabilities responsibly.
6. Fairness Principle — Technology should be accessible to all without discrimination. Digital resources and opportunities should be distributed fairly, and no one should be excluded based on disability, economic status, or geography.
7. Professional Conduct Principle — IT professionals must maintain integrity, competence, and diligence. They should not misuse their technical knowledge to exploit vulnerabilities or cause harm.
Importance of Computer Ethics:
- Prevents misuse of technology for illegal or harmful purposes
- Protects individuals' privacy and personal data
- Promotes trust in digital systems and e-commerce
- Encourages responsible innovation and development
- Ensures a safe and respectful digital environment for all users
2. Explain cyber security measures in detail.
Cyber security refers to the practices, technologies, and processes designed to protect computers, networks, programs, and data from unauthorised access, attacks, and damage. Effective cyber security involves multiple layers of protection.
Key Cyber Security Measures:
1. Use Strong Passwords — Passwords should be at least 8-12 characters long, combining uppercase letters, lowercase letters, numbers, and special characters. Avoid using easily guessable information like names or birthdates. Use different passwords for different accounts and change them periodically.
2. Install and Update Antivirus Software — Antivirus software detects, prevents, and removes malware such as viruses, worms, and trojans. It must be updated regularly to recognise the latest threats. Schedule automatic scans and keep virus definitions current.
3. Use a Firewall — A firewall monitors and controls network traffic, blocking unauthorised access while allowing legitimate communication. Both hardware and software firewalls should be deployed for layered protection.
4. Encrypt Sensitive Data — Encryption converts data into an unreadable format that can only be accessed with the correct key. Use encryption for sensitive files, emails, and online transactions. HTTPS ensures encrypted communication between browsers and websites.
5. Keep Software Updated — Software updates and patches fix known security vulnerabilities. Operating systems, browsers, and applications should be set to update automatically. Outdated software is a common entry point for cyber attacks.
6. Regular Data Backup — Maintain regular backups of important data on external drives or secure cloud storage. Follow the 3-2-1 rule: keep 3 copies, on 2 different media, with 1 offsite. Backups enable recovery in case of data loss from malware, hardware failure, or natural disasters.
7. Beware of Phishing and Spam — Do not click on suspicious links or open attachments from unknown senders. Verify the authenticity of emails requesting personal information. Use spam filters and avoid sharing sensitive data through unsecured channels.
8. Secure Physical Access — Restrict physical access to computers and servers. Use screen locks, biometric authentication, and secure storage for devices. Physical security is the first line of defence against data theft.
9. Educate Users — Conduct regular awareness training on cyber security threats and safe computing practices. Human error is a leading cause of security breaches. Users should understand the risks and know how to respond to threats.
10. Implement Access Control — Use role-based access control (RBAC) to limit data access based on user roles. Follow the principle of least privilege — give users only the access they need to perform their tasks.
These measures together create a comprehensive defence against cyber threats and ensure the confidentiality, integrity, and availability of digital assets.
3. Explain different types of malware (virus, worm, trojan, spyware, adware) with differences.
Malware (malicious software) refers to any software intentionally designed to cause harm to a computer system. The major types of malware are:
Common Mistakes to Avoid
1. Confusing computer ethics and cyber security — Ethics is about moral principles and responsible behaviour; cyber security is about technical measures to protect systems. They are related but distinct concepts.
2. Confusing hacker and cracker — A hacker may explore systems for learning or security testing (ethical hacker), while a cracker breaks into systems with malicious intent. Not all hackers are criminals.
3. Mixing up virus and worm — A virus needs a host file and user action to spread, while a worm is self-contained and spreads automatically through networks. Do not use them interchangeably.
4. Saying "firewall removes viruses" — A firewall blocks unauthorised network traffic; it does not detect or remove viruses. Antivirus software performs that function.
5. Treating encryption and password protection as the same — Password protection restricts access; encryption converts data into an unreadable format. Encrypted data can still be stolen but cannot be read without the key.
6. Forgetting the IT Act 2000 year — The correct year is 2000, not 1998, 2005, or 2008. The 2008 amendment updated the Act but the original enactment was in 2000.
7. Confusing phishing with spam — Spam is unsolicited bulk email (mostly advertising); phishing is a targeted fraud attempt to steal sensitive information. Phishing can use spam as a delivery method, but they are not the same.
8. Writing generic answers for long questions — In 5-mark questions, provide specific details, examples, and a comparison table where applicable. Vague or one-line points will not score full marks.
Exam Checklist
- [ ] Can define computer ethics and list its key principles (privacy, intellectual property, authorised access, no harm, responsibility, fairness, professional conduct)
- [ ] Can define cyber security and explain its importance
- [ ] Can list and explain at least five types of cyber crimes (hacking, identity theft, phishing, cyber stalking, online fraud)
- [ ] Can differentiate between a hacker and a cracker
- [ ] Can define virus, worm, trojan horse, spyware, and adware with examples
- [ ] Can compare virus vs. worm in a table format
- [ ] Can explain the role and types of firewall
- [ ] Can explain encryption and how it protects data
- [ ] Can describe antivirus software and its functions
- [ ] Can explain the IT Act 2000 with key sections and penalties
- [ ] Can list at least eight cyber security measures (passwords, antivirus, firewall, encryption, updates, backup, phishing awareness, physical security)
- [ ] Can differentiate between phishing and spam
- [ ] Can explain digital signatures and their purpose
- [ ] Can write detailed answers with examples, not just one-line definitions
- [ ] Know the penalties under the IT Act 2000 for hacking (Section 66) and identity theft (Section 66C)