Computer Ethics and Cyber Security — Exercise Solutions

How to Use This Page

This page provides complete exercise solutions for the Computer Ethics and Cyber Security chapter from the TN State Board Class 11 Computer Science textbook. Here is how to get the most from it:

1. Attempt every question on your own first before reading the solution. Struggling with a question is how learning happens. 2. Read the "Key Concepts" recap if you are stuck — it covers the core theory needed for all exercise types. 3. Use the MCQ explanations to understand why each answer is correct, not just which answer is correct. 4. Pay attention to "Common Mistakes" — these are the exact errors examiners flag every year. 5. Before the exam, go through the Exam Checklist to make sure you have not missed any important point.

---

Key Concepts (Quick Recap)

Computer Ethics

Types of Cyber Crimes

Cyber Security Measures

Intellectual Property Rights (IPR)

IT Act 2000 — Key Provisions

Ethical Guidelines

---

I. Choose the Best Answer (MCQs)

1. Which of the following is NOT a type of cyber crime?

(a) Hacking (b) Phishing (c) Encryption (d) Identity theft

---

2. Which IPR protects the visual design of an object?

(a) Copyright (b) Patent (c) Trademark (d) Industrial Design

---

3. Under the IT Act 2000, which section deals with hacking?

(a) Section 43 (b) Section 65 (c) Section 66 (d) Section 67

---

4. A program that disguises itself as useful software but performs malicious actions is called:

(a) Virus (b) Worm (c) Trojan Horse (d) Spyware

---

5. Which of the following is an example of phishing?

(a) Sending bulk promotional emails to thousands of recipients (b) Creating a fake website that looks like a bank's site to steal login credentials (c) Writing a program that automatically replicates across a network (d) Using someone else's Aadhaar number without permission

---

6. The term "Digital Divide" refers to:

(a) The gap between computer viruses and antivirus programs (b) The gap between people who have access to technology and those who do not (c) The division between hardware and software (d) The difference between ethical and unethical hacking

---

7. Which of the following is a provision under Section 65 of the IT Act 2000?

(a) Publishing obscene information electronically (b) Tampering with computer source documents (c) Identity theft (d) Cheating by personation

---

8. A worm differs from a virus because:

(a) A worm requires a host file to attach to (b) A worm does not need user action and can spread automatically over networks (c) A worm is always less harmful than a virus (d) A worm only affects email programs

---

9. Which type of IPR protects a brand name or logo?

(a) Patent (b) Copyright (c) Trademark (d) Trade Secret

---

10. Two-Factor Authentication (2FA) uses:

(a) Two passwords (b) Something you know and something you have (c) Two different antivirus programs (d) Two different encryption methods

---

II. Fill in the Blanks

1. The practice of protecting computers, networks, and data from unauthorised access is called cyber security.

2. Gaining unauthorised access to a computer system is known as hacking.

3. A worm is a standalone malicious program that replicates itself to spread across networks without user action.

4. Phishing is a fraudulent attempt to obtain sensitive information by disguising as a trustworthy entity.

5. The IT Act 2000 is the primary legislation governing cyber activities in India.

6. Section 66 of the IT Act 2000 deals with the offence of hacking.

7. A Trojan Horse is a malicious program disguised as legitimate software.

8. Copyright protects original literary, artistic, musical, and software works under IPR.

9. A firewall is a network security system that monitors and controls incoming and outgoing traffic based on security rules.

10. The process of converting data into an unreadable format to protect it from unauthorised access is called encryption.

11. Using someone else's work or ideas without proper acknowledgement is called plagiarism.

12. The acceptable rules of behaviour for online communication are collectively called netiquette.

13. Identity theft involves stealing someone's personal information to commit fraud.

14. Ransomware is a type of malware that encrypts the victim's files and demands payment for decryption.

15. The gap between those who have access to modern information technology and those who do not is called the digital divide.

---

III. True or False

1. A virus can spread without any user action.

False. A virus needs user action (like opening an infected file) to spread. It is a worm that can spread automatically without any user intervention.

---

2. Encryption is a method of protecting data from unauthorised access.

True. Encryption converts readable data (plaintext) into an unreadable format (ciphertext) using cryptographic algorithms, making it inaccessible to unauthorised users who do not possess the decryption key.

---

3. Section 65 of the IT Act 2000 deals with hacking.

False. Section 65 deals with tampering with computer source documents. Hacking is covered under Section 66 of the IT Act 2000.

---

4. A trademark protects an invention or technical process.

False. A trademark protects brand names, logos, and slogans that identify goods or services. Inventions and technical processes are protected by patents, not trademarks.

---

5. Phishing attacks always come through email.

False. While email is the most common medium, phishing attacks can also come through fake websites, SMS messages (called "smishing"), phone calls (called "vishing"), and social media platforms.

---

6. Plagiarism is an ethical violation.

True. Plagiarism — using someone else's work, ideas, or words without giving proper credit — is both an ethical violation and, in many cases, a legal violation of copyright law. Academic institutions treat plagiarism as a serious offence.

---

7. A worm requires a host file to replicate.

False. A worm does not require a host file. It is a standalone, self-replicating program. It is a virus that attaches to a host file and requires the file to be executed for replication.

---

8. Two-Factor Authentication provides stronger security than a single password.

True. Two-Factor Authentication requires two separate forms of verification (something you know + something you have), making it significantly more secure than a single password, which can be guessed, stolen, or cracked.

---

IV. Match the Following

Set 1

• Virus requires a host file and user action — it cannot spread on its own.
• Worm is self-contained and propagates automatically across networks.
• Trojan Horse masquerades as useful software while performing malicious operations.
• Phishing uses social engineering to trick users into revealing personal data.
• Ransomware locks or encrypts data and extorts the victim for money.
• Spamming floods inboxes with unwanted, unsolicited messages.

Set 2

• Copyright covers original creative works (books, software, music, art) for the lifetime of the author plus 60 years in India.
• Patent grants exclusive rights to an invention for 20 years from the filing date.
• Trademark protects distinctive brand identifiers — names, logos, slogans — for 10 years, renewable indefinitely.
• Trade Secret protects confidential business information as long as it remains secret.
• Industrial Design protects the ornamental or aesthetic appearance of a product.
• Section 66 of the IT Act 2000 specifically criminalises hacking with punishment up to 3 years imprisonment.

---

V. Answer Briefly (2-Mark Questions)

1. What is cyber security? Why is it important?

Cyber security is the practice of protecting computer systems, networks, programs, and data from unauthorised access, cyber attacks, and damage. It involves technologies, processes, and practices designed to safeguard digital assets.

It is important because:

• It protects sensitive personal and financial data from theft and misuse.
• It ensures the confidentiality, integrity, and availability of information.
• It prevents financial losses, identity theft, and damage to reputation caused by cyber attacks.
• It safeguards national security by protecting critical infrastructure from cyber warfare.

---

2. Differentiate between a virus and a worm.

---

3. What is phishing? Give an example.

Phishing is a type of cyber attack where the attacker sends fraudulent emails, messages, or creates fake websites that appear to come from a trusted source, with the intention of tricking the victim into revealing sensitive information such as passwords, credit card numbers, or bank details.

Example: A person receives an email that looks like it is from their bank, asking them to "verify your account" by clicking a link. The link takes them to a fake website that captures their login credentials.

---

4. What is plagiarism? How can it be avoided?

Plagiarism is the act of using someone else's words, ideas, or work without giving proper credit to the original author, and presenting it as one's own. It is both unethical and, in many cases, illegal.

Plagiarism can be avoided by:

• Always citing the original source when quoting or paraphrasing someone's work.
• Using quotation marks for direct quotes.
• Providing proper references and bibliographies.
• Using plagiarism detection tools to check originality before submission.
• Expressing ideas in one's own words rather than copying directly.

---

5. What is the Digital Divide? Mention two causes.

The Digital Divide refers to the gap between individuals, communities, or nations that have access to modern information and communication technology (ICT) and those that do not. It results in unequal opportunities in education, employment, and social participation.

Two major causes are: 1. Economic disparity — People in lower income groups or developing nations cannot afford computers, smartphones, or internet access. 2. Lack of infrastructure — Rural and remote areas often lack reliable electricity, internet connectivity, and digital literacy programs.

---

VI. Answer in Detail (5-Mark Questions)

1. Explain the different types of cyber crimes with examples.

Cyber crimes are criminal activities carried out using computers or the internet. The major types are:

1. Hacking: Gaining unauthorised access to a computer system or network. Hackers exploit vulnerabilities to steal, modify, or delete data. Example: A hacker breaks into an e-commerce website's database and steals customer credit card information.

2. Virus: A malicious program that attaches itself to a legitimate file or program. When the infected file is opened, the virus activates, replicates, and can corrupt or delete data. Example: The CIH virus that overwrites data on the hard disk and damages the BIOS.

3. Worm: A standalone malicious program that replicates itself and spreads across networks without user action. Unlike viruses, worms do not need a host file. Example: The ILOVEYOU worm spread via email in 2000, infecting millions of computers worldwide and causing billions of dollars in damage.

4. Trojan Horse: A malicious program disguised as legitimate, useful software. It does not self-replicate but performs harmful operations once installed, such as stealing passwords or creating backdoors. Example: A free "antivirus" download that secretly installs a keylogger.

5. Phishing: A social engineering attack where fraudsters create fake emails, websites, or messages that mimic legitimate organisations to steal sensitive data. Example: A fake email pretending to be from SBI asking users to update their KYC details through a fraudulent link.

6. Ransomware: Malware that encrypts the victim's files and demands a ransom payment for the decryption key. Example: The WannaCry attack in 2017 that affected over 200,000 computers across 150 countries.

7. Identity Theft: Stealing someone's personal information — such as Aadhaar number, PAN, bank details — to commit fraud. Example: Using another person's identity to open credit card accounts or make online purchases.

8. Spamming: Sending unsolicited bulk messages, usually via email, for commercial advertising or phishing. It wastes bandwidth, clutters inboxes, and can carry malware.

---

2. Discuss Intellectual Property Rights (IPR) in detail. Explain the types of IPR with examples.

Intellectual Property Rights (IPR) are legal rights granted to creators and owners of intellectual creations — works of the mind such as inventions, literary and artistic works, designs, symbols, names, and images. IPR gives creators exclusive rights over their creations for a specified period, encouraging innovation and creativity while ensuring fair reward.

Types of IPR:

1. Copyright: Protects original literary, dramatic, musical, and artistic works, as well as software and databases. In India, copyright lasts for the lifetime of the author plus 60 years. It gives the author the exclusive right to reproduce, distribute, perform, and adapt the work.

• Example: A Tamil novel, a film soundtrack, a computer program, or a photograph.

2. Patent: Protects inventions — new products, processes, or technical solutions that involve an inventive step and are capable of industrial application. In India, a patent is granted for 20 years from the filing date. After expiry, the invention enters the public domain.

• Example: A new drug formula discovered by a pharmaceutical company, a novel mechanical device.

3. Trademark: Protects distinctive signs that identify goods or services of a particular business — brand names, logos, slogans, and symbols. In India, trademark registration is valid for 10 years and can be renewed indefinitely.

• Example: The Tata logo, the "Amul" brand name, Nike's "swoosh" symbol.

4. Trade Secret: Protects confidential business information that provides a competitive advantage — formulas, practices, designs, instruments, or patterns. Protection lasts as long as the information remains secret. There is no formal registration process.

• Example: The Coca-Cola recipe, the KFC spice blend, Google's search algorithm.

5. Industrial Design: Protects the ornamental or aesthetic aspect of an object — its shape, pattern, colour, or texture. In India, design registration is valid for 10 years, extendable by 5 more years.

• Example: The distinctive shape of the Coca-Cola bottle, the design of a Samsung smartphone.

Importance of IPR:

• Encourages innovation and creativity by rewarding creators.
• Protects the rights of inventors, authors, and businesses.
• Promotes fair competition and prevents unfair copying.
• Facilitates technology transfer and economic growth.

---

3. Explain the key provisions of the IT Act 2000 and discuss cyber security measures that individuals and organisations should adopt.

The Information Technology Act, 2000 is India's primary legislation governing cyber activities. It was enacted to provide legal recognition for electronic transactions and to address cyber crimes. Key provisions include:

Key Provisions of the IT Act 2000:

The Act was amended in 2008 (IT Amendment Act 2008) to address newer forms of cyber crime, including identity theft, cyber terrorism, and voyeurism.

Cyber Security Measures:

For Individuals: 1. Use strong passwords: Create complex passwords with a mix of uppercase, lowercase, numbers, and special characters. Never share passwords. 2. Enable Two-Factor Authentication (2FA): Add a second layer of security beyond just a password. 3. Install and update antivirus software: Detect and remove malware; keep definitions current. 4. Be cautious with emails and links: Do not click suspicious links or download attachments from unknown senders — these could be phishing attempts. 5. Regular backups: Maintain copies of important data on external drives or cloud storage to recover from ransomware or hardware failure. 6. Keep software updated: Install security patches and updates for the OS, browser, and all applications.

For Organisations: 1. Deploy firewalls: Monitor and filter network traffic to block unauthorised access. 2. Implement encryption: Protect sensitive data in transit and at rest using strong encryption algorithms. 3. Access control: Use role-based access control (RBAC) to restrict system access to authorised personnel only. 4. Security audits: Conduct regular security audits and penetration testing to identify vulnerabilities. 5. Employee training: Educate employees about phishing, social engineering, and safe computing practices. 6. Incident response plan: Prepare a documented plan for detecting, responding to, and recovering from security breaches. 7. Data backup and disaster recovery: Maintain off-site backups and tested recovery procedures.

---

4. Explain computer ethics and the ethical guidelines that every computer user should follow.

Computer Ethics is a branch of practical philosophy that addresses how computing professionals and users should make decisions regarding the moral use of technology. It deals with the right and wrong use of computers, software, data, and networks.

Core Principles of Computer Ethics:

1. Respect for Intellectual Property: Do not copy, distribute, or use software, music, videos, or any creative work without proper authorisation or licence. Software piracy violates copyright law and deprives creators of their rightful earnings.

2. Respect for Privacy: Do not access, collect, or share personal data without the owner's consent. Every individual has the right to control their own personal information. Organisations must handle user data transparently and securely.

3. Do No Harm: Computers should not be used to harm others — this includes cyber bullying, spreading malware, hacking, defamation, and any form of digital harassment.

4. Honesty and Integrity: Do not falsify data, misrepresent yourself online, or engage in fraud. Be truthful in digital communications and transactions.

5. Responsible Use of Resources: Do not waste computing resources — bandwidth, storage, or processing power. Avoid spamming, excessive downloads, or unnecessary network traffic.

6. Respect for Others' Work: Do not plagiarise. Always acknowledge and properly cite sources when using others' ideas, text, code, or media.

7. Compliance with Laws: Follow all applicable laws — the IT Act 2000, copyright laws, and organisational policies. Ignorance of the law is not an excuse.

8. Confidentiality: Respect the confidentiality of information that comes to you in the course of your work. Do not disclose sensitive data without authorisation.

9. Bridging the Digital Divide: Support efforts to provide technology access to underserved communities. Recognise that equitable access to technology is essential for social justice.

10. Netiquette: Follow good online manners — be polite, avoid flaming, do not spam, respect others' time and bandwidth, and maintain professionalism in digital communications.

Guidelines from Professional Bodies:

• The ACM (Association for Computing Machinery) Code of Ethics emphasises contributing to society, avoiding harm, being honest, respecting privacy, and honouring confidentiality.
• The IEEE (Institute of Electrical and Electronics Engineers) Code of Ethics stresses holding paramount the safety, health, and welfare of the public.
• The IT Act 2000 provides the legal framework, but ethical behaviour goes beyond what the law mandates — it is about doing the right thing even when no one is watching.

---

Common Mistakes to Avoid

1. Confusing virus and worm: A virus needs a host file and user action to spread; a worm is standalone and self-replicating. Do not write that a worm "attaches to a file" — that describes a virus.

2. Mixing up IPR types: Copyright protects creative works, patents protect inventions, and trademarks protect brand identifiers. Do not write that a "patent protects a logo" or that "copyright protects an invention" — these are common examiner-trap statements.

3. Citing the wrong IT Act section: Section 65 is for tampering with source documents, Section 66 is for hacking, and Section 67 is for obscene content. Memorise these carefully — exam questions frequently test section numbers.

4. Writing that phishing only happens via email: Phishing can occur through SMS (smishing), voice calls (vishing), and fake websites, not just email. Restricting it to email alone will lose marks.

5. Saying encryption is a cyber crime: Encryption is a security measure, not an attack. Students sometimes list it under cyber crimes because it sounds technical. Always categorise it correctly as a data protection technique.

6. Confusing ethical hacking with criminal hacking: Ethical (or "white hat") hacking is performed with authorisation to find vulnerabilities and improve security. Criminal ("black hat") hacking is unauthorised and illegal. Do not treat all hacking as inherently criminal.

7. Forgetting to mention the IT Amendment Act 2008: The original IT Act 2000 did not cover identity theft, cyber terrorism, or voyeurism. These were added by the 2008 amendment. Mentioning the amendment shows thorough preparation.

---

Exam Checklist

Before your exam, make sure you can answer the following:

• [ ] Define cyber security and explain why it matters
• [ ] List and explain at least 6 types of cyber crimes with examples
• [ ] Clearly differentiate between virus, worm, and Trojan Horse
• [ ] Define phishing and explain how it works with an example
• [ ] Define ransomware and identity theft with examples
• [ ] Explain what IPR is and describe all 5 types: copyright, patent, trademark, trade secret, industrial design
• [ ] State the duration of protection for each IPR type under Indian law
• [ ] Explain at least 4 key sections of the IT Act 2000 (Sections 43, 65, 66, 66C, 66D, 67, 72)
• [ ] Describe the punishment prescribed under each relevant IT Act section
• [ ] List and explain at least 5 cyber security measures (for individuals and organisations)
• [ ] Define the Digital Divide and list its causes and consequences
• [ ] Define plagiarism and explain how to avoid it
• [ ] Explain the concept of netiquette and list at least 3 rules
• [ ] Differentiate between ethical hacking and criminal hacking
• [ ] Explain encryption and how it protects data
• [ ] Describe Two-Factor Authentication and why it is more secure than a password alone
• [ ] State the purpose of a firewall
• [ ] Recall that the IT Amendment Act 2008 added provisions for identity theft, cyber terrorism, and voyeurism