Internet Fundamentals & Applications
Practice Questions by Chapter
A comprehensive chapter-wise practice bank based on the Lincoln University College BBA 1233 syllabus, covering networks, web architecture, security protocols, e-payment, and storage concepts.
Background Study and Revision of Computer Network, Internet and E-mail
BBA 1233 - Internet Fundamentals & Applications - Chapter 1
Section A - Very Short Answer
2 Marks EachHint & Explanation: A global network of interconnected computer networks that use the standardized Transmission Control Protocol/Internet Protocol (TCP/IP) suite to link devices worldwide.
Study Tip: Highlight that it is a 'network of networks' and relies on the TCP/IP protocol suite.
Hint & Explanation: The engineering discipline concerned with the communication between autonomous computer systems, allowing them to share resources, transfer data, and communicate electronically.
Study Tip: Keep it simple: focus on connection, autonomous systems, and resource/data sharing.
Hint & Explanation: A unidirectional communication channel where data flows in only one direction from sender to receiver. The receiver cannot send data back (e.g., traditional television or radio broadcasts).
Study Tip: Use a simple diagram or real-world example like a radio station broadcast to illustrate unidirectional flow.
Hint & Explanation: A bidirectional communication mode where data can flow in both directions, but not simultaneously. Devices must take turns sending and receiving (e.g., walkie-talkies).
Study Tip: Key phrase to include: 'both directions but not at the same time.'
Hint & Explanation: A bidirectional communication mode where data can travel in both directions at the same time (e.g., landline or cellular phone calls).
Study Tip: Contrast it directly with half-duplex by emphasizing the word 'simultaneously' or 'at the same time'.
Hint & Explanation: The process of varying one or more properties (amplitude, frequency, or phase) of a high-frequency carrier signal in accordance with a data-bearing modulating signal.
Study Tip: Explain that modulation is necessary to transmit low-frequency digital data over long distance analog channels.
Hint & Explanation: The three primary types of modulation are Amplitude Modulation (AM), Frequency Modulation (FM), and Phase Modulation (PM).
Study Tip: Briefly mention that these can apply to both analog and digital signals (e.g., ASK, FSK, PSK).
Hint & Explanation: 1. Formal communications and record-keeping (such as sending contracts or official notifications). 2. Customer support and marketing campaigns.
Study Tip: Focus on formal documentation and direct customer communication channels.
Section B - Short Answer
7 Marks EachHint & Explanation: Discuss the creation of ARPANET in 1969 by the US Department of Defense, the development of packet switching technology, the introduction of the TCP/IP protocol suite in 1983, and the design of the World Wide Web by Tim Berners-Lee in 1989.
Study Tip: Structure your answer in chronological order: ARPANET, TCP/IP standardization, and the birth of WWW.
Hint & Explanation: Networking is essential because it enables centralized database access, cost savings via hardware sharing (e.g., printers, storage arrays), rapid electronic communications, automated backups, and real-time remote collaboration.
Study Tip: Group your points into categories: cost reduction, resource access, security, and communication speed.
Hint & Explanation: Simplex is one-way only (e.g., keyboard to CPU). Half-Duplex is two-way but one at a time (e.g., walkie-talkie, Wi-Fi). Full-Duplex is two-way simultaneously (e.g., telephone call). Detail the bandwidth usage differences.
Study Tip: Draw a simple directional arrow diagram for each mode to make the comparison visually clear.
Hint & Explanation: Multiplexing is the technique of combining multiple analog or digital signals into a single composite signal over a shared physical medium. It is used to maximize bandwidth utilization and reduce communication infrastructure costs.
Study Tip: Explain that it acts like a multi-lane highway merging into a single tunnel, sorted back at the exit.
Hint & Explanation: Modulation adapts data for physical transmission. In AM, the amplitude of the carrier wave is modified. In FM, the frequency is changed. In PM, the phase angle of the carrier wave is varied to represent data values.
Study Tip: Use a quick wave-shape description for AM (changing height) and FM (changing speed of cycles).
Hint & Explanation: Businesses use the Internet for supply chain management (procurement), customer relationship management (CRM), digital advertising, hosting e-commerce storefronts, remote employee work (via VPNs), and data synchronization in the cloud.
Study Tip: Give concrete examples like cloud document editing, online billing, and video conferences.
Hint & Explanation: Email offers an asynchronous medium (reply when convenient), leaves a clear audit trail of past messages, allows attaching documents, operates globally at near-zero cost, and supports broadcast updates to thousands of users simultaneously.
Study Tip: Emphasize professionalism, legal records, and speed of delivery.
Section C - Long Answer
15 Marks EachHint & Explanation: Trace the progress through key phases: 1. ARPANET (late 1969) connecting research centers. 2. Development of packet switching theory. 3. Creation of TCP/IP by Vint Cerf and Bob Kahn. 4. NSFNET expansion in the 1980s. 5. Decommissioning of ARPANET and privatization of networks. 6. Tim Berners-Lee creating HTML, HTTP, URLs, and the first browser. 7. The 90s commercial explosion (Netscape, dot-com boom) leading to dynamic Web 2.0 and mobile internet.
Study Tip: Divide your essay into chronological sub-sections. Mention the shift from command-line research portals to graphical web browsers.
Hint & Explanation: Components: hardware (NICs, switches, routers, cabling) and software (network operating systems, protocol drivers). Advantages: file sharing, resource optimization, reliability, remote control. Challenges: security vulnerabilities, high setup and licensing costs, administration complexity, single points of failure.
Study Tip: Organize using three clear sections: Physical/Logical Components, Business Advantages, and Technical/Financial Challenges.
Hint & Explanation: Analog signals are continuous waves; digital are discrete, binary pulses. Compare bandwidth, noise vulnerability, and distance limits. Explain the role of a MODEM (Modulator-Demodulator) in converting digital computer signals into analog waves for phone/coaxial lines, and back again.
Study Tip: Use a comparison table for the parameters (noise, speed, medium, wave type) to score higher.
Hint & Explanation: Examine email, VoIP, enterprise messengers (Slack/Teams), cloud storage, and video conferencing. Analyze: 1. Elimination of geographic barriers. 2. Fast feedback cycles. 3. Multi-national virtual teams. 4. Operational cost reductions (fewer business trips). 5. Collaboration tools integration.
Study Tip: Connect each technology to a business metric, e.g., how VoIP reduces international phone bill costs.
Hint & Explanation: FDM (Frequency Division Multiplexing) splits bandwidth into frequency channels (e.g., cable TV). TDM (Time Division Multiplexing) assigns time slots to users (e.g., digital telephony). WDM (Wavelength Division Multiplexing) merges light beams of different wavelengths over fiber optics.
Study Tip: Specifically mention that WDM is the light-based equivalent of FDM, used extensively in fiber networks.
Internet, World Wide Web, Internet Search, E-mail and Computer Network
BBA 1233 - Internet Fundamentals & Applications - Chapter 2
Section A - Very Short Answer
2 Marks EachHint & Explanation: An information system of interlinked web documents and hypermedia resources accessible via the Internet using protocols like HTTP and identified by URLs.
Study Tip: Remember that the Web is a service on top of the Internet, not the Internet itself.
Hint & Explanation: A software application designed to retrieve, compile, and display resources from the WWW, translating HTML code into visual web pages (e.g., Chrome, Firefox).
Study Tip: Mention that it acts as the client interpreter of web languages.
Hint & Explanation: A web-based service that searches database indexes of web documents to retrieve relevant resources based on search queries entered by users.
Study Tip: Google, Bing, and DuckDuckGo are good examples to list.
Hint & Explanation: 1. Online electronic storefronts (e-tailing). 2. Integrated inventory and logistics management portals.
Study Tip: E-tailing and digital shopping carts are excellent examples.
Hint & Explanation: The process of searching, aggregating, and organizing digital information from online databases, web pages, and academic portals for specific research or business use.
Study Tip: Mention that it forms the foundation of business intelligence.
Hint & Explanation: Uniform Resource Locator. It is a reference address that specifies the location of a resource (like a web page) on a computer network and the mechanism for retrieving it.
Study Tip: Identify the parts of a URL: protocol (https) and host/domain name.
Hint & Explanation: The application-layer protocol used as the foundation of data communication on the World Wide Web, running on top of the TCP/IP stack.
Study Tip: Explain that HTTP is request-response based.
Hint & Explanation: The direct sale of physical or digital products to consumers via electronic channels, eliminating the need for a physical store location.
Study Tip: Specify B2C (Business-to-Consumer) transactions as the core of e-tailing.
Section B - Short Answer
7 Marks EachHint & Explanation: The Internet is the global physical infrastructure of hardware (routers, satellites, cables) and protocol standards. The World Wide Web is an application service that runs on top of this infrastructure, using HTML and HTTP to link information.
Study Tip: Use the analogy: Internet is the highway system; WWW is the traffic or vehicles driving on it.
Hint & Explanation: The process: 1. User enters URL. 2. DNS translates host to IP. 3. Browser sends HTTP GET request. 4. Server returns HTML/CSS/JS files. 5. Browser engine parses HTML to build DOM, parses CSS to style, executes JS, and renders pixels.
Study Tip: Describe this as a step-by-step cycle starting from the URL input to the final render.
Hint & Explanation: 1. Crawling: automated bots scan links to find new pages. 2. Indexing: pages are parsed, cataloged, and stored in a giant index database. 3. Ranking/Retrieval: algorithms assess query matches based on relevance, keywords, and authority.
Study Tip: Clearly define the three stages: Crawler (bot), Database (index), and Algorithm (ranking).
Hint & Explanation: Daily: communication, digital media streaming, online banking, social networking. Business: online marketing, global payroll management, client CRM tools, inventory synchronization, e-procurement.
Study Tip: Ensure a balance: show both personal daily applications and corporate operational uses.
Hint & Explanation: SEO increases a website's organic visibility on search results. It helps businesses by bringing in free targeted traffic, improving user experience, building brand authority, and reducing digital ad spend.
Study Tip: Explain that SEO connects searchers directly with businesses when they are actively looking to buy.
Hint & Explanation: Browsers provide the graphical portal for web apps, manage local cookies for session control, store security certificates, sandbox scripts to protect the user's OS, and support extensions to add user features.
Study Tip: Highlight that browsers have evolved from simple page viewers to complex virtual operating platforms.
Hint & Explanation: Online research allows businesses to perform real-time market analysis, track competitors' prices, study customer feedback on forums, review supply costs, and run predictive analytics on economic trends.
Study Tip: Discuss this as turning raw data gathered from the internet into actionable strategic choices.
Section C - Long Answer
15 Marks EachHint & Explanation: 1. Communication: shifts from post/telex to instant email, messaging, and video calls. 2. Information: democratization of knowledge, online wikis, journals, and search databases. 3. Commerce: emergence of global marketplaces, direct-to-consumer sales, frictionless cross-border payments, and digital marketing ecosystems. Analyze social impacts, global trade networks, and shifts in consumer habits.
Study Tip: Write a structured answer addressing the three elements in the question: Communication, Information, and Commerce.
Hint & Explanation: Architecture: Crawlers (Spiders), Document Parser, Index Database, Query Processor, PageRank/Ranking Engine. Indexing challenges: 1. Scale of web data. 2. Dynamic, database-driven pages (AJAX/JS). 3. Web spam and duplicate content. 4. Real-time updates (news, stock values). 5. Natural language intent interpretation.
Study Tip: Draw a simple block diagram representing the crawler, index database, ranking engine, and the user interface.
Hint & Explanation: E-Commerce: virtual storefronts active 24/7, digital product delivery, automated checkouts. Customer Support: web FAQ portals, automated AI chatbots, ticket systems. Global Outreach: target ads by country, search visibility, social media influencer marketing, and entering new geographic markets without physical offices.
Study Tip: Provide real examples (e.g., Shopify for e-commerce, Zendesk for support, social media for outreach).
Hint & Explanation: Traces: 1. Early text browsers (Lynx) and Mosaic/Netscape Navigator. 2. Browser Wars (Netscape vs Internet Explorer). 3. Introduction of web standards (W3C, CSS, Javascript). 4. Modern browser engines (Blink, WebKit, Gecko). 5. Native web apps (WebAssembly, WebGL, APIs for camera/location). 6. Security sandboxing and cookie privacy changes.
Study Tip: Highlight how browsers now support heavy games and business software directly, replacing desktop apps.
Hint & Explanation: E-tailing benefits: low overhead (no rent/in-store staff), global audience, data collection, easy scaling. Traditional benefits: immediate delivery, sensory assessment, personal service, higher trust. E-tailing challenges: cyber-security risks, shipping logistics, high returns rate, intense competition, lack of personal touch.
Study Tip: Use a comparison table structure evaluating metrics like reach, inventory costs, user trust, and operating hours.
Brief Introduction to LAN
BBA 1233 - Internet Fundamentals & Applications - Chapter 3
Section A - Very Short Answer
2 Marks EachHint & Explanation: A privately owned computer network that interconnects workstations and devices within a limited geographical area, such as a home, office, or school.
Study Tip: Key elements: limited geographical scope, private ownership, and high data transfer rates.
Hint & Explanation: A unique numerical label assigned to each device on a network that uses the Internet Protocol for node identification and routing path discovery.
Study Tip: Mention that it acts like a home mailing address for network communication.
Hint & Explanation: A secure, private network built using internet technologies (HTML, TCP/IP) that is restricted to authorized employees within an organization.
Study Tip: Contrast it with the Internet: it is private, internal, and sits behind a firewall.
Hint & Explanation: A private network that uses internet protocols to securely share parts of an organization's information or operations with external partners, suppliers, or customers.
Study Tip: Think of it as a secure bridge connecting the internal intranet to trusted external partners.
Hint & Explanation: A network that spans a larger geographical area than a LAN (such as a city or university campus) but is smaller than a WAN.
Study Tip: MANs typically interconnect multiple LANs using high-speed backbone connections.
Hint & Explanation: IPv4 utilizes a 32-bit address space (4 billion addresses, written in decimal). IPv6 utilizes a 128-bit address space (written in hexadecimal).
Study Tip: Focus on bit size (32-bit vs 128-bit) and format style.
Hint & Explanation: A network addressing architecture that divides the IPv4 address space into five distinct classes (Class A, B, C, D, E) based on the first few bits of the address.
Study Tip: State that classes determine the division between network bits and host bits.
Hint & Explanation: Sharing network resources such as central files, database servers, and high-volume office printers among employees.
Study Tip: Resource sharing and local database hosting are the most common uses.
Section B - Short Answer
7 Marks EachHint & Explanation: LANs are needed to facilitate local resource sharing (printers, scanners, servers), enable fast local file transfers, provide centralized software installation and network security management, and support local communication like email or intranet portals.
Study Tip: Discuss resource efficiency, security consolidation, and team communication.
Hint & Explanation: LAN: small area (building), high speed (Gbps), low cost. MAN: medium area (city), medium-high speed, medium cost. WAN: large area (country/globe), lower speed (due to distance routing), high infrastructure maintenance cost.
Study Tip: A simple bulleted comparison under three headings (Span, Speed, Cost) works best.
Hint & Explanation: Internet: public, accessible to anyone globally, low security. Intranet: private, accessible only to internal employees, high security. Extranet: semi-private, accessible to employees and trusted external partners, selective security settings.
Study Tip: Compare access levels: open (Internet) vs closed (Intranet) vs selective (Extranet).
Hint & Explanation: Class A: starts with bit 0 (range 1-126), uses 8 network bits (large networks). Class B: starts with bits 10 (range 128-191), uses 16 network bits. Class C: starts with bits 110 (range 192-223), uses 24 network bits (small networks). Classes D (multicast) and E (experimental) complete the pool.
Study Tip: Mention the range of the first octet and the network/host partition for each class.
Hint & Explanation: Trace the birth of LAN in the 1970s with Xerox's Ethernet, the competition with Token Ring in the 1980s, the shift from coaxial cables to twisted-pair copper cables (UTP) and switches in the 1990s, and the rise of high-speed Wi-Fi standards (IEEE 802.11).
Study Tip: Emphasize Ethernet's evolution to the dominant LAN protocol standard.
Hint & Explanation: IP addressing is critical because it provides a standard logical label for devices. Every packet contains source and destination IP addresses, which intermediate routers use to make path decisions, forwarding packets hop-by-hop across networks.
Study Tip: Explain that without unique IP addresses, routers would not know where to direct packets.
Hint & Explanation: LANs allow employees to access shared file systems (NAS), run centralized business software (ERP/accounting), collaborate on local database applications, share office equipment, and use local instant messaging securely without web exposure.
Study Tip: Focus on office collaboration, security from internet threats, and equipment cost savings.
Section C - Long Answer
15 Marks EachHint & Explanation: Hardware components: Network Interface Cards (NICs), switches, routers, wireless access points. Transmission media: twisted-pair (UTP/STP), fiber optic cables, wireless radio channels. Business benefits: cost reduction, central management, fast communication, data centralization, and security boundaries.
Study Tip: Break your response down into three clear headings: 1. LAN Hardware, 2. LAN Cabling/Wireless Media, and 3. Enterprise Value.
Hint & Explanation: 1. Access: public vs staff vs partners. 2. Security: open network vs firewalls/air-gaps vs VPNs/selective ACLs. 3. Enterprise apps: web advertising/sales (Internet) vs internal HR/documentation databases (Intranet) vs vendor supply-chain portals (Extranet).
Study Tip: Use a detailed grid table comparing audience, safety measures, hosting environments, and typical business uses.
Hint & Explanation: IPv4: 32 bits, 4 octets, network and host portions. Classful limits (waste of addresses). Subnetting (using subnet masks to segment networks into smaller subnets, reducing broadcast domains and saving IP addresses). Transition to IPv6: address exhaustion, dual-stacking, tunneling, and translation.
Study Tip: Explain subnetting mathematically as borrowing host bits to create network segments.
Hint & Explanation: Design steps: 1. Requirement gathering (number of nodes). 2. Physical topology selection (Structured Star). 3. Wiring closets (MDF/IDF) and cabling infrastructure (Cat6/Fiber backbones). 4. Switch allocation, VLAN segmentation (separating HR, guest, finance). 5. Router and firewall gateway installation for WAN access. 6. Redundancy design.
Study Tip: Use architectural terms like MDF (Main Distribution Frame), VLANs (Virtual LANs), and structured cabling.
Hint & Explanation: 1. IP addressing: provides logical address. 2. DHCP (Dynamic Host Configuration Protocol): automatically leases IP address, subnet mask, default gateway, and DNS servers to client nodes on startup. 3. DNS (Domain Name System): translates domain names to IPs, allowing easy communication without memorizing numbers.
Study Tip: Describe how these three services interact when a client boot-ups and attempts to browse a website.
Network Architecture
BBA 1233 - Internet Fundamentals & Applications - Chapter 4
Section A - Very Short Answer
2 Marks EachHint & Explanation: The physical or logical layout of nodes (computers, routers) and link connections (cables, wireless) in a computer network.
Study Tip: Mention that it can be described either physically (wiring layout) or logically (data flow path).
Hint & Explanation: A network design where all nodes are connected directly to a single central cable (the backbone) with terminators at each end.
Study Tip: Include the term 'terminators' in the explanation to show technical completeness.
Hint & Explanation: A network design where each device has a dedicated point-to-point connection to a central node, such as a switch or hub.
Study Tip: State that the central node manages all traffic transfers between devices.
Hint & Explanation: A network architecture model where all computers (peers) have equal privileges and responsibilities, acting as both clients and servers.
Study Tip: Key points: decentralized, no central server, peers share resources directly.
Hint & Explanation: A centralized network architecture model where clients (user stations) request services and resources from dedicated, high-performance servers.
Study Tip: Emphasize centralization of resources (database, security, files) on the server.
Hint & Explanation: The actual physical layout and routing of transmission media (cables, optical fiber, wireless paths) and hardware nodes.
Study Tip: Contrast it with logical topology: physical is about physical cords and devices.
Hint & Explanation: The operational path that data frames take to travel through the network medium from node to node, regardless of physical cable connections.
Study Tip: For instance, a physical Star network can operate as a logical Ring.
Hint & Explanation: A network design that integrates two or more different basic topologies (e.g., Star-Bus or Star-Ring) to form a larger network infrastructure.
Study Tip: Give the example of connecting star-network clusters using a bus backbone.
Section B - Short Answer
7 Marks EachHint & Explanation: Bus: cheap, easy to install, but backbone break takes down whole network. Star: highly reliable (one link break affects one node), easy to troubleshoot, but central switch failure stops everything. Ring: predictable data flow, no collisions, but node failure breaks the circle.
Study Tip: Use bullet points to list pros and cons for each topology type clearly.
Hint & Explanation: Physical topology is the physical cabling configuration. Logical topology is how data packets are handled. Example: 1. A physical Star network using a Hub broadcasts data to all ports, acting like a logical Bus. 2. Token Ring setups using a central MAU unit.
Study Tip: Show that logical topology is about signaling and protocol rules, while physical is about hardware placement.
Hint & Explanation: Client-Server: centralized data, high security, scalable, expensive, requires network admin. Peer-to-Peer: decentralized, low security, difficult to scale past 10 nodes, cheap, easy to setup without admin.
Study Tip: Highlight administrative control, cost, and security parameters in the comparison.
Hint & Explanation: Also called a Star-of-Stars or Extended Star. It connects multiple individual Star networks to a central switch. Widely applied in corporate offices and school campuses where each department/floor has a switch that connects to a main server room switch.
Study Tip: Discuss its utility in hierarchical wiring and scale.
Hint & Explanation: Servers are configured for specific tasks: 1. File servers store shared files. 2. Print servers manage print queues. 3. Database servers run DBMS applications. 4. Mail servers route emails. 5. Web servers host intranet pages. This specialization optimizes hardware performance.
Study Tip: Discuss how separating server roles improves efficiency and reliability.
Hint & Explanation: Bus networks use Carrier Sense Multiple Access with Collision Detection (CSMA/CD). Nodes listen to the bus. If free, they transmit. If two transmit at once, a collision occurs. Nodes detect it, send a jam signal, wait a random time, and retransmit.
Study Tip: Detail the steps: Listen (Carrier Sense), Transmit, Detect Collision, Jam, Backoff, Retry.
Hint & Explanation: Preferred in small setups (under 10 nodes) where budget is tight, security risks are low, and users just need basic file and printer sharing. Also preferred in distributed internet systems (like BitTorrent or blockchain node networks) to avoid server bottlenecks.
Study Tip: Mention two scopes: local SOHO networks and massive decentralized web systems.
Section C - Long Answer
15 Marks EachHint & Explanation: Evaluate: 1. Bus: lowest cost, poor scalability, low reliability. 2. Star: moderate cost, excellent scalability, high reliability (excluding switch). 3. Ring: moderate cost, poor scalability, low reliability unless redundant. 4. Mesh: high reliability (fully redundant), extreme cost (cabling), poor scalability for large networks. 5. Hybrid: flexible, scalable, complex troubleshooting.
Study Tip: Use a matrix table evaluating: Cabling Cost, Node Failure Impact, Ease of Adding Nodes, and Troubleshooting.
Hint & Explanation: 1. Performance: central server handles heavy loads but can bottleneck; P2P distributes file sharing loads. 2. Security: server supports active directory and central firewalls; P2P depends on individual node security. 3. Management: centralized updates and backups; P2P requires managing each station. 4. Cost: Server licensing, hardware, admin salaries vs basic hardware costs.
Study Tip: Break this into distinct paragraphs for Performance, Security, Management, and Cost, then draw a summary table.
Hint & Explanation: Ethernet: typically physical Star layout (using switches) but operates as a logical Bus where nodes broadcast frames. Uses CSMA/CD or full-duplex switches. Token Ring: physical Star wiring (cables connect to a Central Hub/MAU) but logical flow is a Ring, passing a special token frame from node to node to prevent collisions.
Study Tip: Show that physical layout is how hardware is placed, while logical flow is how signaling protocols govern network access.
Hint & Explanation: Design details: 1. Topology: Physical star using Cat6 UTP cables connected to switches on each floor, linked via fiber to core router. 2. Model: Client-Server model with active directory domain controller for security. 3. Allocation: Dedicated servers for files, database, and local print management. 4. Subnetting/VLANs to separate departments (guest, finance, production).
Study Tip: Structure as a formal technical proposal with steps: Topology, Cabling, Network Model, Server Roles, and Security/VLANs.
Hint & Explanation: 1. NOS (Network Operating System) like Windows Server or Linux manages network resources and accounts. 2. Client-Server interaction: client applications send network packets (SQL query, API call, HTTP request). 3. Network stack packages data. 4. Server receives, runs the logic, accesses databases, and sends back the responses. Detail database locking and security validation.
Study Tip: Explain the software layers (drivers, NOS, application server) that enable client-server computing.
Architecture of Internet
BBA 1233 - Internet Fundamentals & Applications - Chapter 5
Section A - Very Short Answer
2 Marks EachHint & Explanation: A computer system that hosts web application files and runs server software (like Apache, Nginx) to process and respond to HTTP/HTTPS requests from client browsers.
Study Tip: Mention that it processes client requests and sends back HTML documents or digital assets.
Hint & Explanation: Transmission Control Protocol/Internet Protocol. The suite of communication protocols used to interconnect network devices on the Internet, providing packet delivery and reliable sessions.
Study Tip: State that TCP handles segment reliability and packet ordering, while IP handles logical addressing and routing.
Hint & Explanation: A hierarchical, distributed database system that translates human-readable domain names (e.g., google.com) into machine-readable IP addresses.
Study Tip: Use the term 'phonebook of the Internet' as a helpful analogy.
Hint & Explanation: A unique, human-readable string associated with a physical IP address, used to identify a specific web page or server on the Internet.
Study Tip: Give examples like 'yahoo.com' or 'wikipedia.org'.
Hint & Explanation: The final suffix segment of a domain name, indicating the domain type or country code (e.g., .com, .org, .gov, .edu, .uk).
Study Tip: State that TLDs are managed globally by registries overseen by ICANN.
Hint & Explanation: A process where a secondary DNS server copies DNS zone database records from a primary DNS server to maintain database consistency and redundancy.
Study Tip: Identify it as a protocol mechanism (using AXFR/IXFR) to replicate DNS data.
Hint & Explanation: HTTP uses transmission port 80; HTTPS (encrypted secure connection) uses transmission port 443.
Study Tip: Associate port 80 with unsecure traffic and port 443 with SSL/TLS secure traffic.
Hint & Explanation: The administrative process of reserving a unique domain name on the Internet for a designated period (usually annually) through an accredited registrar.
Study Tip: State that registered domains must be unique to avoid routing conflicts.
Section B - Short Answer
7 Marks EachHint & Explanation: TCP/IP consists of four layers: 1. Application Layer (HTTP, FTP, SMTP) - user interaction. 2. Transport Layer (TCP, UDP) - host-to-host delivery. 3. Internet Layer (IP, ICMP) - packet routing across networks. 4. Network Access Layer (Ethernet, Wi-Fi) - physical transmission of bits.
Study Tip: Provide a quick stack diagram showing the four layers from top to bottom.
Hint & Explanation: Steps: 1. Browser queries DNS for the server's IP address. 2. Browser initiates a TCP three-way handshake (SYN, SYN-ACK, ACK) with the server. 3. Once established, browser sends an HTTP GET request. 4. Server processes request and responds.
Study Tip: Emphasize the TCP handshake as the essential connection-building phase.
Hint & Explanation: The structure is tree-like: 1. Root Level (represented by a dot '.'). 2. Top-Level Domains (TLD like .com, .net). 3. Second-Level Domains (SLD like 'google' in google.com). 4. Subdomains (like 'mail' in mail.google.com).
Study Tip: Write a hierarchy chain (e.g., mail.google.com. from right to left) to show the lookup order.
Hint & Explanation: Process: choose name, check availability, register with registrar (GoDaddy, etc.), pay fee, set DNS name servers. Issues: Cybersquatting (registering names to sell to trademark owners), trademark disputes, whois privacy exposure, renewal negligence.
Study Tip: Highlight trademark conflicts and cybersquatting as the primary legal challenges.
Hint & Explanation: Lookup steps: 1. Client queries recursive resolver. 2. Resolver checks local cache. 3. If missing, resolver asks Root Server (points to TLD). 4. Resolver asks TLD Server (points to Authoritative). 5. Resolver asks Authoritative Server (gets IP). 6. IP returned to browser.
Study Tip: Trace the path clearly: Cache -> Root Server -> TLD Server -> Authoritative Server.
Hint & Explanation: TCP: connection-oriented, reliable (error checking, acknowledgments), guarantees packet order, slower, used for Web/Email. UDP: connectionless, unreliable (no checks/handshake), faster, used for streaming/gaming.
Study Tip: Compare reliability, connection setup, packet ordering, and typical applications.
Hint & Explanation: IP resides at the network layer. Its role is: 1. Adding source/destination IP headers to packets. 2. Segmenting data when it exceeds MTU size. 3. Path discovery: routers read IP headers to send packets along the best route across networks.
Study Tip: Describe IP as a 'best-effort' protocol that does not guarantee delivery; it only routes packets.
Section C - Long Answer
15 Marks EachHint & Explanation: 1. Architecture: hierarchical servers (Root, TLD, Authoritative, Recursive). 2. Resolution: recursive vs iterative queries. 3. Caching: TTL (Time to Live) values at browser, OS, ISP resolver level to speed up queries. 4. Security: DNS spoofing/poisoning (injecting fake IPs into cache), DDoS attacks on root servers, DNS hijackings, and mitigation via DNSSEC (digital signatures).
Study Tip: Clearly contrast Recursive queries (resolver does all work) and Iterative queries (server gives referrals).
Hint & Explanation: 1. Application: formats data (HTTP, SMTP, FTP, DNS). 2. Transport: port-to-port multiplexing, flow control, error recovery (TCP, UDP). 3. Internet: network routing, logical addressing (IP, ICMP, ARP). 4. Network Access: media frame delivery, physical bits (Ethernet, MAC addressing, Wi-Fi 802.11). Detail encapsulation/decapsulation.
Study Tip: Explain how data gets wrapped in headers at each level: Data -> Segment (TCP) -> Packet (IP) -> Frame (Ethernet) -> Bits.
Hint & Explanation: Step-by-step: 1. User inputs URL. 2. Browser resolves domain via DNS cache/servers. 3. Browser initiates TCP connection (SYN, SYN-ACK, ACK handshake). 4. Browser sends HTTP GET request over TCP socket. 5. Web server receives request, interprets path/headers, reads static files or runs back-end script, generates HTML. 6. Server sends HTTP 200 OK response with content. 7. TCP connection closed (FIN handshake) or kept alive. 8. Browser parses HTML and displays page.
Study Tip: Combine the DNS, TCP handshake, HTTP request/response, and rendering stages into one logical timeline.
Hint & Explanation: 1. Administration: ICANN oversees root database. 2. Registry-Registrar: Registry manages database for TLD (e.g., Verisign for .com); Registrar sells domains to public (GoDaddy); Registrant is owner. 3. Disputes: Uniform Domain-Name Dispute-Resolution Policy (UDRP) governed by WIPO. Resolves cybersquatting claims based on trademark rights, bad faith usage.
Study Tip: Explain the difference between Registry (wholesaler/database holder) and Registrar (retailer selling to users).
Hint & Explanation: 1. Connection Handling: Process-driven (spawn process per client, e.g., Apache Prefork) vs Event-driven (single process handles thousands of connections asynchronously using event loops, e.g., Nginx). 2. Virtual Hosting: Hosting multiple sites on one server using Name-based (HTTP Host header), IP-based, or Port-based hosting. 3. Performance: caching headers, Gzip compression, SSL/TLS offloading.
Study Tip: Highlight Name-based virtual hosting as the primary method allowing multiple sites to share one IP address.
Security Considerations
BBA 1233 - Internet Fundamentals & Applications - Chapter 6
Section A - Very Short Answer
2 Marks EachHint & Explanation: The science of securing communications by converting readable information (plaintext) into an unreadable format (ciphertext) to prevent unauthorized access.
Study Tip: Briefly mention its core goals: confidentiality, integrity, authenticity, and non-repudiation.
Hint & Explanation: The cryptographic process of transforming readable data (plaintext) into an unreadable scrambled format (ciphertext) using a mathematical algorithm and key.
Study Tip: State that encryption protects data-at-rest and data-in-transit.
Hint & Explanation: The reverse process of encryption, converting scrambled ciphertext back into readable plaintext using a matching key and algorithm.
Study Tip: Note that without the correct key, decryption is computationally infeasible.
Hint & Explanation: A mathematical value calculated from a message and a private key, used to verify the sender's identity and prove the message has not been altered.
Study Tip: Mention that it provides authenticity, integrity, and non-repudiation.
Hint & Explanation: An electronic file issued by a trusted Certificate Authority (CA) that binds a public cryptographic key to an individual's or organization's identity.
Study Tip: Explain that it acts like a digital passport verified by a trusted third party.
Hint & Explanation: An encryption protocol designed to secure internet communications. It has been succeeded by TLS (Transport Layer Security), which encrypts browser-server traffic.
Study Tip: State that SSL/TLS is what turns HTTP into secure HTTPS.
Hint & Explanation: A security tool that encrypts user internet traffic and routes it through a secure tunnel, masking the user's physical IP address and location.
Study Tip: Focus on two elements: traffic encryption and IP address/identity masking.
Hint & Explanation: The security process of verifying the identity claim of a user, system, or device before granting access (e.g., passwords, smartcards, biometrics).
Study Tip: Mention the multi-factor concept: something you know, have, or are.
Section B - Short Answer
7 Marks EachHint & Explanation: Symmetric: uses a single shared key for both encryption and decryption (fast, e.g., AES); key exchange is difficult. Asymmetric: uses a key pair—a public key for encryption and a private key for decryption (slower, e.g., RSA); solves the key distribution problem.
Study Tip: Draw or describe a key usage comparison: 1 key (symmetric) vs 2 keys (asymmetric).
Hint & Explanation: Systems authenticate users by checking factors: 1. Knowledge factors (passwords, PINs). 2. Possession factors (security tokens, USB key, phone OTP). 3. Inherence factors (biometrics like fingerprints, facial scan). Multi-Factor Authentication (MFA) combines multiple factors to increase security.
Study Tip: Explain that MFA significantly reduces hacking risk by requiring proof from multiple categories.
Hint & Explanation: Integrity: sender hashes the document, encrypts hash with their private key. Receiver decrypts with public key and compares hashes; mismatch means data was tampered. Non-repudiation: only the sender holds the private key, so they cannot deny signing the document.
Study Tip: Explain that a digital signature cannot be forged because the private key remains secure.
Hint & Explanation: Digital Certificate contains: owner's public key, owner's name, CA's signature, expiry date. Role: CA verifies identity, signs the certificate. PKI is the complete framework of hardware, software, and policies to manage, distribute, and revoke digital certificates.
Study Tip: Mention that PKI establishes the 'trust chain' that secures HTTPS on the web.
Hint & Explanation: 1. Handshake: client/server negotiate cipher suite, server sends digital certificate. 2. Browser verifies certificate with root CAs. 3. Session Key Exchange: browser encrypts a random key using server's public key. 4. Symmetric Encryption: both use this session key to encrypt/decrypt all traffic.
Study Tip: Mention that asymmetric encryption is used to negotiate keys, while symmetric encryption is used for the data stream.
Hint & Explanation: A VPN client on a computer establishes an encrypted connection (tunnel) to a VPN gateway. It encapsulates local packets, encrypts the payload, and sends it over the internet. The gateway decrypts it and forwards it to the private office network, masking the source.
Study Tip: Key concepts to detail: Tunneling protocols (IPsec/OpenVPN), packet encapsulation, and payload encryption.
Hint & Explanation: Confidentiality: keeping data secret from unauthorized readers (achieved via encryption). Integrity: ensuring data is not modified or deleted (achieved via hashing/signatures). Privacy: the user's right to control how their personal data is collected and processed.
Study Tip: Use the definitions: Confidentiality is secrecy, Integrity is completeness/correctness, Privacy is user control.
Section C - Long Answer
15 Marks EachHint & Explanation: 1. Mechanics of Asymmetric Cryptography: key generation, mathematical relation (factoring primes/elliptic curves). 2. Public key encrypts, private key decrypts (confidentiality). Private key signs, public key verifies (authenticity/integrity). 3. Digital Certificates: how CAs prevent man-in-the-middle attacks by signing public keys. 4. Verification: browser checking expiration, revocation lists (CRLs), and trusted root stores.
Study Tip: Use a clear diagram showing: Sender signs with Private Key -> Receiver verifies with Public Key.
Hint & Explanation: Phase-by-phase handshake: 1. ClientHello (ciphers supported). 2. ServerHello (selected cipher, server certificate). 3. Certificate Verification (client checks CA signature). 4. Key Exchange (Diffie-Hellman or RSA pre-master secret encrypted with public key). 5. Master Secret Generation (both compute symmetric session keys). 6. ChangeCipherSpec & Finished (handshake verified, encryption active).
Study Tip: Write the handshake steps in a numbered timeline format representing the back-and-forth network signals.
Hint & Explanation: 1. Tunneling Protocols: IPsec (network layer, secure but complex), OpenVPN (SSL/TLS based, flexible), WireGuard (modern, lightweight, fast). 2. Security: AES encryption, SHA hashing. 3. Deployment: Remote Access VPN (mobile workers connect to office) vs Site-to-Site VPN (permanently connects branch networks over the internet).
Study Tip: Clearly contrast Remote-Access (host-to-gateway) and Site-to-Site (gateway-to-gateway) VPN models.
Hint & Explanation: Threats: 1. Eavesdropping/Packet Sniffing (mitigated by SSL/IPsec encryption). 2. Man-in-the-Middle (mitigated by Digital Certificates verifying identity). 3. Data Tampering (mitigated by Hashing and MACs). 4. Identity Spoofing (mitigated by Digital Signatures and Certificate authentication). 5. Replay Attacks (mitigated by cryptographic salts and nonces).
Study Tip: Structure your answer by matching each network threat directly to its specific cryptographic defense.
Hint & Explanation: PKI Components: 1. Certificate Authority (CA): root entity that signs certificates. 2. Registration Authority (RA): verifies applicant identity before CA signs. 3. Certificate Repository: public directory of active certificates. 4. Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP): databases of compromised/revoked keys. 5. Key Backup and Recovery policies.
Study Tip: Describe PKI as the governance policy, software, and hardware that makes asymmetric encryption usable at scale.
Electronic Payment
BBA 1233 - Internet Fundamentals & Applications - Chapter 7
Section A - Very Short Answer
2 Marks EachHint & Explanation: A digital representation of paper money stored in electronic wallets or digital systems, enabling instant anonymous transactions over the Internet.
Study Tip: Contrast it with credit cards: e-cash focuses on digital token exchange and transaction anonymity.
Hint & Explanation: An e-commerce service that encrypts and transmits credit/debit card data from a customer's browser to the payment processor, acting as the security middleman.
Study Tip: State that it connects the merchant site to the banking network securely.
Hint & Explanation: A security step that verifies the person making a payment is indeed the authorized cardholder (e.g., via 3D Secure, fingerprint scans, or SMS OTP).
Study Tip: Think of it as two-factor authentication (2FA) for online financial checkouts.
Hint & Explanation: A system that analyzes transaction parameters (device IP, location, spend habits) in real-time to assess fraud risk before approving the charge.
Study Tip: Mention that it uses machine learning to score transactions instantly.
Hint & Explanation: A digital version of a paper check, used to transfer funds directly from a customer's checking account to a merchant's bank account via the ACH network.
Study Tip: State that e-checks use routing and account numbers to initiate transfers.
Hint & Explanation: 1. Phishing (stealing card credentials). 2. Man-in-the-Middle attacks (intercepting data in transit) and chargeback fraud.
Study Tip: Focus on credentials theft (phishing) and transmission interception (MitM).
Hint & Explanation: A specialized bank account that enables a business to accept and process credit card, debit card, and electronic payment transactions.
Study Tip: Note that merchants cannot accept card payments directly into regular checking accounts.
Hint & Explanation: A payment card loaded with a fixed amount of cash, usable for online transactions without linking to a bank account or credit history.
Study Tip: Mention that it lowers online fraud exposure since it is not linked to personal bank details.
Section B - Short Answer
7 Marks EachHint & Explanation: Process: 1. Customer enters card info. 2. Gateway encrypts and forwards data. 3. Acquirer bank passes details to the card network (Visa, etc.). 4. Network sends to issuing bank to check funds. 5. Issuer sends approval/decline code back. 6. Funds are cleared and settled.
Study Tip: Trace the flow sequentially: Customer -> Gateway -> Acquirer -> Card Network -> Issuing Bank.
Hint & Explanation: E-Cash: high anonymity, instant micro-payments, no transaction fees, high security once tokens are spent. Credit Cards: traceable records, supports chargebacks, subject to transaction fees (2-3%), vulnerable to identity theft.
Study Tip: Evaluate key areas: Traceability, Fees, Chargebacks, and Identity Theft Risk.
Hint & Explanation: 1. Customer selects e-check, enters routing and account numbers. 2. Payment system sends request to payment gateway. 3. Gateway uploads details to the Automated Clearing House (ACH) network. 4. ACH routes check to issuing bank. 5. Funds clear (takes 2-5 days) and settle into merchant account.
Study Tip: Contrast its clearing time (days via ACH) with near-instant credit card processing.
Hint & Explanation: Purpose: reduce chargebacks and card fraud. Mechanism (e.g., 3D Secure): when buying, the gateway redirects browser to the issuing bank's secure page. Bank sends verification request (SMS OTP or app confirmation). Only after matching code is the payment authorized.
Study Tip: Describe 3D Secure (Verified by Visa/Mastercard Identity Check) as a prime example.
Hint & Explanation: The gateway: 1. Encrypts card details using SSL/TLS. 2. Implements tokenization (replacing sensitive card numbers with dummy tokens). 3. Conducts fraud screening (checking IP locations). 4. Validates PCI-DSS (Payment Card Industry Data Security Standard) compliance.
Study Tip: Focus on tokenization and encryption as its two main data protection shields.
Hint & Explanation: Smart authorization uses machine learning algorithms. When a purchase is requested, it checks transaction size, device fingerprint, geographic location, velocity (frequency of cards typed), and comparison with typical cardholder behavior. If fraud probability is high, it declines or triggers authentication challenges.
Study Tip: Explain that it prevents card-not-present fraud before money changes hands.
Hint & Explanation: Phishing: tricking customers into entering card details on fake sites. Man-in-the-Middle: intercepting card details over public Wi-Fi. Chargeback Fraud (friendly fraud): consumer buys goods, receives them, but claims to their bank that they never authorized the purchase to get a refund.
Study Tip: Briefly explain how merchants defend against each (e.g., SSL for MitM, 3D Secure for chargeback fraud).
Section C - Long Answer
15 Marks EachHint & Explanation: Identify the 6 key players: Customer, Merchant, Payment Gateway, Payment Processor/Acquirer Bank, Card Network (Visa/MC), and Issuing Bank. Detail the three stages: 1. Authorization: step-by-step communication to check funds. 2. Capture: merchant claims the authorized funds. 3. Settlement: issuing bank transfers funds to acquiring bank, merchant gets paid.
Study Tip: Draw a circular block diagram representing the data flow among the 6 players during authorization.
Hint & Explanation: Payment models to compare: 1. E-Cash/Digital Wallets (low cost, high anonymity, great for peer-to-peer/micropayments). 2. Credit/Debit Cards (high cost, low anonymity, great for high-ticket retail). 3. E-Checks/ACH (low flat cost, moderate anonymity, best for B2B recurring bills). 4. Mobile wallets/QR codes (high convenience, tokenized security).
Study Tip: Compile a detailed matrix table evaluating these payment types based on the criteria listed.
Hint & Explanation: 1. SSL/TLS: secures network connection. 2. Tokenization: replaces card PAN with random tokens; database theft reveals no usable cards. 3. 3D Secure (payer authentication): offloads liability to the bank. 4. PCI-DSS: twelve strict security requirements governing network protection, data storage, encryption, vulnerability scans, and access control policies.
Study Tip: Describe how these layers work in tandem: PCI-DSS sets the rules, SSL encrypts, tokenization hides data, and 3D Secure verifies users.
Hint & Explanation: Risks: identity theft, card-not-present fraud, database breaches, DDoS attacks on gateways. Mitigation: 1. Risk engine models checking device metadata. 2. Behavioral biometrics (keystroke analysis). 3. Real-time geo-location matching. 4. Velocity filters. 5. Machine learning networks matching fraud patterns.
Study Tip: Describe risk assessment as an automated gatekeeper scoring every checkout attempt from 0 to 100.
Hint & Explanation: Infrastructure: merchant integration APIs (RESTful APIs, SDKs), hosting environments, redundant servers, encryption hardware. Business Value: 1. Multi-currency conversions (localizes checkout). 2. Unified payment methods (cards, wallets, local systems). 3. PCI scope reduction for merchants. 4. Direct integration with accounting and ERP platforms.
Study Tip: Focus on how gateways remove barrier friction, allowing small companies to accept payments globally.
Role of Information and Communication Technologies in Economic Development
BBA 1233 - Internet Fundamentals & Applications - Chapter 8
Section A - Very Short Answer
2 Marks EachHint & Explanation: Information and Communication Technology. An umbrella term that includes communication devices, computers, networking hardware, and the software applications that connect them.
Study Tip: State that it merges IT (computing) with telecommunication channels (networking).
Hint & Explanation: A cryptographic procedure that confirms the message sender's identity and verifies that the message content has not been altered in transit.
Study Tip: Note that it protects against message tampering and sender impersonation.
Hint & Explanation: Increased market transparency (e.g., farmers checking wholesale prices online, eliminating middleman exploitation).
Study Tip: Other options include job creation in tech services and reduction in transaction costs.
Hint & Explanation: Democratization of education via online learning portals, allowing remote student learning.
Study Tip: Telemedicine and community messaging networks are also strong answers.
Hint & Explanation: Automation of repetitive tasks (like invoice matching), which reduces manual labor costs and error rates.
Study Tip: Mention speed of communication or data search limits.
Hint & Explanation: The socio-economic gap between demographics and regions that have access to modern ICT infrastructure and those that do not.
Study Tip: Discuss it as an inequality in access to internet connection and computer skills.
Hint & Explanation: Amazon (which revolutionized retail via e-commerce and hosts global web services via AWS).
Study Tip: Google (search/online ads) or Microsoft (operating software/cloud) are also excellent examples.
Hint & Explanation: The structured, computer-to-computer transmission of standard business documents (like invoices, orders) directly between supply partners.
Study Tip: Highlight that it replaces manual paper processes with automated structured data exchanges.
Section B - Short Answer
7 Marks EachHint & Explanation: Economic impacts: 1. Financial inclusion: mobile money (e.g., M-Pesa) allows banking without branches. 2. Small business growth: local artisans sell to global markets. 3. Agricultural efficiency: real-time crop pricing. 4. Direct foreign investments in call centers and software hubs.
Study Tip: Discuss mobile banking, global markets, and outsourcing hubs.
Hint & Explanation: Social shifts: 1. Communication: shifts to instant chat, bridging long distances. 2. Knowledge: access to online books and tutorials. 3. Remote Work: changes family dynamics and city populations. 4. Negative shifts: decline in face-to-face contact, misinformation, cyberbullying.
Study Tip: Cover both positive social integrations and negative challenges to show balance.
Hint & Explanation: IT achieves this by: 1. Streamlining databases (avoiding duplicate records). 2. Enterprise Resource Planning (ERP) systems linking sales to shipping. 3. Reducing travel costs using videoconferencing. 4. Automated billing/payment collections shortening cash cycles.
Study Tip: Discuss automation, database integration, and communication costs.
Hint & Explanation: Message authentication uses cryptographic hashes or MACs. It is critical because businesses exchange sensitive digital documents (wire transfers, sales contracts). If a message is tampered with in transit (or spoofed by a hacker), it could result in massive financial losses or legal issues.
Study Tip: Explain that it guarantees both sender authenticity and data integrity.
Hint & Explanation: Taking Amazon: 1. Customer obsession (one-click shopping, fast shipping). 2. Infrastructure scaling (turning e-commerce servers into AWS cloud services). 3. Data optimization (recommendation algorithms). 4. Logistics network investments. 5. Platform business model (third-party marketplace).
Study Tip: Select Amazon, Microsoft, or Google, and list 4-5 distinct technological and strategic drivers.
Hint & Explanation: Transaction costs are reduced by eliminating middlemen, digital billing, and automated customer service. Market access is expanded because a small home business can reach international buyers via online marketplaces, social media ads, and global shipping integrations.
Study Tip: Explain how the internet levels the playing field for small businesses against large retail chains.
Hint & Explanation: It uses a Message Authentication Code (MAC) algorithm. The sender calculates a MAC value using a shared key and message contents. The receiver computes the MAC. If they match, it proves: 1. Integrity (message has not been tampered). 2. Authenticity (only the keyholder could compute it). Spoofing fails since hackers lack the key.
Study Tip: Explain that any tiny change in the message will result in a completely different MAC value.
Section C - Long Answer
15 Marks EachHint & Explanation: 1. Macroeconomic impacts: ICT capital investment, labor productivity growth. 2. Microeconomic impacts: corporate efficiency, inventory cost reductions (JIT). 3. Sector creation: e-commerce, software services (e.g., India's IT hubs). 4. Challenges: the digital divide, infrastructure installation costs, displacement of low-skill labor, cybersecurity liabilities.
Study Tip: Provide a balanced argument showing how ICT drives growth, but only when supported by electrical and educational infrastructure.
Hint & Explanation: Implications: 1. Digital Divide: how the lack of internet divides urban/rich from rural/poor. 2. Remote Work: flexibility, lower traffic, geographic freedom vs isolation, blurred work-life boundaries. 3. Online Education: democratization of tutoring vs lack of socialization, device inequality. 4. Social structures: change in local community relationships, online activism.
Study Tip: Use clear, titled subheadings for each topic (Divide, Remote Work, Education, Social Connections).
Hint & Explanation: Case study of Google/Alphabet: 1. Search Engine business model (monetizing search via targeted AdWords auctions). 2. Technological Innovations: PageRank algorithm, distributed filing systems (GFS), map-reduce computing, Android OS open-source distribution. 3. Global Economic Impact: democratizing information access, enabling digital advertising for SMBs, cloud platform services.
Study Tip: Explain how their technical innovations directly funded their business model (advertising engine).
Hint & Explanation: 1. MAC: cryptographic checksum. 2. HMAC: Hash-based Message Authentication Code combining a cryptographic hash function (like SHA-256) with a secret key. 3. Mathematical structure: HMAC(K, m) = H((K xor opad) || H((K xor ipad) || m)). 4. Role in business: secures API requests, B2B payment files, and payment processing requests.
Study Tip: Ensure you write down the HMAC formula and define the terms: K (key), m (message), H (hash), opad/ipad (padding constants).
Hint & Explanation: 1. Corporate structure: flatter organization hierarchies (faster email/chat reporting). 2. Supply Chains: Just-in-Time inventory managed by real-time tracking, RFID, automated replenishment. 3. B2B Relations: EDI networks and XML portals automate ordering, invoicing, and scheduling, reducing manual errors and warehouse overheads.
Study Tip: Connect IT systems directly to supply chain concepts like JIT (Just-In-Time) and EDI (Electronic Data Interchange).
Data Storage and Legal Issues in Internet
BBA 1233 - Internet Fundamentals & Applications - Chapter 9
Section A - Very Short Answer
2 Marks EachHint & Explanation: The on-demand delivery of virtualized computing services (databases, servers, storage) over the Internet under a pay-as-you-go pricing model.
Study Tip: Key phrases: 'on-demand delivery' and 'pay-as-you-go pricing'.
Hint & Explanation: The process of copying database files or folders to a secondary location to protect against data loss from hardware failure, errors, or cyberattacks.
Study Tip: Note that backups are useless without a functional restore procedure.
Hint & Explanation: The process of retrieving and restoring lost, deleted, corrupted, or inaccessible data from backup systems to resume business operations.
Study Tip: Link it to RTO (Recovery Time Objective) parameters.
Hint & Explanation: Software-based protection mechanisms implemented to prevent unauthorized access to virtual assets (e.g., passwords, access control lists, firewalls).
Study Tip: Contrast it with physical security: logical is code-based and virtual.
Hint & Explanation: A centralized data repository that aggregates historic data from multiple operational databases to support business intelligence queries and data analysis.
Study Tip: Mention that it is optimized for read-heavy queries rather than fast database writes.
Hint & Explanation: Database systems optimized for processing thousands of short, concurrent database transactions (inserts, updates) in real time (e.g., ATM withdrawals).
Study Tip: Specifically mention that it is write-intensive and handles day-to-day operations.
Hint & Explanation: Database systems optimized for processing complex analytical queries, analyzing historical data trends, and data mining (e.g., sales year-over-year reports).
Study Tip: Specifically mention that it is read-intensive and supports decision-making.
Hint & Explanation: Biometric authentication scanner gates (iris or fingerprint) restricting entry to server rooms.
Study Tip: Other options: CCTV cameras, security guards, concrete barriers, FM200 fire suppression.
Section B - Short Answer
7 Marks EachHint & Explanation: IaaS (Infrastructure): offers raw storage, servers, and networks (e.g., AWS EC2). PaaS (Platform): provides environment for developers to build apps (e.g., Heroku). SaaS (Software): hosts full apps over browser (e.g., Google Workspace, Office 365).
Study Tip: Use the analogy of 'Pizza-as-a-Service' to describe what the vendor does vs what you do.
Hint & Explanation: Important because data loss causes catastrophic business interruption. A policy defines: what to backup (files, DBs), backup frequency (hourly, daily), medium (cloud, tape), retention duration, and regular restoration drills to ensure recovery.
Study Tip: State that a backup policy must specify both RPO (Recovery Point Objective) and RTO (Recovery Time Objective).
Hint & Explanation: Physical: hardware barriers that prevent physical contact with servers (guards, locks, badge entry, fire alarms). Managerial: administrative procedures (data policies, security training, background checks, non-disclosure agreements).
Study Tip: Compare tangible assets (fences/locks) with organizational rules and audits.
Hint & Explanation: Logical: virtual barriers protecting operating systems and networks (passwords, software firewalls, file encryption, MFA). Physical: physical barriers protecting servers (data center fencing, CCTV, biometric door locks, rack key locks).
Study Tip: Logical protects the virtual data, while physical protects the physical silicon hardware.
Hint & Explanation: OLTP: normalized tables, fast insert/update, low latency, handles day-to-day operations (e.g., e-commerce order checkouts). OLAP: denormalized tables (star schema), read-heavy complex aggregations, historic data, handles business reports (e.g., quarterly profit analysis).
Study Tip: Compare them in terms of: Main Purpose, DB Design (Normalized vs Denormalized), and Latency.
Hint & Explanation: Data warehousing consolidates massive amounts of historic corporate data in one cleaned schema. Data mining applies mathematical algorithms to this warehouse to discover hidden patterns, correlations, and trends, supporting strategic choices.
Study Tip: Explain that warehousing hosts the structured data, while mining extracts the valuable patterns.
Hint & Explanation: Threats: database hacks, insider leaks, user tracking. Legal: organizations must comply with frameworks like GDPR (Europe) and local data protection acts, enforcing user consent, the 'right to be forgotten', and face massive fines for security negligence.
Study Tip: Mention GDPR or local data regulations as major compliance constraints.
Section C - Long Answer
15 Marks EachHint & Explanation: 1. Service Models: IaaS, PaaS, SaaS. 2. Deployment Models: Public (multi-tenant, cost-effective), Private (single-tenant, high security), Hybrid (mix of public and private), Community. 3. Analysis: cost savings (OPEX instead of CAPEX), scalability, security liabilities (shared responsibility model), and data compliance regulations.
Study Tip: Clearly explain the 'Shared Responsibility Model': cloud providers secure the hypervisor and data center; clients secure their virtual OS, code, and databases.
Hint & Explanation: Plan components: 1. Risk assessment (flood, hacking). 2. RTO (Recovery Time Objective) and RPO (Recovery Point Objective) definition. 3. Backup Strategy: 3-2-1 rule (3 copies, 2 media types, 1 offsite). Full, incremental, and differential setups. 4. Disaster Recovery Sites: Hot (fully operational mirror), Warm (hardware ready, restore needed), Cold (empty space). 5. Audit schedules and team mock drills.
Study Tip: Ensure you define and contrast RPO (how much data loss is acceptable) and RTO (how fast systems must recover).
Hint & Explanation: 1. Physical: zoned access (security desk, biometric gates, server cages), environmental safety (HVAC, fire suppression). 2. Logical: zero-trust network setups, server firewalls, data-at-rest encryption, patch management, intrusion detection (IDS). 3. Managerial: background checks, mandatory security reviews, NDAs, data categorization rules, change management.
Study Tip: Use the 'Defense-in-Depth' concept to explain how these three controls form overlapping protective shields.
Hint & Explanation: 1. DB Design: OLTP uses Highly Normalized tables (3NF) to eliminate redundancy and enable fast writes; OLAP uses Denormalized tables (Star or Snowflake schemas) to optimize read joins. 2. Transaction Processing: short ACID transactions vs massive batch reads. 3. Queries: simple lookup/inserts vs heavy sum/average queries over millions of rows. 4. Storage: operational databases vs data warehouses.
Study Tip: Draw a simple Star schema diagram (central fact table surrounded by dimension tables) to illustrate OLAP design.
Hint & Explanation: 1. ETL: Extract (pulling data from production databases), Transform (cleaning, format matching), Load (saving to warehouse). 2. Analytics: predictive and prescriptive modeling. 3. Legal/Ethical: user surveillance, data monetization without direct consent, data breaches, algorithmic bias (unfair profiling), and right to data erasure (GDPR compliance).
Study Tip: Explain ETL as the plumbing system that moves and cleans data from sales apps into the analytics database.