Civil Aviation Authority of Nepal2077 BSQuestion 18 of 18
What are various computer related threats? Explain. Describe various measures you may take to protect your computer system from those threats.
10 marks
Question source
- Exam year
- 2077 BS / 2021 AD
- Level
- Level 5 (Prabidhik, IT, Barishtha Sahayak)
- Paper
- Paper II – Sewa Sambandhi
- Section
- Section B
Model answer
Threats target Confidentiality, Integrity, Availability — pair each with a safeguard.
Threats:
- Malware — Virus/worm/Trojan/ransomware/spyware.
- Phishing — Fake mails/sites stealing passwords/OTP.
- Hacking — Password guessing, unpatched exploits.
- DoS/DDoS — Flooding servers (result-day outages).
- Social engineering + insider — Fake calls, USB theft.
- Eavesdropping — Snooping open Wi-Fi.
Protection measures:
- MFA + access control — Strong passwords, OTP/biometric, role rights with logs.
- Firewall + IDS/IPS — Filter rules; detect and block intrusions.
- Antivirus + patching — Updated scanning; timely OS/app updates; scan pen-drives.
- Email filtering + training — Spam filters, block .exe; never share OTP.
- Encryption + signature — HTTPS, hashed passwords, signed docs (ETA 2063).
- Backup + monitoring — Offline full/incremental backups with restore test; SoC/CERT watch.
Close: layered people + technology + policy — no single tool suffices.