BCC301 Cyber Security Important Questions 2026 (AKTU)
Repeat analysis + most-asked questions, unit-wise
What we did: built from all 10 AKTU Cyber Security papers (2021-22 (Sem 3)–2025-26 (Sem 4)): 218 questions grouped into 82 distinct questions, 29 of which were asked in more than one paper.
- of marks were repeat questions
- 30%
- of marks were repeat questions
- questions asked in 2+ papers
- 29
- questions asked in 2+ papers
- papers analysed (2021-22 (Sem 3)–2025-26 (Sem 4))
- 10
- papers analysed (2021-22 (Sem 3)–2025-26 (Sem 4))
- units, mapped to current syllabus
- 5
- units, mapped to current syllabus
How much of the paper repeats?
- Repeats are real: when we checked each newer BCC301 paper against the papers before it, on average 30% of its marks were questions already asked in an earlier paper.
- 2022-23 (Sem 3) paper: 0% of marks were repeats (0 of 0 repeated questions were in our top list).
- 2022-23 (Sem 4) paper: 9% of marks were repeats (1 of 1 repeated questions were in our top list).
- 2023-24 (Sem 3) paper: 3% of marks were repeats (1 of 1 repeated questions were in our top list).
- 2023-24 (Sem 4) paper: 31% of marks were repeats (5 of 6 repeated questions were in our top list).
- 2024-25 (Sem 3) paper: 23% of marks were repeats (2 of 4 repeated questions were in our top list).
- 2024-25 (Sem 4) paper: 54% of marks were repeats (9 of 11 repeated questions were in our top list).
- 2025-26 (Sem 3) paper: 63% of marks were repeats (9 of 13 repeated questions were in our top list).
- 2025-26 (Sem 4) paper: 55% of marks were repeats (4 of 12 repeated questions were in our top list).
- Topic weightage is a guide, not a guarantee: our Tier 1 + Tier 2 topics covered 34% of the next paper's marks — picking the same number of topics at random would have covered about 29%.
Across 10 subjects and 23 papers we tested, 43% of marks repeated earlier questions on average.
1.Unit-wise most-asked questions
Ranked by how many papers asked them, then by how recently. Click a paper to open it.
Unit 1: Introduction to Cyber Crime
17% of past marks| Question | Asked |
|---|---|
| Who are cybercriminals? Discuss different types of cybercriminals and their motives | Asked 3× |
| Explain how attackers exploit human psychology in cyber offenses. Support your answer with examples | Asked 2× |
| Discuss about survival mantra for the netizens | Asked 2× |
| Discuss how cybercriminals plan their attacks and the role of attack vectors | Asked 2× |
Unit 2: Cyber Crime: Mobile and Wireless Devices
17% of past marks| Question | Asked |
|---|---|
| Describe organizational measures for handling mobile devices securely | Asked 4× |
| Discuss major security challenges posed by mobile devices in modern organizations | Asked 3× |
| Differentiate between mobile device proliferation and mobility trends | Asked 3× |
| Analyze the role of app permissions in compromising mobile security. How can misuse of permissions lead to cyber attacks? 7 marks2025-26 (Sem 4) Q4(b) | Asked 1× |
Unit 3: Tools and Methods Used in Cybercrime
21% of past marks| Question | Asked |
|---|---|
| Describe steganography and its applications in cybercrime | Asked 4× |
| Explain the role of proxy servers and anonymizers in cyber crimes | Asked 3× |
| Describe buffer overflow attacks and their consequences | Asked 3× |
| What is a worm in computer? | Asked 3× |
Unit 4: Understanding Computer Forensics
20% of past marks| Question | Asked |
|---|---|
| Describe the Digital Forensics Life Cycle. Discuss each phase in detail with suitable examples | Asked 4× |
| Explain the challenges faced in computer forensics such as data encryption and data volume | Asked 3× |
| Discuss the concept of chain of custody and its importance in legal proceedings | Asked 3× |
| Analyze security and privacy threats in social networking sites from a forensic perspective | Asked 2× |
Unit 5: Introduction to Security Policies and Cyber Laws
25% of past marks| Question | Asked |
|---|---|
| Explain the need for information security policies in organizations. How do they contribute to overall cybersecurity? | Asked 3× |
| Explain various intellectual property rights and discuss their importance in cyber space along with related legal provisions in India | Asked 2× |
| Explain the concept of “legal jurisdiction” in cyber law and why it is complex in online crimes | Asked 2× |
| Explain how cyber laws in India deal with data breaches and cyber frauds | Asked 2× |
2.Topic weightage: which topics carry the marks
Blue = Tier 1 + Tier 2 (topics that carried ~80% of past marks). Grey = the rest. It shows where marks have gone, not a promise of what comes next.
| Topic | Papers | Share |
|---|---|---|
| Need for Information Security Policy · Unit 5 · Tier 1 | 3/10 | 6.9% |
| Introduction to Indian Cyber Law · Unit 5 · Tier 1 | 6/10 | 5.7% |
| SQL Injection and Buffer Overflow · Unit 3 · Tier 1 | 7/10 | 5.5% |
| Security Challenges of Mobile Devices · Unit 2 · Tier 1 | 3/10 | 4.1% |
| Intellectual Property Issues · Unit 5 · Tier 1 | 5/10 | 4% |
| How Criminals Plan Attacks · Unit 1 · Tier 1 | 3/10 | 3.7% |
| Steganography · Unit 3 · Tier 1 | 4/10 | 3.7% |
| Chain of Custody Concept · Unit 4 · Tier 1 | 3/10 | 3.7% |
| Digital Forensics Life Cycle · Unit 4 · Tier 1 | 4/10 | 3.5% |
| Phishing and Identity Theft · Unit 3 · Tier 1 | 5/10 | 3.5% |
| DPDP Act 2023 Objectives and Scope · Unit 5 · Tier 1 | 4/10 | 3.2% |
| Organizational Measures for Handling Mobile · Unit 2 · Tier 1 | 3/10 | 3.1% |
| Forensics and Social Networking Sites · Unit 4 · Tier 2 | 3/10 | 2.9% |
| Survival Mantra for Netizens · Unit 1 · Tier 2 | 3/10 | 2.8% |
| Cyber Forensics and Digital Evidence · Unit 4 · Tier 2 | 3/10 | 2.8% |
| Challenges in Computer Forensics · Unit 4 · Tier 2 | 3/10 | 2.7% |
| Botnets and Attack Vectors · Unit 1 · Tier 2 | 3/10 | 2.5% |
| Cybercrime Definition and Origins · Unit 1 · Tier 2 | 3/10 | 2.5% |
| Authentication Service Security · Unit 2 · Tier 2 | 3/10 | 2.3% |
| Social Engineering · Unit 1 · Tier 2 | 3/10 | 2.3% |
| Proxy Servers and Anonymizers · Unit 3 · Tier 2 | 3/10 | 2.3% |
| Patent and Copyright Laws · Unit 5 · Tier 2 | 4/10 | 2.2% |
| Who are Cybercriminals · Unit 1 · Tier 2 | 3/10 | 2.2% |
| Proliferation of Mobile Devices · Unit 2 · Tier 2 | 3/10 | 2.1% |
| Trademark Protection · Unit 5 · Tier 3 | 2/10 | 1.9% |
| Organizational Security Policies · Unit 2 · Tier 3 | 2/10 | 1.8% |
| Network Forensics · Unit 4 · Tier 3 | 2/10 | 1.7% |
| Trojan Horses and Backdoors · Unit 3 · Tier 3 | 2/10 | 1.5% |
| Digital Forensics Science · Unit 4 · Tier 3 | 3/10 | 1.4% |
| Credit Card Frauds in Mobility · Unit 2 · Tier 3 | 2/10 | 1.3% |
| Keyloggers and Spywares · Unit 3 · Tier 3 | 2/10 | 1.3% |
| Virus and Worms · Unit 3 · Tier 3 | 3/10 | 1.3% |
| DoS and DDoS Attacks · Unit 3 · Tier 3 | 1/10 | 1.2% |
| Registry Settings for Mobile Devices · Unit 2 · Tier 3 | 2/10 | 1% |
| Attacks on Mobile/Cell Phones · Unit 2 · Tier 3 | 1/10 | 0.8% |
| Forensics Analysis of E-Mail · Unit 4 · Tier 3 | 1/10 | 0.8% |
| IP Legislation in India Overview · Unit 5 · Tier 3 | 1/10 | 0.8% |
| Classifications of Cybercrimes · Unit 1 · Tier 3 | 1/10 | 0.8% |
| Password Cracking · Unit 3 · Tier 3 | 1/10 | 0.8% |
| Global Perspective on Cybercrimes · Unit 1 · Tier 3 | 1/10 | 0.5% |
| Trends in Mobility · Unit 2 · Tier 3 | 1/10 | 0.5% |
| Approaching a Computer Forensics Investigation · Unit 4 · Tier 3 | 1/10 | 0.5% |
3.Paper pattern (2025-26 (Sem 4))
| Section | Questions | Rule |
|---|---|---|
| A | 7 × 2 marks | Attempt all |
| B | 5 × 7 marks | Attempt any 3 |
| C | 10 × 7 marks | Attempt any 1 |
4.In the syllabus, never asked yet
Low priority, but read them once — a new paper can always start here.
- Cyber Stalking · U1
- Cybercafe and Cybercrimes · U1
- Security Implications for Organizations · U2
- Attacks on Wireless Networks · U3
- Need for Computer Forensics · U4
5.Study order
- 1Need for Information Security Policy (Unit 5, Tier 1)
- 2Introduction to Indian Cyber Law (Unit 5, Tier 1)
- 3SQL Injection and Buffer Overflow (Unit 3, Tier 1)
- 4Security Challenges of Mobile Devices (Unit 2, Tier 1)
- 5Intellectual Property Issues (Unit 5, Tier 1)
- 6How Criminals Plan Attacks (Unit 1, Tier 1)
- 7Steganography (Unit 3, Tier 1)
- 8Chain of Custody Concept (Unit 4, Tier 1)
- 9Digital Forensics Life Cycle (Unit 4, Tier 1)
- 10Phishing and Identity Theft (Unit 3, Tier 1)
- 11DPDP Act 2023 Objectives and Scope (Unit 5, Tier 1)
- 12Organizational Measures for Handling Mobile (Unit 2, Tier 1)
- 13Forensics and Social Networking Sites (Unit 4, Tier 2)
- 14Survival Mantra for Netizens (Unit 1, Tier 2)
- 15Cyber Forensics and Digital Evidence (Unit 4, Tier 2)
- 16Challenges in Computer Forensics (Unit 4, Tier 2)
- 17Botnets and Attack Vectors (Unit 1, Tier 2)
- 18Cybercrime Definition and Origins (Unit 1, Tier 2)
- 19Authentication Service Security (Unit 2, Tier 2)
- 20Social Engineering (Unit 1, Tier 2)
- 21Proxy Servers and Anonymizers (Unit 3, Tier 2)
- 22Patent and Copyright Laws (Unit 5, Tier 2)
- 23Who are Cybercriminals (Unit 1, Tier 2)
- 24Proliferation of Mobile Devices (Unit 2, Tier 2)
FAQ
Which units of BCC301 carry the most marks?
Unit 5 (Introduction to Security Policies and Cyber Laws, 25% of past marks) and Unit 3 (Tools and Methods Used in Cybercrime, 21% of past marks).
Do AKTU Cyber Security questions repeat?
Yes. On average 30% of the marks in each newer BCC301 paper came from questions already asked in an earlier paper, and 29 questions have appeared in more than one paper.
How is this list made?
Every question from the 10 papers (2021-22 (Sem 3)–2025-26 (Sem 4)) was mapped to the current AKTU syllabus and grouped with the same question from other years. Questions are ranked by how many papers they appeared in, then by how recently.
Study this subject
Note: this is based on past AKTU papers, not a guarantee. Questions are mapped to the current syllabus; topics that are no longer in the syllabus are left out.