Universal gates are logic gates that can implement any Boolean function without using any other type of gate.

The two universal gates are:

• NAND Gate
• NOR Gate

Using only NAND gates or only NOR gates, all basic logic gates such as AND, OR, and NOT can be constructed. Since any Boolean function is built using these basic gates, any Boolean function can also be implemented using universal gates.

Implementation Using NAND Gate

1. NOT Gate using NAND

When both inputs of a NAND gate are connected together:
$$
Y=\overline{A\cdot A}=\overline{A}
$$
2. AND Gate using NAND

First NAND operation gives:

(A · B)'

Applying another NAND as NOT operation:
$$
Y=\overline{\overline{A\cdot B}}=A\cdot B
$$
3. OR Gate using NAND

Using De Morgan’s theorem:
$$
A+B=\overline{\overline{A}\cdot\overline{B}}
$$
So OR gate can also be implemented using only NAND gates.

Implementation Using NOR Gate

1. NOT Gate using NOR

When both inputs are same:
$$
Y=\overline{A+A}=\overline{A}
$$
2. OR Gate using NOR

First NOR operation gives:

(A + B)'

Applying another NOR as NOT operation:
$$
Y=\overline{\overline{A+B}}=A+B
$$
3. AND Gate using NOR

Using De Morgan’s theorem:
$$
A\cdot B=\overline{\overline{A}+\overline{B}}
$$
Since NAND and NOR gates can create all basic logic gates, and all Boolean functions are formed using basic gates, any Boolean function can be implemented using only NAND gates or only NOR gates.

System Software

System software is a type of software that manages and controls computer hardware and provides a platform for application software to run.

It works directly with the hardware and helps operate the computer system.

Examples: Operating System, Device Driver, Compiler, Utility Programs

Application Software

Application software is software designed to perform specific tasks for users.

It runs on top of system software and helps users complete different activities.

Examples: Microsoft Word, Google Chrome, VLC Media Player, Adobe Photoshop

Difference Between System Software and Application Software

A communication system is a system used to transfer data or information from one device or place to another through a communication medium.

• It consists of sender, receiver, transmission medium, and communication protocols.
• The main purpose of a communication system is to enable reliable exchange of information between devices.

Components of a Communication System

• Sender: Device that sends data.
• Receiver: Device that receives data.
• Transmission Medium: Path through which data travels (cable, fiber, wireless).
• Protocol: Rules for communication.

Transmission mode defines the direction of data flow between two connected devices.

There are three types of transmission modes:

1. Simplex Mode
2. Half-Duplex Mode
3. Full-Duplex Mode

1. Simplex Mode

• In simplex mode, communication occurs in only one direction.
• One device only sends data and the other device only receives data.

Example: Keyboard to Computer, Television Broadcast

Characteristics:

• One-way communication
• No feedback from receiver
• Simple and low cost

2. Half-Duplex Mode

• In half-duplex mode, communication occurs in both directions but not at the same time.
• Both devices can send and receive data alternately.

Example: Walkie-Talkie

Characteristics:

• Two-way communication
• Only one device transmits at a time
• More efficient than simplex

3. Full-Duplex Mode

• In full-duplex mode, communication occurs in both directions simultaneously.
• Both devices can send and receive data at the same time.

Example: Mobile Phone Call, Video Conferencing

Characteristics:

• Simultaneous two-way communication
• Fast and efficient
• Higher bandwidth requirement

Encryption: Encryption is the process of converting readable data, called plaintext, into an unreadable form called ciphertext using an encryption algorithm and a key.

• The main purpose of encryption is to protect sensitive information from unauthorized access during storage or transmission.
• Only authorized users who have the correct key can understand the encrypted data.

Decryption: Decryption is the reverse process of encryption.

• It converts the encrypted ciphertext back into the original readable plaintext using a decryption key.
• Without the correct key, the encrypted data cannot be understood properly.

How Encryption and Decryption Work

• The sender encrypts the original message using an encryption key.
• The encrypted message (ciphertext) is transmitted or stored.
• The receiver uses the correct decryption key to recover the original message.

Example

Suppose the original message is:

Plaintext: HELLO

Using a simple encryption method where each letter is shifted by 3 positions:

• H → K
• E → H
• L → O
• L → O
• O → R

The encrypted message becomes:

Ciphertext: KHOOR

When the receiver applies decryption by shifting the letters back by 3 positions:

• K → H
• H → E
• O → L
• O → L
• R → O

The original plaintext is recovered:

Decrypted Text: HELLO

Applications of Encryption

• Secure online banking
• HTTPS web communication
• Email security
• Password protection
• VPN communication

Conclusion

Encryption protects data by converting it into unreadable form, while decryption restores it back into readable form. Together, they ensure confidentiality and secure communication in computer networks and information systems.

Software Development Life Cycle (SDLC)

Software Development Life Cycle (SDLC) is a structured process used to design, develop, test, deploy, and maintain software systems efficiently and systematically.

The main goal of SDLC is to produce high-quality software within time and budget.

Main Phases of SDLC

1. Requirement Analysis
2. System Design
3. Implementation (Coding)
4. Testing
5. Deployment
6. Maintenance

1. Requirement Analysis

• In this phase, the requirements of the users and organization are collected and analyzed.
• Developers, analysts, and clients discuss system objectives, features, and constraints.

Purpose: Understand what the software should do.

2. System Design

• In this phase, the overall structure and architecture of the software are designed.
• Database design, interface design, system flow, and technology selection are prepared.

Purpose: Create a blueprint for software development.

3. Implementation (Coding)

• In this phase, programmers write the actual source code according to the design specifications.
• Different modules and functionalities are developed.

Purpose: Convert design into working software.

4. Testing

• The developed software is tested to identify and remove bugs, errors, and security issues.
• Different testing methods such as unit testing, integration testing, and system testing are performed.

Purpose: Ensure software quality and reliability.

5. Deployment

• After successful testing, the software is installed and delivered to users or clients.
• It becomes available for real-world use.

Purpose: Release the software into the production environment.

6. Maintenance

• After deployment, the software is monitored and updated regularly.
• Bug fixing, performance improvement, and adding new features are done in this phase.

Purpose: Keep the software functional and updated.

SDLC Phases Summary

SDLC provides a systematic approach for software development. It improves software quality, reduces development risks, and ensures efficient project management.

Cloud computing is a technology that provides computing resources such as servers, storage, databases, networking, software, and processing power over the Internet instead of using local computers or physical infrastructure.

• Users can access these resources anytime and from anywhere using an internet connection.
• Popular examples of cloud computing services are Google Drive, Microsoft Azure, Amazon Web Services (AWS), and Dropbox.

Why Cloud Computing is Used

Cloud computing is widely used because it provides flexibility, scalability, cost efficiency, and easy access to resources.

Main Reasons for Using Cloud Computing

• Remote Access: Users can access data and applications from anywhere.
• Scalability: Resources can be increased or decreased easily based on demand.
• Cost Reduction: No need to purchase expensive hardware and infrastructure.
• Data Backup and Recovery: Cloud providers offer backup and disaster recovery services.
• Collaboration: Multiple users can work on the same files simultaneously.
• High Availability: Services remain available most of the time.

Cloud Storage vs Traditional Storage

Cloud computing provides flexible and scalable computing services over the Internet. Cloud storage offers remote accessibility and easier management compared to traditional local storage systems.

RAM (Random Access Memory)

• RAM is the primary memory of a computer used to temporarily store data and programs currently being processed by the CPU.
• It is volatile memory, meaning its data is lost when the power is turned off.
• RAM provides fast read and write operations, allowing applications and the operating system to run efficiently.

Usage: Running applications, operating systems, and temporary data processing.

ROM (Read Only Memory)

• ROM is non-volatile memory that permanently stores instructions required for booting and hardware initialization.
• The data stored in ROM remains even after power is turned off.
• ROM usually contains firmware or BIOS programs.

Usage: System startup and firmware storage.

Cache Memory

• Cache memory is a very small but extremely fast memory located inside or close to the CPU.
• It stores frequently used instructions and data so the CPU can access them quickly without waiting for RAM.
• Cache memory improves processor speed and overall system performance.

Usage: Temporary storage of frequently accessed CPU data and instructions.

Secondary Storage

• Secondary storage is non-volatile storage used for permanent data storage.
• It stores files, operating systems, software, videos, documents, and backups for long-term use.

Examples include HDD, SSD, DVD, memory cards, and pen drives.

Usage: Permanent storage of data and applications.

Cache Memory → RAM → ROM → Secondary Storage

CIA in Information Security

CIA stands for:

• Confidentiality
• Integrity
• Availability

The CIA Triad is a fundamental security model used to protect information systems and sensitive data.

It helps organizations ensure that data remains secure, accurate, and accessible to authorized users.

1. Confidentiality

Confidentiality means protecting information from unauthorized access or disclosure.

Only authorized users are allowed to view or access sensitive data.

Methods Used to Ensure Confidentiality

• Encryption
• Password protection
• Access control
• Multi-Factor Authentication (MFA)

Example:

Online banking passwords and customer account details are encrypted so that unauthorized users cannot read them.

2. Integrity

Integrity means ensuring that data remains accurate, complete, and unmodified unless changed by authorized users.

It prevents unauthorized alteration or corruption of information.

Methods Used to Ensure Integrity

• Hashing
• Digital signatures
• Checksums
• Access permissions

Example:

During a bank transaction, the transferred amount should not be changed accidentally or maliciously.

3. Availability

Availability means ensuring that systems, applications, and data are accessible whenever authorized users need them.

Systems should remain operational without unnecessary downtime.

Methods Used to Ensure Availability

• Data backup
• Redundant systems
• Disaster recovery plans
• UPS and power backup

Example:

An ATM system should remain available 24/7 so customers can access banking services anytime.

Summary of CIA Triad

The CIA Triad forms the foundation of information security. Confidentiality protects privacy, integrity ensures data accuracy, and availability guarantees continuous access to systems and information.

(i) SQL Query to Display StudentID, Name, and Marks for Students Scoring More Than 80 Marks

SELECT StudentID, Name, Marks
FROM STUDENTS
WHERE Marks > 80;

Explanation:

• SELECT chooses the required columns.
• FROM STUDENTS specifies the table name.
• WHERE Marks > 80 filters students who scored more than 80 marks.

(ii) SQL Query to Count Students Scoring More Than 80 Marks in Each Department

SELECT Department, COUNT(*) AS Total_Students
FROM STUDENTS
WHERE Marks > 80
GROUP BY Department;

Explanation:

• COUNT(*) counts the number of students.
• GROUP BY Department groups records department-wise.
• WHERE Marks > 80 considers only students scoring above 80.

Relationship in Relational Database

A relationship in a relational database defines how tables are connected with each other using keys such as primary keys and foreign keys.

Relationships help organize data efficiently and reduce data redundancy.

Main Types of Relationships

1. One-to-One (1:1)
2. One-to-Many (1:M)
3. Many-to-Many (M:N)

1. One-to-One Relationship (1:1)

In a one-to-one relationship, one record in one table is related to only one record in another table.

Example:

A person can have only one passport, and one passport belongs to only one person.

Use Case:

• Employee and Locker
• Person and Passport

2. One-to-Many Relationship (1:M)

In a one-to-many relationship, one record in one table can be related to many records in another table.

However, each record in the second table belongs to only one record in the first table.

Example:

One department can have many employees, but each employee belongs to only one department.

Use Case:

• Department and Employees
• Customer and Orders

3. Many-to-Many Relationship (M:N)

In a many-to-many relationship, many records in one table can relate to many records in another table.

This relationship is usually implemented using a junction table or bridge table.

Example:

A student can enroll in many courses, and a course can have many students.

Use Case:

• Students and Courses
• Doctors and Patients

Summary of Relationships

Relationships in relational databases help connect tables logically and efficiently. Proper relationships improve data integrity, reduce redundancy, and simplify database management.

Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA) is a security mechanism that requires a user to provide two or more different authentication factors to verify identity before accessing a system, application, or banking service.

MFA improves security because even if one authentication factor is compromised, unauthorized users still cannot easily gain access without the other required factors.

Modern banking systems widely use MFA to protect customer accounts, online transactions, and sensitive financial information.

Three Globally Recognized Authentication Factors

Example of MFA in Banking

When a customer logs into online banking:

• The customer enters a password (Something You Know).
• The bank sends an OTP to the customer’s mobile phone (Something You Have).
• The banking app may also require fingerprint verification (Something You Are).

Only after successful verification of multiple factors is access granted.

Advantages of MFA

• Provides stronger security.
• Reduces risk of unauthorized access.
• Protects sensitive banking information.
• Helps prevent phishing and password theft attacks.

MFA combines multiple authentication methods to improve security significantly. The three main authentication categories are something you know, something you have, and something you are.

Storage technology selection is very important in banking systems because performance, reliability, speed, and long-term storage requirements directly affect banking operations.

In this scenario:

• Server A hosts the Core Banking Database.
• Server B stores 10 years of immutable archive data.

Hard Disk Drive (HDD)

HDD is a traditional storage device that stores data using rotating magnetic disks and mechanical moving parts.

Data is read and written using a moving read/write head.

Characteristics of HDD

• Large storage capacity
• Lower cost per GB
• Slower read/write speed
• Mechanical parts increase failure risk
• Higher power consumption

Solid State Drive (SSD)

SSD is a modern storage device that stores data using flash memory chips without moving mechanical parts.

It provides much faster data access and better performance.

Characteristics of SSD

• Very high read/write speed
• Low latency
• More reliable because no moving parts exist
• Lower power consumption
• Higher cost per GB

Comparison Between HDD and SSD

Recommended Selection

• Server A (Core Banking Database): SSD is the better choice because banking databases require very fast transaction processing, low latency, and high reliability.
• Server B (10 Years Archive Data): HDD is more suitable because archive data requires large storage capacity at lower cost, and speed is less critical.

SSD is ideal for high-speed critical banking systems, while HDD is more suitable for long-term archival storage due to its large capacity and lower cost.

Historical Limitation Behind NAT

NAT became necessary because of the limited number of available IPv4 addresses.

IPv4 uses a 32-bit addressing system, which can provide approximately 4.3 billion unique IP addresses. During the early development of the Internet, this number seemed sufficient. However, as the number of computers, smartphones, servers, IoT devices, and internet users increased rapidly worldwide, IPv4 addresses started running out.

Public IP addresses must be globally unique, but there were not enough addresses for every device connected to the Internet.

To solve this problem, private IP addressing and NAT were introduced.

Using NAT:

• Many internal devices can share a single public IP address.
• Private IP addresses can be reused in different organizations.
• IPv4 address exhaustion is reduced significantly.

Thus, NAT became an important solution for conserving public IPv4 addresses and enabling large-scale Internet growth.

(b) Step-by-Step NAT Translation Process

Scenario:

• Internal Employee IP = 192.168.1.5
• Branch Router Public IP = 203.0.113.10
• External Web Server IP = 8.8.8.8

Step 1: Employee Sends Request

The employee’s computer creates a web request packet.

Source IP = 192.168.1.5
Destination IP = 8.8.8.8

Since 192.168.1.5 is a private IP address, it cannot travel directly over the Internet.

Step 2: Packet Reaches the Branch Router

The router receives the packet and checks its NAT table.

The router replaces the private source IP address with its own public IP address.

For example:

Before NAT:
Source = 192.168.1.5
Destination = 8.8.8.8

After NAT:
Source = 203.0.113.10
Destination = 8.8.8.8

The router stores this mapping in its NAT translation table.

Example NAT Table Entry:

Step 3: Packet Travels Across the Internet

The modified packet is sent through the Internet to the external web server.

The web server sees the request coming from the router’s public IP address instead of the private internal address.

Step 4: External Server Sends Response

The web server replies to:

Destination IP = 203.0.113.10

The response packet travels back to the branch router.

Step 5: Router Performs Reverse Translation

The router checks the NAT table and finds the matching internal device.

It replaces the destination public IP address with the original private IP address.

Before Reverse NAT:
Destination = 203.0.113.10

After Reverse NAT:
Destination = 192.168.1.5

Step 6: Response Delivered to Employee

The router forwards the packet to the employee’s computer.

The employee receives the web response correctly even though the internal private IP address was hidden from the Internet.

NAT allows multiple internal devices using private IP addresses to communicate with external networks using a smaller number of public IP addresses. It conserves IPv4 addresses and provides an additional layer of network privacy.

Given:
Network Address = 192.168.10.0/24
Required Subnets = 4

Step 1: Determine Borrowed Bits

To create subnets, host bits are borrowed from the host portion.

Formula:
Number of subnets = 2ⁿ

Here, required subnets = 4

So,
2ⁿ = 4
2² = 4

Therefore, 2 bits must be borrowed.

Step 2: Find New CIDR Prefix

Original prefix = /24
Borrowed bits = 2

So,
New prefix = 24 + 2 = /26

Step 3: Find New Subnet Mask

A /26 subnet mask means first 26 bits are network bits.

Binary subnet mask:

11111111.11111111.11111111.11000000

Convert to decimal:

11111111 = 255
11111111 = 255
11111111 = 255
11000000 = 192

Final Answer:
Borrowed Bits = 2
New CIDR Notation = 192.168.10.0/26
New Subnet Mask = 255.255.255.192