Read the theory blocks first, then re-derive every table from memory. The Example blocks are written in the exact style expected in CA tests and assignments. Section X is a compressed revision sheet — use it 24 hours before the test. Practice questions in Section XI carry difficulty badges (Easy / Medium / Hard); attempt them closed-book before checking Section XII.
| Component | Weightage | Mapped COs |
|---|---|---|
| Test | 25% | CO1, CO2 |
| Design Your Dream CV | 25% | CO1, CO2, CO4, CO5, CO6 |
| EDU-RevolUTION Task | 25% | CO3 |
| Assignment | 25% | CO4, CO5 |
Computational Thinking is the thought process involved in formulating a problem and expressing its solution(s) in such a way that a computer — human or machine — can effectively carry out the solution. It is a problem-solving methodology, not programming itself.
Computational thinking was popularised by Jeannette Wing (2006), who argued that CT is a fundamental skill for everyone, not just computer scientists — comparable to reading, writing and arithmetic. The core insight is that CT is about abstraction and decomposition, not about syntax or a specific programming language.
Breaking a large, complex problem into smaller, manageable sub-problems that can be solved independently. Each sub-problem is easier to understand, test and debug.
Example: "Build an e-commerce website" decomposes into user authentication, product catalogue, shopping cart, payment gateway, order tracking and admin dashboard.
Identifying similarities, trends or regularities among problems, data or processes. Recognised patterns allow reuse of previously proven solutions.
Example: Noticing that "search a student by roll number", "search a product by ID" and "search a contact by name" are all the same search pattern.
Filtering out irrelevant detail and keeping only the essential features needed to solve the problem. Abstraction creates models.
Example: A metro rail map is an abstraction — it shows stations and connectivity but ignores real distances, terrain and curves.
Developing a precise, finite, step-by-step set of instructions that transforms an input into the desired output. An algorithm must be unambiguous, finite, effective and have well-defined inputs/outputs.
where \(I\) = finite input set, \(O\) = finite output set, \(S\) = finite sequence of unambiguous steps, \(F\) = finiteness (terminates in finite time).
| Property | Meaning | Violation Example |
|---|---|---|
| Finiteness | Must terminate after a finite number of steps | An infinite while(true) loop |
| Definiteness | Each step is precisely and unambiguously defined | "Add a suitable number" — vague |
| Input | Zero or more well-defined inputs | Reading undefined variables |
| Output | At least one well-defined result | A procedure that computes but never returns |
| Effectiveness | Each step is basic enough to be carried out | Assuming an unavailable oracle |
BEGIN
READ n
SET sum ← 0
FOR i ← 1 TO n DO
sum ← sum + i
END FOR
PRINT sum
END
Step 1 (Decompose): (i) obtain three numbers, (ii) compare pairwise, (iii) output the winner.
Step 2 (Algorithm):
BEGIN
READ a, b, c
IF a ≥ b AND a ≥ c THEN
PRINT a
ELSE IF b ≥ a AND b ≥ c THEN
PRINT b
ELSE
PRINT c
END IF
END
Step 3 (Trace for a = 12, b = 27, c = 19): condition 1 false (12 < 27), condition 2 true → output 27. ✔
Naïve approach: loop \(n\) times and accumulate — \(O(n)\).
Pattern: \(1, 3, 6, 10, 15, \dots\) are triangular numbers.
Result: a closed-form \(O(1)\) solution. For \(n = 100\), \(S = 100 \times 101 / 2 = 5050\). This is a classic demonstration that recognising a pattern converts an iterative solution into a constant-time solution.
Real-world entities: books, members, librarians, shelves, fines, suppliers.
Abstraction (keep only what matters): Book(ISBN, title, author, copies) and Member(id, name, borrowed[]).
Ignored detail: physical shelf colour, librarian's name, book weight, room temperature.
Benefit: the resulting model is small enough to implement in a database yet rich enough to answer all required queries.
Decomposition: restaurant preparation time + rider assignment + route distance + traffic factor.
Pattern recognition: historical delivery data shows ETA correlates strongly with distance and time of day.
Abstraction: ignore rider's shoe size, restaurant's interior design; keep distance, prep time, traffic index.
Algorithm:
with \(D\) in km, \(v_{avg}\) in km/min and \(k_{traffic} \ge 1\). For \(T_{prep}=12\) min, \(D=6\) km, \(v_{avg}=0.5\) km/min, \(k_{traffic}=1.3\): \(ETA = 12 + 12 \times 1.3 = 27.6 \approx 28\) min.
When asked "Explain computational thinking with an example", always structure the answer as Decomposition → Pattern Recognition → Abstraction → Algorithm and apply all four steps to one concrete scenario. This alone usually earns full marks.
A computing environment is the combination of hardware, system software, application software, network infrastructure and human users that together allow computational tasks to be performed.
| Layer | Components | Role |
|---|---|---|
| Hardware | CPU, RAM, storage, I/O devices, GPU | Physical execution of instructions |
| System software | Operating system, device drivers, utilities, compilers | Resource management and abstraction of hardware |
| Application software | Browsers, IDEs, MS Office, DBMS | Solves user-level problems |
| Network | LAN, WAN, Internet, protocols (TCP/IP) | Enables communication and distributed computing |
| Users | End users, developers, administrators | Define goals and interact with the system |
| Type | Key Idea | Example |
|---|---|---|
| Batch OS | Jobs grouped and executed without user interaction | Early IBM mainframe systems |
| Multiprogramming | Several jobs kept in memory; CPU switches when one waits for I/O | Classic mainframe OS |
| Time-sharing | CPU time sliced among many interactive users | UNIX, Linux |
| Real-time (RTOS) | Guaranteed response within a deadline | VxWorks, FreeRTOS |
| Distributed | Multiple independent machines appear as one system | Amoeba, Google's Borg |
| Network OS | Manages resources over a network | Windows Server, Novell NetWare |
| Mobile OS | Touch-first, power-optimised, sandboxed apps | Android, iOS |
The Software Development Life Cycle (SDLC) is the structured process used to plan, build, test, deploy and maintain software.
| Phase | Deliverable |
|---|---|
| Requirement gathering & analysis | SRS document |
| System design | Architecture, ER diagrams, UML |
| Implementation / coding | Source code, unit tests |
| Testing | Test cases, defect reports |
| Deployment | Release build, user manual |
| Maintenance | Patches, version upgrades |
| Model | Nature | Best When | Weakness |
|---|---|---|---|
| Waterfall | Sequential, rigid | Requirements frozen and well understood | No accommodation of late changes |
| Incremental | Deliver in increments | Partial functionality can be released early | Requires good architecture up front |
| Spiral | Iterative + risk analysis | Large, high-risk projects | Expensive for small projects |
| Agile / Scrum | Short sprints, continuous feedback | Evolving requirements, fast delivery | Needs disciplined team & customer involvement |
| DevOps | Continuous integration & delivery | Cloud-native, high release frequency | Cultural change required |
A Version Control System records changes to files over time so that specific versions can be recalled later. It enables collaboration without overwriting each other's work.
| Type | Mechanism | Example |
|---|---|---|
| Local VCS | Single machine database | RCS |
| Centralised VCS | One central server; clients check out files | SVN, CVS |
| Distributed VCS | Every clone is a full repository | Git, Mercurial |
| Term | Meaning |
|---|---|
| Repository (repo) | Project folder tracked by Git, containing the .git directory |
| Working directory | The files currently being edited |
| Staging area (index) | Files marked to be included in the next commit |
| Commit | Immutable snapshot with a unique SHA hash and message |
| Branch | Independent line of development |
| Merge | Combining changes from two branches |
| Remote | Hosted copy of the repo (GitHub, GitLab, Bitbucket) |
| Clone / Fork | Copy a remote repo locally / copy another user's repo to your account |
| Pull request (PR) | Request to merge a branch, enabling code review |
git init # create a new local repository
git config --global user.name "Aarav"
git config --global user.email "aarav@example.com"
git status # see modified files
git add main.py # stage a specific file
git add . # stage everything
git commit -m "Add login module" # snapshot
git branch feature-login # create branch
git checkout feature-login # switch to it
git push -u origin feature-login # publish branch
git checkout main
git merge feature-login # merge branch into main
git log --oneline --graph # visualise history
Two developers edit the same line of config.py. On merge, Git inserts conflict markers:
<<<<<<< HEAD
timeout = 30
=======
timeout = 60
>>>>>>> feature-login
Resolution steps: (1) open the file, (2) decide the correct value (or combine both), (3) delete all marker lines, (4) git add config.py, (5) git commit. A conflict is not an error — it is Git asking a human to make a semantic decision.
Confusing git fetch with git pull. fetch downloads remote changes but does not modify your working directory; pull = fetch + merge. In a shared repository always pull before you push.
Cyber security is the practice of protecting systems, networks, programs and data from digital attack, damage or unauthorised access. Its objectives are captured by the CIA triad.
| Pillar | Meaning | Control Example | Attack Example |
|---|---|---|---|
| Confidentiality | Data accessible only to authorised parties | Encryption, access control | Data breach, eavesdropping |
| Integrity | Data is accurate and unaltered | Hashing (SHA-256), checksums | Man-in-the-middle tampering |
| Availability | Systems and data are accessible when needed | Redundancy, backups, DDoS mitigation | Denial-of-Service, ransomware |
Two extended pillars are often added: Authentication (proving identity) and Non-repudiation (inability to deny an action, achieved via digital signatures).
| Threat | Description | Typical Vector |
|---|---|---|
| Virus | Code that attaches to a host file and replicates when executed | Email attachments, USB drives |
| Worm | Self-replicating program that spreads without a host | Network vulnerabilities |
| Trojan Horse | Disguised as legitimate software but performs malicious acts | Pirated downloads |
| Ransomware | Encrypts files and demands payment for the key | Phishing, RDP exposure |
| Spyware / Keylogger | Secretly records activity and keystrokes | Bundled freeware |
| Adware | Forces unwanted advertisements | Browser extensions |
| Rootkit | Hides malicious presence at OS level | Privilege escalation |
| Phishing / Vishing / Smishing | Social engineering via email / voice / SMS to steal credentials | Fake login pages |
| DoS / DDoS | Flooding a service to exhaust resources | Botnets |
| Man-in-the-Middle | Intercepting and possibly altering communication | Rogue Wi-Fi hotspots |
| SQL Injection | Injecting SQL through unsanitised input | Web forms |
| Zero-day | Exploits an unknown, unpatched vulnerability | Advanced persistent threats |
| Social Engineering | Manipulating people rather than machines | Pretexting, tailgating, baiting |
@paypa1.com).A firewall is a network security device (hardware, software, or both) that monitors and controls incoming and outgoing traffic based on a defined set of security rules.
| Generation | Type | How it Works | Limitation |
|---|---|---|---|
| 1st | Packet Filtering | Inspects source/destination IP, port, protocol against ACL | Cannot inspect payload; stateless |
| 2nd | Stateful Inspection | Tracks connection state table (NEW / ESTABLISHED / RELATED) | Heavy on memory for large tables |
| 3rd | Application / Proxy | Terminates and re-creates connections at the application layer | Slower; per-application config |
| 4th | Next-Generation (NGFW) | Deep packet inspection, IPS, application awareness, TLS inspection | Higher cost and complexity |
| — | Host-based (personal) | Software on a single machine (Windows Defender Firewall) | Protects only that host |
| — | Cloud / WAF | Filters HTTP(S) traffic to web apps (SQLi, XSS) | Bypassed if traffic does not pass through it |
ACTION PROTO SRC DST PORT COMMENT
ALLOW TCP any 10.0.0.5 443 Allow HTTPS to web server
ALLOW TCP any 10.0.0.5 22 Allow SSH from admin subnet (restrict!)
DENY ANY any any any Default deny (implicit last rule)
The default-deny policy (deny everything not explicitly allowed) is the industry best practice, as opposed to default-allow.
A sub-network that exposes public-facing services (web, mail, DNS) to the Internet while keeping the internal LAN isolated. Traffic between the DMZ and LAN is filtered by an internal firewall.
| Account Type | Typical Privileges | Use Case |
|---|---|---|
| Administrator / Root / Superuser | Install software, change system settings, manage all users, access all files | System administration only |
| Standard / User | Run applications, modify own files; cannot change system settings | Everyday work |
| Guest | Minimal, temporary, often no persistent storage | Visitors, kiosks |
| Service / System | Non-interactive; restricted to one service | Web server, database daemon |
| Power User (Windows legacy) | Between standard and admin | Legacy compatibility |
A user, program or process should be granted only the minimum privileges necessary to perform its function, and only for the minimum time required. This limits the blast radius of a compromised account.
| Model | Basis | Example |
|---|---|---|
| DAC (Discretionary) | Owner decides permissions | Unix chmod rwx bits |
| MAC (Mandatory) | System-wide labels/clearance levels | SELinux, military systems |
| RBAC (Role-Based) | Permissions attached to roles, users assigned to roles | ERP: "HR-Manager", "Auditor" |
| ABAC (Attribute-Based) | Policy evaluated on user, resource and environment attributes | Zero-trust architectures |
Together these form the AAA framework.
MFA combines factors from different categories:
| Factor Category | Examples |
|---|---|
| Something you know | Password, PIN, security question |
| Something you have | OTP token, authenticator app, smart card |
| Something you are | Fingerprint, face ID, iris scan |
| Somewhere you are | Geo-location, IP range |
| Something you do | Typing rhythm, gait |
Using two passwords is not MFA — the factors must be from different categories.
| Practice | Why it Matters |
|---|---|
| Use HTTPS (padlock) for all sensitive sites | Encrypts traffic with TLS; prevents eavesdropping |
| Strong, unique passphrases + password manager | Prevents credential-stuffing across breached sites |
| Enable MFA everywhere possible | Blocks ~99% of automated account-takeover attacks |
| Keep OS, browser and apps patched | Closes known vulnerabilities before exploitation |
| Avoid public/free Wi-Fi for banking | Open networks allow MITM and evil-twin hotspots |
| Use a VPN on untrusted networks | Creates an encrypted tunnel to a trusted endpoint |
| 3-2-1 backup rule | 3 copies, 2 media types, 1 offsite — defeats ransomware |
| Log out of sessions; lock the screen | Prevents physical and session-hijack access |
| Review app permissions and privacy settings | Limits unnecessary data collection |
| Never reuse official credentials on third-party sites | Prevents lateral movement after a breach |
\(C\) = size of character set, \(L\) = password length, \(N\) = number of possible passwords.
Example: An 8-character password from lowercase letters only: \(26^{8} \approx 2.09\times10^{11}\). A 12-character passphrase mixing upper, lower, digits and symbols (\(C=94\)): \(94^{12}\approx 4.6\times10^{23}\). Length dominates complexity — a longer passphrase is stronger than a short cryptic one.
A digital footprint is the trail of data created by a person's activity on the Internet. It is the sum of all information about an individual that exists online.
| Aspect | Active Footprint | Passive Footprint |
|---|---|---|
| Creation | Deliberately shared by the user | Collected automatically without conscious action |
| Examples | Posts, comments, photos, form submissions, blog articles | IP address, cookies, browsing history, device fingerprint, location pings |
| User control | High — user decides what to publish | Low — largely invisible to the user |
Situation: A final-year student applies to five product-based companies. Two reject at screening despite a strong CGPA.
Audit findings: (i) public Instagram posts with offensive language from 2019, (ii) a public GitHub with forked repositories only and no README, (iii) a LinkedIn headline reading "Student at XYZ".
Corrective action plan: delete/archive the offending posts, make personal accounts private, rebuild GitHub with three documented original projects, rewrite the LinkedIn headline as "Final-year CSE | Python & Cloud | Building scalable web apps", request two recommendations.
Outcome: within one recruitment cycle, three interview calls. Lesson: the digital footprint is a screening filter that acts before the interview.
Cyber ethics is the study of moral, legal and social issues related to the use of computers, networks and digital information. It defines what constitutes responsible behaviour in cyberspace.
| Ethical Issue | Description | Responsible Practice |
|---|---|---|
| Software Piracy | Unauthorised copying or distribution of licensed software | Use licensed/open-source software |
| Plagiarism | Presenting others' work as one's own | Cite sources; use plagiarism checkers |
| Intellectual Property Rights | Violation of copyright, patents, trademarks | Respect licences (GPL, MIT, CC) |
| Unauthorised Access | Accessing systems without permission (hacking) | Ethical hacking only with written authorisation |
| Data Privacy | Collecting or sharing personal data without consent | Follow GDPR/DPDP principles; anonymise |
| Cyberbullying | Harassment through digital channels | Report, block, do not forward |
| Identity Theft | Impersonating someone online | Protect PII; enable MFA |
| Misinformation | Spreading false information | Verify before sharing |
| Law | Relevance |
|---|---|
| Information Technology Act, 2000 | Primary cyber law: offences, digital signatures, cybercrime penalties |
| IT (Amendment) Act, 2008 | Added Section 66 (computer-related offences), 67 (obscene material), 69 (interception) |
| Copyright Act, 1957 | Protects source code and creative works |
| Digital Personal Data Protection Act, 2023 | Consent-based processing of personal data |
Unauthorised access to a computer system is a punishable offence under Section 43 and Section 66 of the IT Act, 2000 — even if no data is stolen and even if the intent was "just to check". Ethical hacking requires written authorisation and a defined scope.
EDU-RevolUTION is a university-level academic enrichment initiative designed to supplement the regular curriculum with industry-aligned, credit-bearing and skill-oriented learning experiences. It transforms the learner from a passive recipient of lectures into an active, self-directed professional.
Vision: To create a holistic learning ecosystem in which every student graduates with verified technical competency, professional readiness, and a portfolio of real-world achievements — not merely a transcript of marks.
| Component | Description | Typical Platform |
|---|---|---|
| MOOC integration | Massive Open Online Courses with proctored exams | NPTEL, SWAYAM, Coursera |
| Certification tracks | Vendor certifications in cloud, data, security | AWS, Azure, Google, Cisco |
| Project-based learning | Real client or open-source projects | GitHub, internships |
| Hackathons & competitions | Time-boxed problem-solving events | Smart India Hackathon, Kaggle |
| Industry interaction | Guest lectures, webinars, mentorships | Alumni network, corporate partners |
| Soft-skill workshops | Communication, aptitude, interview preparation | Training & placement cell |
| Portfolio & CV building | Structured documentation of achievements | LinkedIn, GitHub, e-portfolio |
| Dimension | Before EDU-RevolUTION | After EDU-RevolUTION |
|---|---|---|
| Knowledge | Textbook-bound, syllabus-limited | Current, industry-relevant, continuously updated |
| Skills | Theoretical understanding | Demonstrable, verified competency |
| Assessment | Exam-centric | Project- and portfolio-centric |
| Employability | Degree certificate only | Degree + certifications + portfolio + experience |
| Mindset | Dependent learner | Self-directed lifelong learner |
| Network | Classmates only | Industry mentors, alumni, global peers |
| Semester | Goal | Action | Artefact |
|---|---|---|---|
| 3 | Programming depth | NPTEL "Programming in Python" | 10 solved problem sets on GitHub |
| 4 | Data foundations | SQL + Data Structures MOOC | Mini project: Student Result Analyser |
| 5 | Cloud & deployment | AWS Cloud Practitioner | Deployed web app with CI/CD |
| 6 | Specialisation | Machine Learning certification | Kaggle notebook + report |
Each row produces a bullet point for the CV, a repository for GitHub, and a talking point for the interview.
Artificial Intelligence (AI) is the branch of computer science concerned with building machines and software that perform tasks which, when performed by humans, would require intelligence — such as reasoning, learning, perception, language understanding and decision-making.
| Type | Description | Status |
|---|---|---|
| Narrow AI (ANI) | Performs one specific task; no transfer of learning | Exists today — chess engines, recommendation systems, chatbots |
| General AI (AGI) | Human-level reasoning across any domain | Theoretical / research |
| Super AI (ASI) | Surpasses the best human minds in every domain | Hypothetical |
Machine Learning (ML) is a subset of AI in which systems learn patterns from data and improve performance on a task with experience, without being explicitly programmed for every rule.
Tom Mitchell's formal definition: a computer program is said to learn from experience \(E\) with respect to task \(T\) and performance measure \(P\), if its performance at \(T\), as measured by \(P\), improves with experience \(E\).
| Paradigm | Training Data | Goal | Algorithms | Applications |
|---|---|---|---|---|
| Supervised Learning | Labeled \((x, y)\) pairs | Predict \(y\) for new \(x\) | Linear/Logistic Regression, Decision Trees, SVM, Random Forest, Neural Networks | Spam detection, price prediction, image classification |
| Unsupervised Learning | Unlabeled \(x\) only | Discover structure | K-Means, Hierarchical Clustering, PCA, Apriori | Customer segmentation, anomaly detection, market-basket analysis |
| Semi-supervised | Few labeled + many unlabeled | Reduce labelling cost | Self-training, co-training | Medical imaging, web page classification |
| Reinforcement Learning | Reward signal from environment | Learn optimal policy | Q-Learning, SARSA, DQN, PPO | Robotics, game playing (AlphaGo), traffic control |
| Aspect | Regression | Classification |
|---|---|---|
| Output | Continuous value | Discrete class label |
| Example | Predict house price in ₹ | Predict loan default: Yes/No |
| Metrics | MSE, RMSE, MAE, \(R^2\) | Accuracy, Precision, Recall, F1, ROC-AUC |
Deep Learning uses artificial neural networks with many hidden layers. Each layer learns increasingly abstract features from raw data. It powers computer vision (CNNs), sequence modelling (RNNs, LSTMs) and modern language models (Transformers).
Generative AI (GenAI) refers to models that generate new content — text, images, audio, video or code — that resembles the data on which they were trained.
| Model Family | Architecture | Generates | Examples |
|---|---|---|---|
| Large Language Models | Transformer (decoder-only) | Text, code | GPT family, Gemini, Claude, Llama |
| Diffusion models | Denoising diffusion | Images, video | Stable Diffusion, DALL·E, Midjourney, Sora |
| GANs | Generator + Discriminator | Images, deepfakes | StyleGAN |
| VAEs | Encoder–Decoder with latent space | Images, molecules | Drug discovery models |
| Technique | Description |
|---|---|
| Zero-shot | Direct instruction with no examples |
| Few-shot | Provide 2–5 input–output examples in the prompt |
| Chain-of-thought | Ask the model to reason step by step |
| Role prompting | Assign a persona ("You are a security auditor…") |
| Retrieval-Augmented Generation (RAG) | Retrieve relevant documents and supply them as context |
| Constrained output | Specify format (JSON, table, word limit) |
LLMs generate statistically plausible text, not verified facts. A "hallucination" is confident but incorrect output. Never submit AI-generated code, citations or calculations without independent verification.
Agentic AI refers to autonomous AI systems that can perceive their environment, set sub-goals, plan multi-step actions, use external tools, and iterate toward an objective with minimal human intervention.
| Capability | Description |
|---|---|
| Autonomy | Operates without step-by-step human instruction |
| Planning | Breaks a goal into an ordered task list and revises it |
| Tool use | Calls APIs, databases, browsers, code interpreters |
| Memory | Short-term (context) and long-term (vector store) recall |
| Reflection | Critiques its own output and retries on failure |
| Multi-agent collaboration | Several specialised agents (planner, coder, reviewer) cooperate |
| Aspect | Generative AI | Agentic AI |
|---|---|---|
| Primary function | Create content on request | Achieve a goal over multiple steps |
| Interaction | Prompt → response | Goal → plan → action → observation → revise |
| Human role | Prompt author and reviewer | Goal setter and supervisor |
| Example | "Write a Python function to parse CSV" | "Analyse this sales dataset and email me a report" (agent writes code, runs it, checks errors, compiles report, sends mail) |
Goal: "Prepare a 30-day DSA revision plan and track my progress."
Human checkpoint: the student approves the plan before execution begins — an example of human-in-the-loop design.
| Technology | Core Idea | Engineering Application |
|---|---|---|
| Cloud Computing | On-demand computing resources over the Internet (IaaS, PaaS, SaaS) | Scalable web hosting, serverless functions |
| Virtualisation | Abstracting physical hardware into multiple virtual machines / containers | Docker, Kubernetes, VMware |
| Edge Computing | Processing data near the source instead of a distant data centre | IoT sensors, autonomous vehicles |
| Internet of Things (IoT) | Networked physical devices with sensors and actuators | Smart homes, industrial monitoring |
| Blockchain | Distributed, immutable, cryptographically linked ledger | Supply-chain traceability, digital identity |
| Big Data | High volume, velocity, variety, veracity, value data processing | Real-time analytics, recommendation engines |
| Quantum Computing | Qubits exploiting superposition and entanglement | Cryptanalysis, molecular simulation |
| AR / VR / XR | Layered or fully immersive digital environments | Training simulators, remote assistance |
| 5G / 6G | Ultra-low latency, high-bandwidth mobile networks | Connected vehicles, telemedicine |
| Digital Twin | Virtual replica of a physical asset updated in real time | Predictive maintenance of turbines |
| Robotic Process Automation | Software bots automating repetitive rule-based tasks | Invoice processing, HR onboarding |
| Principle | Meaning | Failure Mode |
|---|---|---|
| Fairness | No discriminatory outcomes across groups | Biased hiring model trained on skewed data |
| Transparency / Explainability | Decisions can be understood and audited | Black-box loan rejection with no reason |
| Accountability | A human/organisation is answerable for harm | "The algorithm decided" defence |
| Privacy | Personal data is collected and used lawfully | Scraping facial images without consent |
| Safety & Robustness | Systems behave reliably under adversarial input | Prompt injection hijacking an agent |
| Human oversight | Meaningful human control retained | Fully automated weapons targeting |
| Sustainability | Environmental cost of training is managed | Massive GPU energy and water consumption |
| Employment impact | Responsible transition for displaced workers | Unmanaged automation of entry-level roles |
Remember the nesting: AI ⊃ ML ⊃ DL ⊃ (GenAI models), and Agentic AI is an architectural layer that uses GenAI models plus planning, memory and tools. A one-line diagram earns marks quickly.
Career planning is a structured, ongoing process of self-assessment, exploration of opportunities, goal setting, skill development and periodic review, aimed at achieving a satisfying professional life.
It is iterative, not a one-time decision. The five stages are:
| Code | Type | Description | Typical Roles |
|---|---|---|---|
| R | Realistic | Hands-on, tools, machines, physical systems | Mechanical, civil, hardware engineer |
| I | Investigative | Analysis, research, problem-solving | Data scientist, R&D engineer, researcher |
| A | Artistic | Creativity, design, expression | UI/UX designer, game developer |
| S | Social | Helping, teaching, interacting | Technical trainer, product evangelist |
| E | Enterprising | Leading, persuading, business | Product manager, entrepreneur |
| C | Conventional | Organising, accuracy, structured data | DevOps, QA, database administrator |
| Helpful | Harmful | |
|---|---|---|
| Internal | Strengths — DSA proficiency, communication, CGPA | Weaknesses — no internship, weak aptitude, low confidence |
| External | Opportunities — cloud demand, campus placements, alumni network | Threats — rising competition, AI automation of entry roles |
Values determine satisfaction, while skills determine eligibility. Common values: learning, autonomy, compensation, stability, impact, work–life balance, location, team culture.
An aspiration is a long-range professional destination, e.g. "become a cloud security architect in a product company within eight years". Aspirations should be decomposed into intermediate milestones.
| Letter | Criterion | Weak Goal | SMART Goal |
|---|---|---|---|
| S | Specific | "Learn machine learning" | "Complete the NPTEL ML course" |
| M | Measurable | "Get better at coding" | "Solve 300 DSA problems" |
| A | Achievable | "Become a Google engineer next month" | "Clear 2 rounds in one campus drive" |
| R | Relevant | "Learn Japanese" | "Learn SQL — required for data roles" |
| T | Time-bound | "Someday" | "By 31 December of this academic year" |
A skill gap is the difference between the competencies required by a target role and the competencies currently possessed by the individual.
\(R_i\) = required proficiency, \(C_i\) = current proficiency, \(w_i\) = importance weight of competency \(i\) (on a 1–5 scale).
| Competency | Required \(R_i\) | Current \(C_i\) | Weight \(w_i\) | Gap | Priority \(w_i \times\) Gap |
|---|---|---|---|---|---|
| SQL | 5 | 3 | 5 | 2 | 10 (highest) |
| Python (pandas) | 5 | 4 | 5 | 1 | 5 |
| Statistics | 4 | 2 | 4 | 2 | 8 |
| Power BI / Tableau | 4 | 2 | 3 | 2 | 6 |
| Communication | 4 | 4 | 3 | 0 | 0 |
Interpretation: SQL and Statistics are the critical gaps. Action: dedicate 6 weeks to SQL (daily practice + one project) and 4 weeks to applied statistics. Communication requires no action. Total weighted gap = 29, which becomes the baseline against which quarterly progress is measured.
Aspiration: "I want to work in cyber security."
Long-term goal: Become a Security Operations Centre (SOC) analyst at a product company within 4 years of graduation.
Medium-term goal: Earn CompTIA Security+ before the end of the sixth semester.
Short-term SMART goal: "Complete 3 hours of network-security study every weekday for 12 weeks, finish 120 practice questions, and score ≥ 85% in two mock tests by 30 November."
An Individual Development Plan is a written, time-bound document that translates career goals and identified skill gaps into specific learning actions, resources, milestones and success measures for a defined period (usually 6–12 months).
| Component | Description |
|---|---|
| Career objective | The target role and timeframe |
| Self-assessment summary | Strengths, weaknesses, values, interests |
| Skill-gap table | Prioritised list with weights |
| Development actions | Courses, projects, mentorship, certifications |
| Resources | Platforms, books, budget, time allocation |
| Milestones & deadlines | Quarterly checkpoints with dates |
| Success metrics / KPIs | How completion is measured |
| Support required | Mentor, faculty, peer group, funding |
| Review schedule | Monthly self-review, quarterly mentor review |
| Quarter | Gap Addressed | Action | KPI |
|---|---|---|---|
| Q1 (Jul–Sep) | SQL (gap 2) | Complete SQL MOOC + 100 query exercises | Certificate + 100 solved queries |
| Q2 (Oct–Dec) | Statistics (gap 2) | Applied statistics course + 2 case studies | Score ≥ 80% + 2 published notebooks |
| Q3 (Jan–Mar) | Visualisation (gap 2) | Power BI project on a real dataset | Dashboard published on GitHub |
| Q4 (Apr–Jun) | Portfolio & interview | End-to-end analytics project + mock interviews | 3 mock interviews ≥ 70% |
Worked calculation: For SQL, \(R = 5\), \(C_{start} = 3\), \(C_{now} = 4\). Then
\[ \text{Gap Closure} = \frac{4-3}{5-3}\times 100 = 50\% \]
Half the SQL gap has been closed — measurable evidence of progress for the mentor review.
| Horizon | Tool | Review Frequency |
|---|---|---|
| Daily | To-do list / habit tracker | Every evening |
| Weekly | Kanban board (To-do / Doing / Done) | Every Sunday |
| Monthly | IDP spreadsheet with KPI columns | Last working day |
| Quarterly | Mentor review meeting | Once per quarter |
| Annually | Full IDP revision and re-assessment | End of academic year |
Writing an IDP and never opening it again. An IDP without a scheduled review date is a wish list, not a plan. Put the review dates into your calendar at the moment you create the plan.
| Pathway | Typical Entry Role | Core Competencies | Growth Route |
|---|---|---|---|
| Software Development | SDE-1 / Junior Developer | DSA, OOP, DBMS, Git, one framework | SDE-2 → Tech Lead → Architect |
| Data & Analytics | Data Analyst | SQL, Python, statistics, visualisation | Data Scientist → ML Engineer |
| Cyber Security | SOC Analyst | Networking, OS internals, SIEM, Security+ | Penetration Tester → Security Architect |
| Cloud & DevOps | Cloud Support Associate | Linux, AWS/Azure, Docker, Kubernetes, CI/CD | DevOps Engineer → SRE → Cloud Architect |
| Product & Business | Associate Product Manager | Requirement analysis, analytics, communication | PM → Senior PM → Group PM |
| Higher Studies | M.Tech / MS | GATE / GRE, research aptitude, publications | Researcher → PhD → Academia / R&D |
| Entrepreneurship | Founder / Co-founder | Problem discovery, MVPs, fundraising, leadership | Seed → Series A → Scale |
Criteria weighted: Interest (0.35), Competency fit (0.25), Market demand (0.25), Effort to prepare (0.15). Scores out of 10.
| Pathway | Interest | Fit | Demand | Effort (inverse) | Weighted Score |
|---|---|---|---|---|---|
| Software Development | 7 | 8 | 8 | 6 | 0.35(7)+0.25(8)+0.25(8)+0.15(6) = 7.35 |
| Data & Analytics | 9 | 7 | 9 | 7 | 0.35(9)+0.25(7)+0.25(9)+0.15(7) = 8.25 |
| Cyber Security | 6 | 5 | 8 | 4 | 0.35(6)+0.25(5)+0.25(8)+0.15(4) = 5.95 |
Decision: Data & Analytics scores highest → adopt it as the primary pathway and keep Software Development as a secondary option.
Professional readiness is the state of possessing the technical competence, behavioural skills, workplace awareness and professional documentation required to perform effectively in an industry role from day one.
It has four dimensions: Technical (domain knowledge), Behavioural (communication, teamwork), Attitudinal (ownership, adaptability, ethics) and Documentary (resume, portfolio, profiles).
Prepare three questions before every session, connect on LinkedIn within 24 hours with a personalised note, and follow up with a short thank-you message mentioning one specific insight you gained. This converts a one-hour talk into a long-term professional contact.
| Requirement | Details |
|---|---|
| Academic record | Strong CGPA (typically 7.5+/10 or equivalent); no backlogs |
| English proficiency | IELTS (typically 6.5+), TOEFL iBT (90+), or PTE |
| Entrance test | GRE (MS/PhD in US), GMAT (MBA), GATE (some programmes) |
| Statement of Purpose (SOP) | 1–2 pages linking past work, target programme and career goal |
| Letters of Recommendation | 2–3 from professors or employers who know your work |
| Financial proof | Bank statements, loan sanction, scholarship letters |
| Visa | F-1 (USA), Tier 4 / Student Route (UK), Subclass 500 (Australia) |
| Timeline | Start 12–18 months before the intake; tests 8–10 months ahead |
Networking is the deliberate building and maintaining of mutually beneficial relationships with people who can influence, inform or advance your career.
Never send a bare "Please refer me" message. Personalise every request: state who you are, why you are contacting that specific person, what you have already done, and make a small, specific ask (e.g. "Could you spare 10 minutes to review my portfolio structure?").
| C | Meaning |
|---|---|
| Clear | One idea per sentence; no ambiguity |
| Concise | No unnecessary words; respect the reader's time |
| Concrete | Specific facts and figures, not vague claims |
| Correct | Accurate grammar, spelling and technical content |
| Coherent | Logical flow and structure |
| Complete | All required information present |
| Courteous | Polite, respectful, professional tone |
Subject: [CSE111] Request for project guide approval — Aarav Sharma, 1210XXXX
Dear Professor Menon,
I am Aarav Sharma (Roll No. 1210XXXX), a third-semester CSE student.
I have drafted a project proposal on "Anomaly Detection in Campus
Network Logs" and would like your guidance.
Attached: proposal.pdf (2 pages).
Could we meet for 15 minutes during your office hours this week?
Thank you for your time.
Regards,
Aarav Sharma
+91-XXXXXXXXXX | aarav@example.com | github.com/aarav
Rules: professional subject line, formal salutation, context in the first two lines, specific ask, attachments named clearly, professional signature block, proofread before sending.
| Channel | Best For | Avoid For |
|---|---|---|
| Formal requests, documentation trail, external communication | Urgent blocking issues | |
| Instant message (Slack/Teams) | Quick clarifications, team coordination | Sensitive or long-form content |
| Video call | Design discussions, stand-ups, difficult conversations | Simple status updates |
| Documentation / wiki | Decisions, onboarding, runbooks | Time-critical alerts |
Leadership is the ability to influence, motivate and enable others to contribute toward the effectiveness and success of the organisation of which they are members.
| Style | Behaviour | Effective When |
|---|---|---|
| Autocratic | Leader decides alone | Crisis, strict deadlines, unskilled team |
| Democratic / Participative | Decisions made with team input | Skilled team, complex problems |
| Laissez-faire | Team given full freedom | Experts, creative research work |
| Transformational | Inspires through vision and growth | Change initiatives, start-ups |
| Transactional | Rewards and penalties for performance | Routine, metric-driven operations |
| Servant | Leader serves the team's needs first | Agile teams, knowledge organisations |
Leadership in a student context: leading a hackathon team, coordinating a college fest committee, serving as class representative, or maintaining an open-source project with contributors.
| Skill | Definition | How to Demonstrate It |
|---|---|---|
| Active listening | Fully attending, paraphrasing, asking clarifying questions | Summarise the speaker's point before replying |
| Empathy | Understanding others' perspective and feelings | Acknowledge a teammate's workload before adding tasks |
| Teamwork | Collaborating toward a shared objective | Contribute to a group project beyond your assigned part |
| Conflict resolution | Addressing disagreement constructively | Focus on the problem, not the person |
| Negotiation | Reaching mutually acceptable agreements | Discuss task allocation with trade-offs |
| Emotional intelligence | Recognising and managing one's own and others' emotions | Stay composed during code-review criticism |
| Feedback skills | Giving and receiving constructive criticism | Use SBI: Situation–Behaviour–Impact |
| Time management | Prioritising and meeting commitments | Use Eisenhower matrix and calendars |
Example: "In yesterday's stand-up (Situation), you reported the module as complete when two tests were failing (Behaviour). It delayed integration by a day for the whole team (Impact)." This is specific, non-personal and actionable.
| Criterion | Weight | Offer A (Service Co.) | Offer B (Product Start-up) |
|---|---|---|---|
| Learning & skill growth | 0.30 | 6 → 1.80 | 9 → 2.70 |
| Compensation | 0.20 | 8 → 1.60 | 7 → 1.40 |
| Job security | 0.20 | 9 → 1.80 | 5 → 1.00 |
| Location / commute | 0.15 | 7 → 1.05 | 6 → 0.90 |
| Brand value on CV | 0.15 | 7 → 1.05 | 8 → 1.20 |
| Total | 1.00 | 7.30 | 7.20 |
The scores are nearly equal. The tie-breaker is the long-term value of learning: if the student's aspiration is a product-company role in three years, Offer B is strategically superior despite the lower security score.
| Role | Technical | Tools | Behavioural |
|---|---|---|---|
| SDE-1 | DSA, OOP, DBMS, OS, networks | Git, Docker, one cloud | Problem-solving, teamwork, ownership |
| Data Analyst | SQL, statistics, probability | Python, Excel, Power BI/Tableau | Attention to detail, storytelling with data |
| SOC Analyst | TCP/IP, OS internals, cryptography | Splunk, Wireshark, SIEM | Vigilance, incident reporting, calm under pressure |
| Cloud Engineer | Linux, networking, virtualization | AWS/Azure, Terraform, Kubernetes | Automation mindset, documentation |
| QA Engineer | Testing types, SDLC, defect life cycle | Selenium, JIRA, Postman | Meticulousness, persistence |
| UI/UX Designer | Design principles, accessibility | Figma, Adobe XD | Empathy, communication, iteration |
A professional portfolio is an organised, curated collection of evidence that demonstrates a person's skills, achievements, projects and growth over time. It is a proof-of-work document, as opposed to a résumé which is a summary document.
| Purpose | Explanation |
|---|---|
| Evidence of competence | Shows what you can do, not just what you studied |
| Differentiation | Distinguishes you from candidates with identical degrees and CGPA |
| Reflection | Forces you to articulate the problem, approach, and learning of each project |
| Career continuity | Creates a record that grows throughout the degree and beyond |
| Interview preparation | Every portfolio item becomes a STAR-format interview story |
| Networking asset | A shareable link that recruiters and mentors can review instantly |
| Self-assessment | Reveals gaps in your own skill profile over time |
| # | Component | What to Include |
|---|---|---|
| 1 | Personal profile | Name, photograph, headline, one-paragraph professional summary, contact links |
| 2 | Academic record | Degree, CGPA, relevant coursework, academic awards |
| 3 | Projects | Problem statement, tech stack, your specific contribution, results, repository link, demo |
| 4 | Research contributions | Papers, conference presentations, patents, technical blogs |
| 5 | Entrepreneurial initiatives | Start-up attempts, freelance work, product launches, revenue/user metrics |
| 6 | Certifications | Provider, title, date, credential ID, verification link |
| 7 | Internships | Organisation, duration, role, deliverables, measurable impact |
| 8 | Competitions | Hackathons, coding contests, case competitions, rank/prize |
| 9 | Extracurricular achievements | Sports, cultural events, clubs, volunteering |
| 10 | Leadership roles | Committee head, class representative, club secretary, team lead |
| 11 | Community engagement | Teaching underprivileged students, open-source contributions, NGO work |
| 12 | Technical profiles | GitHub, LinkedIn, LeetCode/Codeforces ratings, Kaggle, Stack Overflow |
| Aspect | Portfolio | Résumé | CV |
|---|---|---|---|
| Length | Unlimited / ongoing | 1 page (fresher) | 2+ pages |
| Purpose | Demonstrate work | Secure an interview | Complete academic record |
| Content | Artifacts and evidence | Highlights tailored to a role | Everything, chronological |
| Format | Website / repository / PDF bundle | Single document | Structured document |
| Used in | Recruitment, freelance, higher studies | Job applications | Academia, research, abroad applications |
| Element | Question it Answers |
|---|---|
| Situation | What problem existed and why did it matter? |
| Task | What exactly were you responsible for? |
| Action | What technology and approach did you use? |
| Result | What was the measurable outcome? |
| Proof | Where can it be verified? (link, screenshot, metric) |
Weak: "Made a website using HTML, CSS and JavaScript for a college project."
Strong:
github.com/aarav/notice-portal · live demo link · 22 screenshots in the repository README.Lesson: quantified results and verifiable links turn a hobby project into professional evidence.
Personal branding is the conscious, consistent effort to shape how others perceive your professional identity — your unique combination of skills, values, expertise and personality.
| Section | Best Practice |
|---|---|
| Profile photo | Professional headshot, plain background, face occupying ~60% of frame |
| Banner | Optional but adds context — tech stack or portfolio link |
| Headline (220 chars) | Role | Core skills | Value proposition. Not just "Student at XYZ". |
| About (2,600 chars) | First person, 3–4 short paragraphs: who you are, what you build, key achievements, what you are seeking |
| Experience | Include internships, freelance, and significant campus roles with bullet-point achievements |
| Education | Degree, institution, CGPA (if strong), relevant coursework |
| Projects | One entry per project with repository and demo link |
| Skills | Top 3 pinned; endorse and get endorsed in your core stack |
| Licenses & certifications | Add credential ID and verification URL |
| Recommendations | Request from project guides and internship mentors |
| Custom URL | linkedin.com/in/firstname-lastname |
| Activity | Post or comment weekly on your domain; share project updates |
Formula 1: [Role you want] | [Skill 1] · [Skill 2] · [Skill 3] | [Proof]
Formula 2: [Degree, Year] @ [Institution] | Building [domain] solutions with [tech]
Example: "Final-Year CSE Student | Python · SQL · AWS | Built 3 deployed web apps · Seeking SDE Internship"
| Element | Best Practice |
|---|---|
| Profile README | A repository named exactly as your username, containing an intro, tech stack badges, current projects and contact links |
| Repository naming | Descriptive, hyphenated: campus-notice-portal, not project1 |
| Repository README | Problem, features, screenshots/GIF, tech stack, setup instructions, usage, licence, author |
| Commit history | Frequent, meaningful commit messages ("Fix login redirect on expired JWT" not "update") |
| Pinned repositories | Pin 6 best projects — these are what recruiters see first |
| Code quality | Meaningful names, comments where necessary, no hard-coded secrets, .gitignore present |
| Licence | Add MIT / Apache-2.0 so others can legally reuse |
| Open source | At least one merged pull request to an external project |
| Contribution graph | Consistent activity over months is a powerful signal of discipline |
# Campus Notice Portal
Real-time notice delivery for university departments.
## Features
- Role-based access (student / faculty / admin)
- Department-wise filtering
- Push notifications in < 5 seconds
## Tech Stack
React 18 · Node.js · Express · MongoDB Atlas · JWT · GitHub Actions
## Setup
git clone https://github.com/<user>/campus-notice-portal
cd campus-notice-portal && npm install
cp .env.example .env # add MONGODB_URI and JWT_SECRET
npm run dev
## Screenshots

## Licence
MIT
A Dream CV is a forward-looking, aspirational curriculum vitae written for the role you intend to hold rather than the one you currently qualify for. It functions simultaneously as a career blueprint and as a gap-analysis tool: the distance between your present profile and the Dream CV defines your development plan.
| Benefit | Explanation |
|---|---|
| Goal clarity | Concretises an abstract aspiration into specific, writable achievements |
| Gap identification | Every missing line is an actionable development target |
| Motivation | A visible target sustains effort over semesters |
| Reverse engineering | You work backwards from the desired CV to today's tasks |
| Interview narrative | Provides a coherent story about where you are going and why |
| Periodic review | Comparing the Dream CV with the actual CV every six months measures real progress |
| Order | Section | Content | Guideline |
|---|---|---|---|
| 1 | Header | Name, phone, email, LinkedIn, GitHub, portfolio | Centred or left-aligned; clickable links |
| 2 | Career Objective | 2–3 lines tailored to the target role | Mention role + core skills + value |
| 3 | Education | Degree, institution, year, CGPA | Reverse chronological |
| 4 | Technical Skills | Languages, frameworks, databases, tools | Group by category; no rating bars |
| 5 | Projects | Title, duration, tech, 2–3 bullet achievements | Quantify and link |
| 6 | Internships / Experience | Organisation, role, duration, impact | Action verbs + metrics |
| 7 | Certifications | Title, provider, year, credential ID | Only verified, relevant ones |
| 8 | Achievements | Ranks, awards, competition results | Include the scale (e.g. "top 5% of 1,200") |
| 9 | Leadership & Extracurricular | Club roles, event organisation, volunteering | Show impact, not just membership |
| 10 | Additional | Languages, hobbies (only if they add value) | Keep brief |
| Category | Verbs |
|---|---|
| Development | Built, developed, implemented, engineered, deployed, refactored |
| Analysis | Analysed, modelled, evaluated, benchmarked, optimised |
| Leadership | Led, coordinated, mentored, managed, initiated |
| Improvement | Reduced, increased, accelerated, automated, streamlined |
| Communication | Documented, presented, published, trained |
Weak: "Worked on a machine learning project."
Strong: "Trained a Random Forest classifier on 45,000 records to predict student dropout, achieving 92% F1-score and reducing manual review effort by 40%."
| Section | Present (Actual CV) | Dream CV (Target) | Action Required |
|---|---|---|---|
| Projects | 2 academic assignments | 3 deployed full-stack applications | Build + deploy over 2 semesters |
| Internship | None | 1 summer internship (8 weeks, product firm) | Apply from month 6; prepare DSA |
| Certifications | None | AWS Cloud Practitioner + SQL Advanced | Complete by end of semester 5 |
| Competitions | Participated in 1 hackathon | Top 10 in a national hackathon | Enter 4 hackathons per year |
| Leadership | Club member | Technical head of the coding club | Contest club elections; run workshops |
| Open source | None | 3 merged pull requests | Contribute to "good first issue" tasks |
| Portfolio | No website | Live portfolio with 6 projects | Deploy a static site from GitHub Pages |
Conclusion: the Dream CV reveals seven concrete actions with clear deadlines — this is exactly the input an IDP needs.
Formula: [Role] + [Core skills] + [What you offer] + [Goal]
Example: "Final-year Computer Science student with hands-on experience in Python, SQL and cloud deployment, seeking a Data Analyst role where I can apply analytical rigour and data-visualisation skills to drive business decisions."
B.Tech in Computer Science and Engineering 2023 – 2027
Lovely Professional University, Punjab CGPA: 8.7/10
Relevant coursework: DSA, DBMS, Operating Systems, Computer Networks,
Cyber Security, Machine Learning
Languages : Python, Java, C, JavaScript, SQL
Frameworks : React, Node.js, Express, Flask
Databases : MySQL, MongoDB, PostgreSQL
Tools & Cloud : Git, GitHub, Docker, AWS (EC2, S3), Postman, Linux
Rule: list only skills you can defend in a technical interview. Never use star ratings or progress bars — they are subjective and ATS-unfriendly.
Campus Notice Portal | React, Node.js, MongoDB Jan 2026 – Apr 2026
• Built a real-time notice delivery system adopted by 4 departments,
serving 400+ student accounts.
• Implemented JWT authentication and role-based access control for
student, faculty and admin roles.
• Reduced notice-to-student latency from 3 days to under 5 minutes.
• Deployed on Render with GitHub Actions CI; code at github.com/aarav/notice-portal
AWS Certified Cloud Practitioner — Amazon Web Services, 2025
Credential ID: XXXX-XXXX | verify: credly.com/badges/xxxx
• Ranked 42nd of 1,850 teams in Smart India Hackathon (internal round), 2025
• Technical Head, Coding Club — conducted 6 workshops for 200+ students
• Solved 450+ DSA problems across LeetCode and Codeforces
| Do | Don't |
|---|---|
| Use a single-column, text-based layout | Use multi-column tables or text boxes |
| Mirror keywords from the job description | Stuff keywords unnaturally |
| Use standard section headings (Education, Skills, Projects) | Invent creative headings ("My Journey") |
| Submit as PDF (unless DOCX requested) | Submit an image or scanned copy |
| Use a common, readable font (Calibri, Arial, Inter) | Use decorative script fonts |
| Keep to one page for a fresher | Exceed two pages with irrelevant content |
| Spell-check and proofread twice | Rely solely on autocorrect |
| Include quantifiable results | Write vague responsibility statements |
cool_boy99@...).Pass 1 (content): read only the first three words of each bullet — they should all be strong action verbs.
Pass 2 (evidence): for every claim, ask "where is the proof?" If there is no link, metric or artefact, rewrite the bullet or delete it.
Same student, two applications:
| Element | Application A — Backend SDE | Application B — Data Analyst |
|---|---|---|
| Objective | "…seeking a Backend Engineering role…" | "…seeking a Data Analyst role…" |
| Skills order | Java, Node.js, SQL, Docker, AWS | SQL, Python, Statistics, Power BI, Excel |
| Projects listed first | REST API service with 10k requests/day | Sales dashboard analysing 1M rows |
| Keywords matched | Microservices, API, caching, CI/CD | ETL, dashboard, A/B testing, insights |
Outcome: two different one-page CVs from the same underlying experience. Tailoring is not dishonest — it is prioritisation.
| Term | One-Line Definition |
|---|---|
| Computational Thinking | Formulating problems and their solutions so that a computer can execute them |
| Algorithm | Finite, unambiguous, ordered set of steps producing output from input |
| Abstraction | Removing irrelevant detail to create a usable model |
| Computing Environment | Hardware + system software + application software + network + users |
| SDLC | Structured phases from requirements to maintenance for building software |
| Version Control System | Tool that records file changes over time to enable recall and collaboration |
| CIA Triad | Confidentiality, Integrity, Availability — the three goals of security |
| Firewall | Device/software that filters network traffic based on rules |
| Principle of Least Privilege | Grant only the minimum access necessary for the minimum time |
| MFA | Authentication using two or more factors from different categories |
| Digital Footprint | The permanent trail of data created by online activity |
| Cyber Ethics | Moral principles governing responsible behaviour in cyberspace |
| EDU-RevolUTION | Academic enrichment initiative integrating MOOCs, certifications and holistic development |
| AI / ML / DL | Nested fields: intelligence, learning from data, and deep neural networks respectively |
| Generative AI | Models that create new content resembling their training data |
| Agentic AI | Autonomous AI that plans, uses tools and iterates toward a goal |
| Skill Gap | Difference between required and current competency for a target role |
| SMART Goal | Specific, Measurable, Achievable, Relevant, Time-bound objective |
| IDP | Written, time-bound plan converting goals and gaps into actions |
| Professional Portfolio | Curated collection of evidence demonstrating skills and achievements |
| Dream CV | Aspirational CV written for the target role, used as a gap-analysis tool |
| ATS | Software that parses and ranks CVs before human review |
| Concept | Formula / Framework |
|---|---|
| Sum of first \(n\) naturals | \(S(n) = n(n+1)/2\) |
| Password search space | \(N = C^{L}\) |
| Skill gap | \(\text{Gap}_i = R_i - C_i\) |
| Weighted total gap | \(\sum w_i (R_i - C_i)\) |
| Gap closure % | \((C_{now}-C_{start})/(R-C_{start}) \times 100\) |
| Progress % | (milestones completed / total) × 100 |
| F1 score | \(2PR/(P+R)\) |
| Accuracy | \((TP+TN)/(TP+TN+FP+FN)\) |
| Decision matrix | \(\sum w_i \cdot s_i\) |
| CT pillars | Decomposition · Pattern Recognition · Abstraction · Algorithm |
| SDLC phases | Requirements → Design → Implementation → Testing → Deployment → Maintenance |
| CIA triad | Confidentiality · Integrity · Availability |
| AAA | Authentication · Authorisation · Accounting |
| 7 Cs of communication | Clear · Concise · Concrete · Correct · Coherent · Complete · Courteous |
| SBI feedback | Situation · Behaviour · Impact |
| STAR-P project documentation | Situation · Task · Action · Result · Proof |
| SMART goals | Specific · Measurable · Achievable · Relevant · Time-bound |
| RIASEC interests | Realistic · Investigative · Artistic · Social · Enterprising · Conventional |
| 3-2-1 backup | 3 copies · 2 media · 1 offsite |
| Pair | Key Distinguishing Point |
|---|---|
| Virus vs Worm | Virus needs a host file; worm spreads by itself |
| Trojan vs Virus | Trojan does not self-replicate; it disguises itself |
| Authentication vs Authorisation | Identity proof vs permission to act |
| Active vs Passive footprint | Deliberate sharing vs automatic collection |
| AI vs ML vs DL | Broad field ⊃ learning from data ⊃ deep neural networks |
| GenAI vs Agentic AI | Creates content on request vs pursues goals autonomously |
| Résumé vs CV | Targeted 1-page summary vs comprehensive academic record |
| Portfolio vs Résumé | Evidence of work vs summary of experience |
| Skill vs Competency | Ability to do a task vs ability + knowledge + behaviour combined |
| Goal vs Aspiration | Time-bound measurable target vs long-range professional destination |
Q1. Define computational thinking and explain its four pillars with one engineering example each. Easy
Q2. Write an algorithm and draw the corresponding flow logic for determining whether a given year is a leap year. State the algorithm's properties. Easy
Q3. Compare centralised and distributed version control systems. Illustrate the standard Git workflow for contributing to a shared repository. Medium
Q4. Explain the CIA triad. For each pillar, state one control and one corresponding attack. Easy
Q5. Classify firewalls by generation and compare any two of them in detail. Explain the concept of a DMZ. Medium
Q6. Differentiate between active and passive digital footprints. Describe a six-step strategy for managing your digital footprint. Medium
Q7. Distinguish between AI, Machine Learning, Deep Learning, Generative AI and Agentic AI with one example each. List five ethical concerns in AI. Hard
Q8. A student targets the role of "Junior Cloud Engineer". Required levels (out of 5) are: Linux 5, Networking 4, AWS 5, Docker 4, Communication 4. Current levels are: Linux 3, Networking 2, AWS 2, Docker 3, Communication 5. Weights are 5, 4, 5, 3 and 2 respectively. Compute the weighted skill gap, rank the priorities, and write three SMART actions. Hard
Q9. What is a Dream CV? Explain its significance and describe the standard sections of a fresher's CV in order. Medium
Q10. Convert the following weak CV bullet into a strong one and justify each improvement: "Worked on a web project using JavaScript for the college." Medium
Definition: Computational thinking is the process of formulating a problem and expressing its solution in a form that a computer (human or machine) can execute effectively.
Four pillars:
BEGIN
READ year
IF (year MOD 400 = 0) THEN
PRINT "Leap Year"
ELSE IF (year MOD 100 = 0) THEN
PRINT "Not a Leap Year"
ELSE IF (year MOD 4 = 0) THEN
PRINT "Leap Year"
ELSE
PRINT "Not a Leap Year"
END IF
END
Flow logic: Start → Read year → Decision 1 (divisible by 400?) → if yes, Output "Leap"; if no, Decision 2 (divisible by 100?) → if yes, Output "Not Leap"; if no, Decision 3 (divisible by 4?) → if yes Output "Leap", else Output "Not Leap" → End. Each decision is a diamond; outputs are parallelograms; start/end are ovals.
Properties satisfied: Finiteness (at most three comparisons, then termination); Definiteness (each condition is exact); Input (one integer year); Output (one classification); Effectiveness (modulo is a basic operation).
Trace: year = 1900 → 1900 mod 400 = 300 ≠ 0; 1900 mod 100 = 0 → "Not a Leap Year" ✔ (1900 was indeed not a leap year). year = 2000 → mod 400 = 0 → "Leap Year" ✔.
| Parameter | Centralised VCS | Distributed VCS |
|---|---|---|
| Repository location | Single central server | Full copy on every client |
| Offline work | Very limited | Full history available offline |
| Single point of failure | Yes — server loss loses history | No — any clone can restore the repo |
| Branching cost | Expensive and slow | Cheap and fast (local branches) |
| Example | SVN, CVS | Git, Mercurial |
Git workflow for a shared repository:
git clone https://github.com/org/project.git
git checkout -b feature/xyz
# ... make changes ...
git add .
git commit -m "Add xyz feature"
git fetch origin
git rebase origin/main # or: git merge origin/main
git push -u origin feature/xyz
# open a pull request → code review → merge
Key point: the pull request adds a review gate, ensuring no unreviewed code reaches the main branch.
| Pillar | Meaning | Control | Attack |
|---|---|---|---|
| Confidentiality | Only authorised parties access data | AES-256 encryption at rest; RBAC | Data breach; credential theft |
| Integrity | Data is accurate and unmodified | SHA-256 hashing; digital signatures | Man-in-the-middle tampering; SQL injection altering records |
| Availability | Systems accessible when required | Redundant servers; 3-2-1 backups; DDoS scrubbing | Ransomware; Distributed Denial of Service |
Extended pillars: Authentication (verifying identity) and Non-repudiation (proof of origin via digital signature).
Classification by generation: (1) Packet-filtering, (2) Stateful inspection, (3) Application/proxy, (4) Next-generation firewall. Also classifiable by deployment as host-based, network-based, cloud/WAF.
Comparison — Packet filtering vs Stateful inspection:
| Parameter | Packet Filtering | Stateful Inspection |
|---|---|---|
| Inspection depth | Header only (IP, port, protocol) | Header + connection state |
| State awareness | Stateless — each packet judged alone | Maintains a state table (NEW/ESTABLISHED/RELATED) |
| Vulnerability | Fooled by spoofed packets | Resists most spoofing |
| Performance | Very fast, low overhead | Slower; memory for state tables |
| OSI layer | Network / Transport | Network / Transport with session context |
DMZ: A Demilitarised Zone is a buffer sub-network hosting public-facing services (web, mail, DNS) between two firewalls — an external one facing the Internet and an internal one facing the LAN. If a public server is compromised, the attacker is still separated from internal resources by the internal firewall. Typical rules: Internet → DMZ on ports 80/443 allowed; DMZ → LAN denied except for specific database queries.
| Parameter | Active Footprint | Passive Footprint |
|---|---|---|
| Created by | Deliberate user action | Automatic collection |
| Examples | Posts, comments, uploads, reviews, form submissions | Cookies, IP logs, browsing history, device fingerprint, location pings |
| Visibility to user | High | Low |
| User control | High | Limited to browser/privacy settings |
| Persistence | Until deleted (may persist in caches) | Often stored indefinitely by third parties |
Six-step management strategy:
| Term | Definition | Example |
|---|---|---|
| AI | Broad field of building machines that perform tasks requiring intelligence | Chess engine; route-finding in maps |
| ML | Subset of AI that learns patterns from data | Spam classifier trained on labelled emails |
| Deep Learning | ML using multi-layer neural networks | CNN for face recognition |
| Generative AI | Models that create new content | GPT generating a code snippet; Stable Diffusion generating an image |
| Agentic AI | Autonomous AI that plans, uses tools and iterates toward a goal | Agent that researches a topic, writes and runs code, and emails a report |
Five ethical concerns: (1) algorithmic bias and discrimination; (2) privacy violations through data scraping and surveillance; (3) lack of transparency/explainability in decisions; (4) accountability gaps when harm occurs; (5) job displacement and economic disruption. Additional concerns include deepfakes and misinformation, and the environmental cost of large-scale model training.
| Competency | R | C | Gap | w | w × Gap | Rank |
|---|---|---|---|---|---|---|
| Linux | 5 | 3 | 2 | 5 | 10 | 1 |
| Networking | 4 | 2 | 2 | 4 | 8 | 2 |
| AWS | 5 | 2 | 3 | 5 | 15 | 1 |
| Docker | 4 | 3 | 1 | 3 | 3 | 3 |
| Communication | 4 | 5 | 0 | 2 | 0 | — |
Correction of priorities: AWS has the highest weighted gap (15), followed by Linux (10), Networking (8) and Docker (3). Communication requires no action — the student already exceeds the requirement.
Total weighted gap = 15 + 10 + 8 + 3 + 0 = 36. This becomes the baseline for measuring quarterly progress.
Three SMART actions:
Definition: A Dream CV is an aspirational curriculum vitae written for the role a student intends to hold after graduation, rather than for the role they currently qualify for. It is used as a career blueprint and a gap-analysis instrument.
Significance:
Standard sections in order: Header (contact + links) → Career Objective → Education → Technical Skills → Projects → Internships/Experience → Certifications → Achievements → Leadership & Extracurricular → Additional information.
Original (weak): "Worked on a web project using JavaScript for the college."
Improved (strong): "Developed a responsive notice-board web application using React and Node.js that reduced notice-to-student delivery latency from 3 days to under 5 minutes; adopted by 4 departments and 400+ students (github.com/aarav/notice-portal)."
Justification of each improvement:
| Change | Reason |
|---|---|
| "Worked on" → "Developed" | Strong action verb conveys ownership rather than participation |
| "web project" → "responsive notice-board web application" | Specific and descriptive; tells the reader what was built |
| Added "React and Node.js" | Names the exact technology stack, matching job-description keywords |
| Added the latency metric | Quantified result proves measurable impact |
| Added adoption figures (4 departments, 400+ students) | Demonstrates scale and real-world usage |
| Added the repository link | Provides verifiable proof; passes the "evidence" test |
| Code | Title | Author | Publisher |
|---|---|---|---|
| T-1 | Operating System Concepts | Abraham Silberschatz, Peter B. Galvin, Greg Gagne | Wiley |
| T-2 | Computer Fundamentals | Pradeep K. Sinha and Priti Sinha | BPB Publication, New Delhi |
| Code | Title | Author | Publisher |
|---|---|---|---|
| R-1 | Data Communications and Networking with TCP/IP Protocol Suite | Behrouz A. Forouzan | McGraw Hill |
| Code | Resource | Topic |
|---|---|---|
| OR-1 | byjus.com/gate/types-of-operating-system-notes | Types of Operating Systems |
| RW-1 | geeksforgeeks.org/cloud-computing/virtualization-cloud-computing-types | Cloud Computing & Virtualisation |
| RW-2 | geeksforgeeks.org/product-management/emerging-technologies-and-future-trends-ai-more | Emerging Technologies |
| RW-3 | nptel.ac.in | MOOC Courses |
| RW-4 | youtu.be/NEBRe_EULiY | Algorithms |
| RW-5 | geeksforgeeks.org/cybersecurity/what-is-cyberethics | Cyber Ethics |
| RW-6 | cisco.com/site/in/en/learn/topics/security/what-is-cybersecurity | Cyber Security |
| RW-7 | geeksforgeeks.org/artificial-intelligence/machine-learning-vs-artificial-intelligence | Machine Learning vs AI |
| Code | Link | Topic |
|---|---|---|
| AV-1 | youtube.com/watch?v=05VryIRWISM | Career Decision Making |
| AV-2 | youtube.com/watch?v=8UHalV_xvyA | Social Networking |
| AV-3 | youtu.be/NEBRe_EULiY | Computational Thinking |
| AV-4 | youtu.be/S1yFvPrQ18w | Good Algorithms |
| CO | Statement | Covered In |
|---|---|---|
| CO1 | Apply computational thinking and computing environment concepts to solve basic computing problems | Sections I, II |
| CO2 | Explain software development practices, version control and fundamental cyber security concepts | Sections II, III |
| CO3 | Identify and utilize academic enrichment opportunities such as EDU-RevolUTION | Section IV |
| CO4 | Describe AI, ML, Generative AI, Agentic AI and emerging technologies with ethical considerations | Section V |
| CO5 | Analyse cohorts, career pathways, competency requirements and skill gaps to prepare a career development plan | Section VI, Section VII |
| CO6 | Build a professional portfolio and Dream CV showcasing academic, technical and professional achievements | Sections VIII, IX |
| Component | Weightage | Mapped COs | Preparation Sections |
|---|---|---|---|
| Test | 25% | CO1, CO2 | I, II, III, X |
| Design Your Dream CV | 25% | CO1, CO2, CO4, CO5, CO6 | V, VI, VII, VIII, IX |
| EDU-RevolUTION Task | 25% | CO3 | IV |
| Assignment | 25% | CO4, CO5 | V, VI, VII |