15 questions
Explanation: The cyber financial fraud helpline is 1930, and complaints can also be filed at cybercrime.gov.in, both run under I4C of the Ministry of Home Affairs. 112 is emergency services, 1098 the child helpline and 181 the women helpline.
Explanation: Smishing is SMS phishing and vishing is voice phishing. Pharming manipulates DNS so that a correct address leads to a fake site, and whaling targets senior executives.
Explanation: Statements 1 and 2 are correct. Statement 3 is false, because an incremental restore needs the last full backup plus every incremental taken after it. The rule last full plus latest one applies to differential backups.
Explanation: A worm is self-replicating and self-propagating and needs no host file. A virus requires a host file, a Trojan disguises itself but usually does not spread on its own, and spyware collects information.
Explanation: HTTPS uses TLS and shows only that the connection is encrypted. A fraudulent site can also obtain a certificate, so the domain name must still be checked letter by letter. The padlock is no proof of genuineness.
Explanation: Whaling targets the big fish, that is senior executives, and is a specialised form of spear phishing. Spear phishing can target anyone specific, so whaling is the more precise answer here. Baiting uses a lure and tailgating is physical entry.
Explanation: An OTP proves possession of the registered device. A password and a security answer are both knowledge factors, which is why using them together is not two-factor authentication. A fingerprint is an inherence factor.
Explanation: Combinations are choices to the power length, so 10 to the power 4 = 10,000, from 0000 to 9999. The figure 9,000 assumes the first digit cannot be zero, and 5,040 assumes digits cannot repeat.
Explanation: Authority, urgency, secrecy, gift vouchers and a non-official address together form a classic whaling or business e-mail compromise pattern. Replying reaches the attacker, who will simply confirm, and forwarding the links spreads the risk. Verify out of band and report.
Explanation: CIA means Confidentiality, Integrity and Availability, the three core goals of information security. The other options mix in related terms such as authentication and authorisation as distractors.
Explanation: An incremental restore needs the last full backup plus every incremental after it: Sunday full, then Monday, Tuesday and Wednesday incrementals, that is 4 sets. With differential backups only 2 would be needed, and 5 wrongly counts the Thursday backup that was never taken.
Explanation: A firewall allows or blocks traffic based on security rules and may be hardware or software. An antivirus detects malware inside files, a router directs data between networks, and a modem converts signals.
Explanation: The sender signs with the private key and the receiver verifies with the public key of the sender. This gives authenticity, integrity and non-repudiation, so the sender cannot later deny having sent it.
Explanation: Ransomware encrypts data and holds it hostage, as WannaCry did in 2017. An offline backup is the best defence. Adware shows advertisements, a rootkit hides in the system, and a keylogger records keystrokes.
Explanation: Section 66C covers identity theft, such as the fraudulent use of another person password or electronic signature. Section 43 covers damage to a computer system, 66F cyber terrorism and 72 breach of confidentiality. The close trap is 66D, cheating by personation.
Back to Safety and Security of Computer Systems