Cyber Security and Cyber Crimes is part of Information and Communication Technology. Below are notes on 39 sub-topics, followed by practice MCQs from State PSC and UPSC papers.

Common Cyber Threats and Attacks: Malware, Phishing, Denial-of-Service (DoS/DDoS), Ransomware, Social Engineering

  • Malware: Malicious software designed to damage, disrupt, or gain unauthorized access to computer systems. (MCQ 3, 42)
    • Virus (VIRUS: Vital Information Resource Under Siege): Self-replicating program that attaches to legitimate files and spreads from computer to computer, intentionally disruptive. Fred Cohen coined the term 'Computer Virus'. The 'Creeper virus' (1971, Bob Thomas) was an experimental self-replicating program, considered the first. (MCQ 4, 7, 10, 26, 29, 31, 42)
    • Worm: Self-replicating malicious program that copies itself from system to system over networks, consuming disk space/memory, unlike viruses, it does not infiltrate legitimate files. (MCQ 4, 14, 42)
    • Trojan Horse: Malware disguised as legitimate software; once installed, it can create backdoors for hackers or perform other malicious actions. (MCQ 4, 9, 18, 20, 26)
    • Spyware: Software that secretly monitors and collects information about a user's computer activities and sends it to a third party. E.g., Pegasus (mobile spyware). (MCQ 2, 3, 14, 18, 20, 32)
    • Ransomware: Malware that encrypts a victim's data/system and demands a ransom payment (often cryptocurrency) for decryption. E.g., WannaCry, Petya, EternalBlue, CryptoLocker. (MCQ 13, 14, 19, 31)
    • Adware: Software that automatically displays unwanted online advertisements. (MCQ 3, 22)
    • Keylogger: Hardware or software that records and logs keystrokes typed on a keyboard, often used for credential theft. (MCQ 18, 20, 33, 35)
    • Suware: Not a recognized type of malware. (MCQ 22)
  • Phishing: Cyber attack involving deceptive communications (emails, SMS, phone calls) that trick users into revealing sensitive information or installing malware. (MCQ 5, 16, 17, 28, 30, 38)
    • Pharming: Hacking approach designing fake websites/pages to trick users or redirect legitimate traffic to fraudulent sites. (MCQ 5)
    • Clickjacking: Malicious technique tricking web users into revealing confidential information or taking unwanted actions by obscuring clickable content. (MCQ 12)
    • Responding to phishing: Report the email to the IT department; avoid opening attachments or clicking links. (MCQ 30)
  • Denial-of-Service (DoS) Attack: An attack that aims to make a machine or network resource unavailable to its intended users by temporarily disrupting services, typically by overloading the resource with illegitimate requests. (MCQ 9, 36)
  • Distributed Denial-of-Service (DDoS) Attack: A cyber attack where multiple compromised computer systems (a botnet) are used to flood a target server, service, or network with malicious traffic, disrupting its normal internet traffic and making it unavailable. It is carried out with malicious intent by a remote actor. (MCQ 1, 9, 23, 24, 36)
  • Social Engineering: Manipulating individuals into performing actions or divulging confidential information, often involving psychological tactics. Phishing is a key social engineering technique.
  • Hackers/Crackers:
    • Hacker: An individual who breaks into computer systems without authorization. (MCQ 8)
    • Cracker (Black Hat Hacker): An individual who gains unauthorized access, destroys vital data, denies legitimate user's service, or causes problems for targets, often with malicious intent. (MCQ 6, 8, 11)
    • White Hat Hacker: An ethical hacker who legally attempts to find security flaws for defensive purposes. (MCQ 6, 11)
  • Spam: Unwanted bulk emails, often from strange sources. (MCQ 5, 25)
  • Eavesdropping/Snooping: Secret capture and analysis of network traffic; listening to private voice or data transmission. (MCQ 15, 34)
  • Man-in-the-Middle (MitM) Attack: An attack where an attacker secretly intercepts and relays communication between two parties who believe they are directly communicating. Associated with algorithms like DiffieHellman. (MCQ 41, 43)
  • Honeypots: Security mechanisms used to attract and trap intruders, allowing analysis of their methods without endangering real systems. (MCQ 37)
  • CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart): Text in picture format used on web pages to verify users are human. (MCQ 21)
  • Cyber security threats: Can target both personal and business computer systems with valuable data. (MCQ 27)
  • 2024 Microsoft outage: Caused by a Crowdstrike update. (MCQ 40)

Critical Information Infrastructure Protection (CIIP)

Critical Information Infrastructure (CII): 1. Assets vital for national security, economy, public health, or safety, whose incapacitation or destruction would have a debilitating impact. Critical Information Infrastructure 2. Protection (CIIP): Measures taken to protect CII from cyber threats and disruptions. National Critical Information Infrastruc3. ture Protection Centre (NCIIPC):

    • Establishment: Notified in 2014 by Government of India.
    • Parent Body: Operates under the National Technical Research Organisation (NTRO), which reports to the Prime Minister's Office (PMO).
    • Mandate: To protect Critical Information Infrastructure in India.
    • Legal Basis: Derived its powers from Section 70A of the Information Technology (Amendment) Act, 2008.
    • Identified Critical Sectors:
      • Power & Energy
      • Banking & Financial Services
      • Telecommunication
      • Transport (e.g., Railways, Aviation, Ports)
      • Government (e-governance services)
      • Strategic & Public Sector Enterprises (includes critical manufacturing/industrial systems crucial for national security).

Cyber Hygiene and Best Practices for Individuals and Organizations

  • Strong passwords for cyber security should combine uppercase and lowercase letters, numbers, and symbols.
  • Internet filtering is an acceptable user policy used to prevent access to inappropriate material.
  • For sharing sensitive company documents with external clients, the most secure practice is uploading to a secure cloud platform with access control.
  • To ensure a software installation is secure, always download software from an official website.

Cyber Security Governance and Frameworks: National Cyber Security Policy, International Cooperation on Cyber Security

  • India's National Cyber Security Policy was released in 2013.
  • Cyber Surakshit Bharat initiative:
    • Launched by Ministry of Electronics and Information Technology (MeitY) in association with National e-Governance Division (NeGD) and industry partners.
    • Aims to strengthen India's cyber security ecosystem, aligning with 'Digital India' vision.
    • Target audience: Chief Information Security Officers (CISOs) and IT staff in government departments, organizations, and Public Sector Undertakings (PSUs).
  • ISO 27001 is an international standard for Information Security Management System (ISMS).
  • Data Security Council of India (DSCI) of NASSCOM signed an agreement with the Telangana government to set up a 'Centre of Excellence' for cyber security.

Cyber

Security

Technologies

and

Countermeasures:

Firewalls,

Intrusion

Detection/Prevention Systems (IDS/IPS),

Encryption, VPNs, Antivirus, Multi-factor

Authentication

  • Firewalls:
    • Primary purpose: Prevents unauthorized access to a computer or network, via the internet.
    • Acts as a security barrier between an internal network and external networks (e.g., the Internet).
    • Functions by trapping (monitoring and controlling) inbound and outbound network packets based on predefined rules.
    • Can deny access to specific hosts or block certain types of traffic.
    • Can be a device or software; a computer security device.
    • A computer without a firewall is most vulnerable to unauthorized remote access.
    • Can be proxy-based.
    • A packet filter firewall typically filters at the network or transport layer, not just the datalink layer.
  • Intrusion Detection Systems (IDS) & Intrusion Prevention Systems (IPS):
    • IDS: Monitors network or system activities for malicious activity or policy violations. Primary function is to detect and alert.
    • IPS: Extends IDS by actively blocking or preventing detected threats.
  • Encryption:
    • Technique used to scramble data into an unreadable format (ciphertext) to protect it from unauthorized access.
    • Ensures data confidentiality and security, preventing data from being stolen, changed, or compromised.
    • Converts plaintext into ciphertext.
    • BitLocker: A full disk encryption feature included with Microsoft Windows versions, designed to protect data by encrypting entire volumes.
    • SSL (Secure Sockets Layer): A deprecated but foundational cryptographic protocol for secure communication over a computer network. Its successor is TLS (Transport Layer Security).
    • HTTPS (Hypertext Transfer Protocol Secure): Uses SSL/TLS for secure communication over a computer network (e.g., Internet banking sites). Requires an SSL digital certificate.
    • Public Key Infrastructure (PKI):
      • A digital security infrastructure that manages public key encryption.
      • Utilizes asymmetric cryptography (public and private key pairs).
    • Asymmetric Crypto System: Uses a secure key pair: a private key (to create a digital signature) and a public key (to verify the digital signature).
    • Public-key Cryptographic Algorithms: Examples include RSA, Diffie-Hellman, DSS (Digital Signature Standard). DES (Data Encryption Standard) is a symmetric algorithm.
  • Digital Signatures:
    • A cryptographic method that supports non-repudiation (proof of origin and integrity).
    • An electronic method of signing an electronic document and ensuring that the original content remains unchanged.
    • An electronic record that identifies the certifying authority (CA) issuing it.
    • Can serve as proof of identity to access information or servers on the Internet.
  • Virtual Private Networks (VPNs):
    • Encrypts users' private data and provides a secure tunnel over an insecure public network (e.g., the internet).
    • Allows users to securely access a public network.
    • Can allow users to bypass or "sidetrack" some firewall content filters.
    • VPNs are legal to use in India.
  • Antivirus Software:
    • Software installed to protect computers from viruses and other malware.
    • Examples: Quick Heal, McAfee, Kaspersky, Norton.
    • Malware identification methods:
      • Signature-based detection: Identifies known malware by matching against a database of signatures.
      • Sandbox detection: Executes a new application or file in a virtual, isolated environment to observe its behavior for possible malware characteristics.
      • Heuristics: Detects new or modified malware by analyzing code for suspicious instructions or patterns.
    • Anti-spam software examples: Bogofilter, DSPAM, SpamAssassin.
  • Multi-factor Authentication (MFA):
    • Requires users to provide two or more verification factors to gain access to a resource.
    • Biometrics: Personal identification based on unique biological characteristics (e.g., Iris scan, Fingerprint, Handwriting). A card reader and card is not a biometric method.
    • CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart):
      • A challenge-response test used to ensure that the user is a human and not a bot.
      • A type of security measure.
      • Term coined in 2003.
      • Also referred to as a reverse Turing test.
    • Virtual Keyboard: Used by internet banking sites to reduce the risk of keystroke logging for password entry.
  • Other Cyber Security Concepts:
    • DeMilitarized Zone (DMZ):
      • A perimeter network that exposes an organization's externalfacing services (e.g., web servers) to a larger, untrusted network (like the Internet) while isolating the internal local area network (LAN).
      • It lies outside the primary internal security perimeter.
      • Advantage: Creates multiple zones of trust, protecting internal networks even if public-facing servers are compromised.
    • Honeypots:
      • A security resource that is intended to be attacked or compromised.
      • Design objectives: Divert attackers from critical systems, encourage attackers to stay long enough for administrators to respond, and collect information about attacker activities and techniques.
      • NOT designed to allow attackers to access critical systems.
    • Data Integrity: Ensuring that data has not been altered or corrupted. Often maintained using hashing (e.g., hash functions).
    • Steganography: The practice of hiding information within other nonsecret data, so its presence is concealed.
    • Stuxnet: A malicious computer worm, notable for being the first discovered cyberweapon that targets industrial control systems (SCADA), leading to physical damage (a cyber-physical attack).
    • Bitcoin: A decentralized digital cryptocurrency.
    • Secure Application for Internet (SAI): A simple messaging application developed by the Indian Army for secure communication.

Data Privacy and Protection: Principles, Challenges, and Global Practices (e.g., GDPR context)

  • Data Privacy: Individual's right to control personal information.
  • Data Protection: Measures to safeguard data from unauthorized access, use, disclosure, alteration, or destruction.
  • Core Principles: Lawfulness, fairness, transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity & confidentiality (security); accountability.
  • Key Challenges: Cyber threats (e.g., hacking, phishing), data breaches, cross-border data flows, lack of awareness, security of customer's online transactions.
  • General Data Protection Regulation (GDPR): EU law, effective May 25, 2018.
  • GDPR Scope: Protects personal data of EU citizens; applies extra-territorially to entities processing EU citizens' data globally.
  • GDPR Data Subject Rights: Right to access, rectification, erasure (Right to be Forgotten), restriction of processing, data portability, object to processing.
  • GDPR Data Controller/Processor Obligations: Data Protection by Design and by Default, Data Protection Impact Assessment (DPIA), appointment of Data Protection Officer (DPO), mandatory breach notification within 72 hours.
  • GDPR Penalties: Up to €20 million or 4% of annual global turnover (whichever is higher) for serious infringements.
  • Digital Personal Data Protection Act (DPDPA), 2023 (India): India's legal framework for personal data protection, replacing previous efforts.

Digital Forensics

Process of identifying, preserving, analyzing, and presenting digital evidence from various sources (e.g., computers, mobile devices, networks).

Incident Response (IR)

Structured approach to managing the aftermath of a security breach or cyberattack, involving preparation, identification, containment, eradication, recovery, and post-incident analysis.

Mobile Device Forensics

A specialized branch of digital forensics focused on the extraction and analysis of digital evidence from mobile devices (smartphones, tablets, GPS devices).

Brute Force Acquisition (in forensics)

A technique used, particularly in mobile device forensics, to bypass security mechanisms (e.g., PINs, passcodes, encryption) by systematically trying every possible combination of characters until the correct one is found, enabling data acquisition.

Jailbreaking

Process allowing users to install unauthorized software/applications (e.g., outside official app stores) on certain mobile phones, typically bypassing manufacturer/carrier restrictions.

2024 Microsoft Outage

Cloud service disruption caused by an issue with a Crowdstrike Falcon sensor update.

Challenges

Device diversity, weak default security, infrequent firmware updates, insecure communication protocols.

Risks

Creation of botnets (e.g., Mirai), data breaches, unauthorized access, physical tampering.

  • Cloud Security

Model

Shared responsibility (Cloud Provider secures infrastructure, Customer secures data/configurations).

Threats

Data breaches, misconfigurations, unauthorized access, API vulnerabilities, account hijacking, insider threats.

Threats

Malware (ransomware, spyware), phishing, insecure applications, OS vulnerabilities, unsecured Wi-Fi.

Jailbreaking (iOS) and Rooting (Android) bypass security controls for deeper system access, increasing risk.

Defensive Uses

Enhanced threat detection, anomaly identification, automated response, predictive analysis, fraud prevention.

Offensive Uses

AI-powered malware, sophisticated phishing (deepfakes), autonomous attack systems, vulnerability discovery.

Threat

Potential to break current public-key cryptography (e.g., RSA, ECC), which secures most internet communication (TLS/SSL).

Mitigation

Development and adoption of PostQuantum Cryptography (PQC) or Quantum-Resistant Cryptography.

"Harvest Now, Decrypt Later"

Adversaries storing encrypted data today with the intent to decrypt it using future quantum computers.

Ethical Hacking

Authorized practice of bypassing system security to identify vulnerabilities; performed with the owner's permission to improve security.

White Hat Hacker

An ethical hacker who uses their skills for defensive purposes, working to identify and fix security weaknesses in systems.

Black Hat Hacker

Malicious hacker who exploits system vulnerabilities for personal gain, damage, or illegal activities.

Grey Hat Hacker

Finds vulnerabilities without permission but may report them to the owner, sometimes for a fee, or for public disclosure, blurring ethical lines.

Penetration Testing (Pen-testing)

A simulated cyberattack against a computer system, network, or web application to check for exploitable vulnerabilities; often performed by ethical hackers.

  • Vulnerability Assessment Process of identifying, quantifying, and prioritizing vulnerabilities in a system; provides a report on security weaknesses but does not typically exploit them.

Fundamentals of Cyber Security: Concepts, Principles, and Importance

  • Cyberspace: Complex environment of interactions (people, software, services) supported by worldwide ICT devices & networks.
  • Cyber Security Policy: Aims to create a framework to enhance a country's cyberspace security posture.
  • Confidentiality (Data Security Principle): Ensures information is accessed ONLY by authenticated parties; prevents illicit access or use of data.
  • Integrity (Data Security Principle): Ensures information is accurate, complete, and protected from unauthorized modification.
  • Availability (Data Security Principle): Ensures authorized users have timely and reliable access to information and resources.
  • Privacy: Individual's right to control their personal information.
  • Cyber Security Features: Includes compliance, defense against internal threats, and threat prevention.
  • Information Assurance Fundamental Tools (for cyber security): Authentication, Authorization, Non-repudiation.
  • Authentication: Verifying identity of a user or system.
  • Authorization: Granting or denying access rights to resources.
  • Non-repudiation: Ensures a party cannot deny having performed an action.
  • Fire Detectors: Detect heat, smoke, and light (IR/UV radiation from flames).
  • Night Vision Devices (NVDs): Use components like telescopes, binoculars, and infrared image converter tubes. Do not use X-rays.
  • Metal Detectors: Detect ferrous (e.g., iron, steel) and non-ferrous (e.g., copper, aluminum) metals. Do not detect plastic.
  • CCTV System Functions: Allow remote observation of a scene and recording activity for future viewing. (Primary function is surveillance, not access control).
  • Hacking: Activities aimed at compromising the security of digital devices or networks.
  • E-mail: Electronic messages sent via a network.
  • Browser (Web Browser): Software for accessing and displaying web pages/files on the internet.
  • Barcode: Machine-readable optical label containing item information.
  • VIRUS (Full Form): Vital Information Resource Under Seize.
  • Blue Screen of Death (BSOD): A warning signal indicating critical computer system issues, requiring shutdown.
  • Computer Viruses: Are man-made software programs.

CERT-In (Indian Computer Emergency Response Team)

  • Established: January 2004 (under IT Act, 2000, amended 2008).
  • Ministry: Ministry of Electronics and Information Technology (MeitY).
  • Role: National nodal agency for responding to computer security incidents, dealing with hacking, phishing, and other cyber security threats.
  • Functions: Forecast and alerts of cyber security incidents, emergency measures for handling cyber security incidents, vulnerability notes and advisories, security guidelines, incident response.
  • 2022 Guidelines: Mandates data centres and service providers to report cyber security breaches within 6 hours. Virtual Private Network (VPN) providers must retain user data for at least five years and share records with authorities when required.
  • Initiatives: Introduced Mule Hunter.ai to counter cybercrime.

NCCC (National Cyber Coordination Centre)

  • An e-surveillance and operational cybersecurity project of the Government of India.

KAVACH-2023

  • India's national level hackathon jointly launched by AICTE (All India Council for Technical Education) and BPRD (Bureau of Police Research and Development) to tackle cyber threats.

AVARODH

  • A software developed by the Centre for Development of Advanced Computing (C-DAC) to safeguard against cyber attacks and data theft.

My Circle App

  • Women's safety app launched by BSNL (Bharat Sanchar Nigam Limited).

Types of Cyber Crimes: Data Theft, Financial Fraud, Cyberstalking, Cyberterrorism, Intellectual Property Theft, Online Impersonation

Cyberterrorism,

Intellectual

Property

Theft,

Online

Impersonation

  • Cyber Crime - Core Features: Computer technology as modus operandi; intangibility of the environment.
  • Digital Arrest: A term used by cyber criminals as a scare tactic to defraud victims into making payments or revealing information.
  • Common Cyber Crime Activities: Hacking, sending phishing emails, Ransomware, Denial of Service (DoS), malicious Spamming.
  • Activities NOT Cyber Crime: Cryptography (a security technique); Interpreter (a language translator).
  • Data Theft: Unauthorised access, acquisition, or extraction of confidential or sensitive digital data (e.g., personal information, financial records, trade secrets).
  • Financial Fraud: Deceptive acts to gain financial benefit through digital means (e.g., phishing, online banking fraud, credit card fraud, investment scams).
  • Cyberstalking: Repeated harassment or threats using electronic communication (e.g., emails, social media, messaging apps) to intimidate or cause distress.
  • Cyberterrorism: Politically or ideologically motivated attacks against computer networks, systems, and data to cause disruption, fear, or damage to critical infrastructure.
  • Intellectual Property Theft: Unauthorised use, reproduction, distribution, or sale of copyrighted works, trademarks, or trade secrets in the digital domain (e.g., software piracy, illegal content downloads).
  • Online Impersonation: Assuming someone else's identity online without their consent, often for deceptive, harmful, or fraudulent purposes (e.g., creating fake profiles, email spoofing).

11. Data Privacy and Protection Laws in

India

Practice MCQs: Cyber Security and Cyber Crimes

Common Cyber Threats and Attacks: Malware, Phishing, Denial-of-Service (DoS/DDoS), Ransomware, Social Engineering

  1. What is Distributed Denial of Service (DDoS) attack?

    Asked in: CGPSC Prelims Exam 2021

    1. A computer game
    2. A cyber attack
    3. A millitary attack system
    4. None of these
    Show answer

    Answer: B. A cyber attack

    involve physical visits by doctors to patients' homes. - Statement 2 is correct. eSanjeevani has two variants: eSanjeevani OPD (patient-to-doctor teleconsultation) and eSanjeevani Ayushman Bharat-Health and Wellness Centre (AB-HWC) (doctor- to-doctor and health worker-to-doctor teleconsultation).

Critical Information Infrastructure Protection (CIIP)

  1. Which of the following sectors have been identified as 'critical 'sectors' by the National Critical Information Infrastructure Protection Centre ? 1. Power and Energy 2. Industry 3. Banking and Financial services 4. Irrigation 5. Education Select the answer using the code given below :

    Asked in: UPSC CAPF 2024

    1. 1 only
    2. 1 and 2 only
    3. 2 and 3 only
    4. 1, 2 and 3
    Show answer

    Answer: D. 1, 2 and 3

    The National Critical Information Infrastructure Protection Centre (NCIIPC) is mandated to protect the Critical Information Infrastructure (CII) in India. NCIIPC has identified certain sectors as critical. These sectors include Energy, Transport, Telecom, Government, Strategic & Public Enterprises, and Banking & Financial Services. Statement 1 (Power and Energy) is covered under the 'Energy' sector, which is a critical sector. Statement 3 (Banking and Financial services) is explicitly listed as a critical sector. Statement 2 (Industry) is not listed as a standalone primary critical information infrastructure sector by NCIIPC in their current official list. However, 'Strategic & Public Enterprises' is listed, which often includes key industries vital for the economy or national security. Also, broader definitions of critical infrastructure often include manufacturing/industry, particularly strategic industries or those related to other critical sectors. Given the options provided, and the confirmed inclusion of 1 and 3, option D (1, 2 and 3) is the most plausible answer, suggesting that 'Industry' in some form is also considered critical in the context of this question, perhaps under the 'Strategic & Public Enterprises' umbrella or a broader understanding of critical sectors relevant to NCIIPC's protective mandate. Statements 4 (Irrigation) and 5 (Education) are generally not considered critical infrastructure sectors by NCIIPC in the same category as the others, although important services.

Cyber Hygiene and Best Practices for Individuals and Organizations

  1. A strong password for cyber security should be

    Asked in: GS CompOp 07 2024 1009 2024

    1. short and easy to remember
    2. a combination of uppercase and lowercase letters, numbers and symbols
    3. a combination of only numbers
    4. based on personal information
    Show answer

    Answer: B. a combination of uppercase and lowercase letters, numbers and symbols

    A strong password should be a combination of uppercase and lowercase letters, numbers, and symbols to enhance its complexity and security.

  2. Internet filtering is

    Asked in: Lib Arch Off GS InfoSc 13 2021 0102 2024

    1. a form of censorship
    2. acceptable user policy
    3. access to inappropriate material
    4. blocking Internet facility
    Show answer

    Answer: A. a form of censorship

    Internet filtering involves blocking or restricting access to certain online content or websites. While it can be implemented for various reasons (e.g., protecting children, national security, enforcing acceptable use policies), the act of restricting information flow is fundamentally a form of censorship.

  3. When sharing sensitive company documents with external clients, which is the most secure practice?

    Asked in: STENO Grade I paper 2025

    1. Sending via unencrypted email
    2. Uploading to a secure cloud platform with access control
    3. Copying to a public USB drive
    4. Posting the link on a social media platform with access control
    Show answer

    Answer: B. Uploading to a secure cloud platform with access control

    Secure file sharing involves using encrypted channels and controlled access mechanisms to protect sensitive information from unauthorized disclosure.

  4. Which of the following actions best ensures that a software installation is secure?

    Asked in: STENO Grade I paper 2025

    1. Downloading from first search result
    2. Downloading from an official website
    3. Ignoring update notification
    4. Turning off your antivirus during installation
    Show answer

    Answer: B. Downloading from an official website

    Always obtain software from trusted sources to minimize the risk of malware infection and security vulnerabilities.

Cyber Security Governance and Frameworks: National Cyber Security Policy, International Cooperation on Cyber Security

  1. Consider the following statements for Cyber Surakshit Bharat. 1. Recognizing the need to strengthen the cyber security ecosystem in India, and in alignment with the Honourable Prime Minister's vision for a 'Digital India', the Ministry of Electronics and Information Technology (Meity), launched the Cyber Surakshit Bharat initiative in association with National e-Governance Division (NeGD) and industry partners. 2. Target audiences for the above program are students of postgraduate courses of all state and central universities. Select the correct answer using the code given below:

    Asked in: GPSC Prelims CSP 2 2023

    1. Only 1 is correct
    2. Only 2 is correct
    3. Both 1 and 2 are correct
    4. Neither 1 nor 2 is correct
    Show answer

    Answer: A. Only 1 is correct

    Statement 1 accurately describes the Cyber Surakshit Bharat initiative. It was launched by MeitY in collaboration with NeGD and industry partners to strengthen the cybersecurity ecosystem in line with the Digital India vision. Statement 2 is incorrect; the target audience of the Cyber Surakshit Bharat initiative is primarily senior management and technical personnel involved in IT and cybersecurity in government departments, public sector undertakings, and banks, such as CISOs (Chief Information Security Officers) and IT heads, not students.

  2. ISO 27001 is a standard that relates to

    Asked in: UPSC CISF AC EXE 2018

    1. Information Security
    2. Quality Assurance
    3. Infrastructure Management
    4. Human Resource Management
    Show answer

    Answer: A. Information Security

    - The ISO 27000 family of standards deals with information security. - ISO 27001 specifically provides requirements for establishing, implementing, maintaining, and continually improving an ISMS. - An ISMS is a systematic approach to managing sensitive company information so that it remains secure.

  3. Which one of the following is an Information Security Management Standard ?

    Asked in: UPSC CISF AC EXE 2021

    1. ISO 9001
    2. ISO 14001
    3. ISO 27001
    4. ISO 17025
    Show answer

    Answer: C. ISO 27001

    - ISO 27001 specifically addresses Information Security Management Systems (ISMS). - Other ISO standards cover different management disciplines.

  4. The ISO/IEC 27001 Standard is for :

    Asked in: UPSC CISF AC EXE 2022

    1. Information Security Management.
    2. Quality Management.
    3. Risk Management.
    4. Environmental Management.
    Show answer

    Answer: A. Information Security Management.

    ISO/IEC 27001 is the leading international standard specifically focused on Information Security Management.

  5. Q98: In India, the national cyber security policy was released in -

    Asked in: Asstt. Jailor 2013

    1. 2012
    2. 2013
    3. 2014
    4. 2015
    Show answer

    Answer: C. 2014

    The National Cyber Security Policy was formulated by the Department of Electronics and Information Technology (DeitY), Government of India, and was officially released in November 2013.

  6. The Data Security Council of India (DSCI) of NASSCOM signed an agreement with which state-government to set up the 'Centre of Excellence' for cyber security?

    Asked in: Civil Judge 2018

    1. Andhra Pradesh
    2. Tamil Nadu
    3. Telangana
    4. Karnataka
    Show answer

    Answer: C. Telangana

    Promoting cybersecurity is a critical initiative for governments and industry bodies. Establishing centres of excellence is a strategy to foster innovation, research, and skill development in this field.

Cyber Security Technologies and Countermeasures: Firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), Encryption, VPNs, Antivirus, Multi-factor Authentication

  1. Captcha is used for

    Asked in: GPSC Prelims CSP 2 2017

    1. Encrypting passwords
    2. Steganography
    3. Checking for bots
    4. Captures images
    Show answer

    Answer: C. Checking for bots

    - CAPTCHA distinguishes humans from bots. - Used to prevent automated abuse of online services.

  2. A digital signature is

    Asked in: GPSC Prelims CSP 2 2017

    1. a file storing scanned signature
    2. a QR code issued for transactions through mobile devices
    3. a virtual payment address used in unified payments interface
    4. a cryptographic method that supports non-re‐ pudiation
    Show answer

    Answer: D. a cryptographic method that supports non-re‐ pudiation

    - Digital signatures use cryptography. - They ensure authentication, integrity, and non-repudiation of digital data.

  3. Match the following terms: A B i. PKI a. Cyber-physical attack ii. Bitcoin b. Hash iii. Stuxnet c. Cryptocurrency iv. Data Integrity d. Asymmetric Keys

    Asked in: GPSC Prelims CSP 2 2017

    1. i-b, ii-c, iii-d, iv-a
    2. i-c, ii-a, iii-b, iv-d
    3. i-d, ii-c, iii-a, iv-b
    4. i-b, ii-a, iii-d, iv-c
    Show answer

    Answer: C. i-d, ii-c, iii-a, iv-b

    - PKI uses asymmetric keys. - Bitcoin is a cryptocurrency. - Stuxnet was a cyber-physical attack. - Hash functions are used for data integrity.

  4. What is 'Secure Application for Internet' (SAI) that has been launched recently?

    Asked in: GPSC Prelims CSP 2 2023

    1. Simple messaging application developed by Indian Army
    2. A communication channel between Indian and USA defence forces
    3. An antivirus application developed by CSIR
    4. A secure firewall deployed by Reserve Bank of India to block unauthorized access
    Show answer

    Answer: A. Simple messaging application developed by Indian Army

    SAI is an indigenous mobile application developed by the Directorate General of Signals of the Indian Army. It is designed to provide secure voice, text, and video calling services for Army personnel, ensuring privacy and security of internal communication.

  5. Consider the following statements: A digital signature is 1. an electronic record that identifies the certifying authority issuing it 2. used to serve as a proof of identity of an individual to access information or server on Internet 3. an electronic method of signing an electronic document and ensuring that the original content is unchanged Which of the statements given above is/are correct?

    Asked in: UPSC IAS 2019

    1. 1 only
    2. 2 and 3 only
    3. 3 only
    4. 1, 2 and 3
    Show answer

    Answer: B. 2 and 3 only

    A digital signature is primarily used to verify the authenticity and integrity of an electronic document or message, ensuring that it has not been altered since it was signed (Statement 3). Digital signatures rely on digital certificates, which are issued by Certifying Authorities (CAs) and contain the signer's public key and identity information. Digital signatures, often in conjunction with certificates, can also be used as a form of strong authentication, serving as proof of identity for accessing secure systems or information (Statement 2).

  6. In India, the term “Public Key Infrastructure” is used in the context of

    Asked in: UPSC IAS 2020

    1. Digital security infrastructure
    2. Food security infrastructure
    3. Health care and education infrastructure
    4. Telecommunication and transportation infra‐ structure
    Show answer

    Answer: A. Digital security infrastructure

    PKI is a fundamental component of digital security infrastructure, enabling secure communication, electronic transactions, and digital signatures through cryptography. It ensures trust in the digital world by verifying identities and encrypting data.

  7. What is the primary purpose of a firewall?

    Asked in: UPSC CBI DSP LDCE 2023

    1. Scans all your systems for existence of virus
    2. Records your activities on the computer
    3. Stops you from installing software that will harm your computer
    4. Prevents unauthorized access to your computer via internet
    Show answer

    Answer: D. Prevents unauthorized access to your computer via internet

    The primary purpose of a firewall is to act as a security barrier that monitors and controls incoming and outgoing network traffic. It enforces security rules to block unauthorized connections and prevent malicious traffic from entering or leaving a network or individual computer, particularly via external networks like the internet.

  8. Which one of the following is a computer security device ?

    Asked in: UPSC CISF AC EXE 2018

    1. Modem
    2. Compiler
    3. Firewall
    4. Interpreter
    Show answer

    Answer: C. Firewall

    - A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. - It acts as a barrier between a trusted internal network and untrusted external networks (like the internet). - Modems are networking devices for internet access. Compilers and Interpreters are software tools for programming languages.

Data Privacy and Protection: Principles, Challenges, and Global Practices (e.g., GDPR context)

  1. ______ is a major issue while buying online.

    Asked in: Computer Programmer Examination 2021

    1. Security of a product being purchased
    2. Security of customer's transaction
    3. Sale service after product purchased
    4. Quality of the product being purchased
    Show answer

    Answer: B. Security of customer's transaction

    In the context of e-commerce and online transactions, consumer concerns revolve around various aspects of the buying process. Identifying the most significant concern, particularly regarding security, is important for understanding user apprehension.

Digital Forensics and Incident Response

  1. The term ‘Brute Force Acquisition’ is related to

    Asked in: GPSC Prelims CSP 2 2024

    1. Private land acquisition
    2. Encryption of mobile data
    3. Mobile device forensics
    4. None of the above
    Show answer

    Answer: C. Mobile device forensics

    This method is computationally intensive and relies on trying every possible combination within a defined set (e.g., all four-digit passcodes). Forensic tools often automate this process.

Emerging Cyber Security Challenges: IoT Security, Cloud Security, Mobile Security, AI in Cybersecurity, Quantum Computing Implications

  1. Nowadays a new term 'jail breaking' is in use. It implies a process :

    Asked in: UPSC CAPF 2014

    1. of running away from most secured jails of USA by hardcore criminals
    2. that gives users the ability to install unauthor‐ ized software on certain types of phones
    3. of breaking security system by hackers using WiMAX technology
    4. of hacking authorized software from com‐ puters, laptop and mobiles
    Show answer

    Answer: B. that gives users the ability to install unauthor‐ ized software on certain types of phones

    This process allows users to gain full access to the root of the operating system and install software from unofficial sources, customize the interface beyond standard options, and change system settings that are normally locked. It essentially liberates the device from the constraints of the official software ecosystem.

  2. 2024 microsoft outage was caused by which update ?

    Asked in: Mining Inspector (Geology) Exam 2023

    1. Crowdstrike
    2. Cloudstrike
    3. Netstrike
    4. All of the above
    Show answer

    Answer: A. Crowdstrike

    The specific software or update that caused the 2024 Microsoft outage.

Ethical Hacking, Penetration Testing, and Vulnerability Assessment

  1. Which of the following statements about the computer security parlance is correct?

    Asked in: GS INSPFAC 01 2024 2108 2024

    1. In computer security parlance, a white hat is a malicious virus.
    2. In computer security parlance, a white hat is a person who designs and builds firewall restric‐ tions for a computer network.
    3. In computer security parlance, a white hat is an ethical hacker.
    4. In computer security parlance, a white hat is a malicious hacker.
    Show answer

    Answer: C. In computer security parlance, a white hat is an ethical hacker.

    The term "hat" in cybersecurity refers to the intent or ethics of the hacker. - White hat hackers: Ethical hackers who work to improve security. - Black hat hackers: Malicious hackers who exploit vulnerabilities for personal gain or to cause harm. - Grey hat hackers: Operate in a morally ambiguous zone, sometimes hacking without permission but with good intentions.

Fundamentals of Cyber Security: Concepts, Principles, and Importance

  1. Consider the following statements for Cyberspace. 1. Cyberspace is a complex environment consisting of interactions between people, software and services, supported by worldwide distribution of information and communication technology (ICT) devices and networks. 2. Cyber Security policy aims to create a cyber-security framework, which leads to specific actions and programmes to enhance the security posture of country's cyber space. Select the correct answer using the code given below:

    Asked in: GPSC Prelims CSP 2 2023

    1. Only 1 is correct
    2. Only 2 is correct
    3. Both 1 and 2 are correct
    4. Neither 1 nor 2 is correct
    Show answer

    Answer: C. Both 1 and 2 are correct

    Statement 1 provides a standard and accurate definition of cyberspace as a complex environment involving interactions between users, software, services, and the underlying ICT infrastructure. Statement 2 correctly describes the fundamental purpose of a cyber security policy, which is to establish a framework for enhancing the security posture of a nation's cyberspace through specific actions and programs.

  2. In computer security, which one of the following means that the information in a computer system can only be accessed by authenticated parties ?

    Asked in: UPSC CISF AC EXE 2018

    1. Confidentiality
    2. Integrity
    3. Availability
    4. Reliability
    Show answer

    Answer: A. Confidentiality

    - Confidentiality is one of the core principles of the CIA triad (Confidentiality, Integrity, Availability), which are fundamental goals of computer security. - Authentication verifies the identity of a user or system, while authorization determines what authenticated users are allowed to do. - Measures like encryption, access controls, and strong authentication are used to maintain confidentiality.

  3. Which one of the following is not detected by fire detectors ?

    Asked in: UPSC CISF AC EXE 2022

    1. Radiation
    2. Heat
    3. Light
    4. Smoke
    Show answer

    Answer: A. Radiation

    - Fire detection methods include sensing smoke, heat, and flame. - Flame detectors specifically detect UV and IR radiation from flames. - Standard fire detectors do not detect other forms of radiation like X-rays or nuclear radiation.

  4. Night Vision Devices do not consist of :

    Asked in: UPSC CISF AC EXE 2022

    1. Telescope.
    2. Binocular.
    3. X-rays.
    4. Infrared image converter tube.
    Show answer

    Answer: C. X-rays.

    - Night vision uses light amplification (visible/IR) or thermal detection (IR). - Optical components like lenses (related to telescopes/binoculars) are essential. - Image intensifier tubes process low light/IR into visible images. - X-rays are not within the spectrum or mechanism used by typical night vision devices.

  5. Metal detector is meant to detect the presence of which of the following in the search object ?

    Asked in: UPSC CISF AC EXE 2022

    1. Ferrous metal only
    2. Ferrous and plastic objects only
    3. Ferrous and non-ferrous objects only
    4. Ferrous, non-ferrous and plastic objects
    Show answer

    Answer: C. Ferrous and non-ferrous objects only

    - Metal detectors work on the principle of electromagnetism. They emit an electromagnetic field and detect the presence of metal objects by measuring the secondary magnetic field induced in the object or the change in the primary field. - Ferrous metals are magnetic (e.g., iron, steel), while non-ferrous metals are not magnetic but are still conductive (e.g., aluminum, copper, brass, gold). Both types interact with the electromagnetic field of a metal detector. - Plastic is not a conductive material and therefore does not interfere with the electromagnetic field in a way that a standard metal detector can detect.

  6. Which of the following is/are the basic function(s) of a CCTV system ? 1. To disallow unauthorised persons to enter into any building in the premises 2. To allow a person to observe a scene without being present at the scene 3. To allow an activity to be recorded for future viewing Select the correct answer using the code given below :

    Asked in: UPSC CISF AC EXE 2022

    1. 1, 2 and 3
    2. 2 only
    3. 1 and 3 only
    4. 2 and 3 only
    Show answer

    Answer: D. 2 and 3 only

    - Statement 1 is incorrect because a CCTV system is a surveillance tool; it monitors and records but does not physically prevent unauthorized entry. Access control systems (like locks, turnstiles, card readers) perform the function of disallowing entry. - Statement 2 is correct. The primary purpose of CCTV is to transmit video from cameras at one location to monitors at another, allowing personnel to observe a scene remotely. - Statement 3 is correct. Recording video footage is a standard and essential function of modern CCTV systems, allowing for investigation of incidents, monitoring trends, and evidence collection.

  7. The feature(s) of cyber security is/are:

    Asked in: MPPSC CS Prelims 2022

    1. Compliance
    2. Defence against internal threats
    3. Threat prevention
    4. All of the above
    Show answer

    Answer: D. All of the above

    Cyber security is a broad domain covering the protection of systems, networks, programs, devices, and data from unauthorized access or attacks.

  8. The principle of data security management, which covers the procedures, policies and controls utilized to secure the data of customers and the organization against illicit access or use, is known as :

    Asked in: MPPSC CS Prelims 2025

    1. Integrity
    2. Privacy
    3. Availability
    4. Confidentiality
    Show answer

    Answer: D. Confidentiality

    mppsc 2025-2025 Confidentiality ensures that sensitive information is accessed only by authorized individuals. It is one of the core components of the CIA triad (Confidentiality, Integrity, and Availability) in information security. Protection against illicit access or use directly falls under the purview of confidentiality.

Role of Government Agencies: CERT-In, NCIIPC, Law Enforcement in Cyber Crime Investigation

  1. Which of the following statements are correct regarding CERT-In? 1. CERT-In is the national nodal agency for responding to computer security incidents as and when they occur 2. CERT-In is operational since January 2014 3. Forecast and alerts of cyber security incidents is one of the functions of CERT- In

    Asked in: GPSC Prelims CSP 2 2022

    1. 1, 2 and 3
    2. 1 and 2 only
    3. 1 and 3 only
    4. 2 and 3 only
    Show answer

    Answer: C. 1 and 3 only

    - Statement 1 is correct. CERT-In (Indian Computer Emergency Response Team) is the functional organization under the Ministry of Electronics and Information Technology (MeitY) tasked with serving as the national nodal agency for responding to computer security incidents in India. - Statement 2 is incorrect. CERT-In was established in 2004 under the provisions of the Information Technology Act, 2000, not in January 2014. - Statement 3 is correct. Key functions of CERT-In include issuing alerts, advisories, vulnerability notes, and disseminating information regarding cyber security incidents, threats, vulnerabilities, and solutions. This involves forecasting potential security incidents and providing timely alerts.

  2. Consider the following statements with reference to the latest guidelines issued by the Indian Computer Emergency Response Team (CERT-In): Data centres and service providers shall compulsorily report cyber security breaches within 24 hours. Virtual Private Network providers shall retain user data for at least five years and share records with authorities when required. Which of the statements given above is/are correct?

    Asked in: UPSC CAPF 2022

    1. 1 only
    2. 2 only
    3. Both 1 and 2
    4. Neither 1 nor 2
    Show answer

    Answer: B. 2 only

    The CERT-In directions aim to improve India's cyber security posture by enhancing incident reporting mechanisms and enabling better tracing of malicious activities.

  3. Which of the following statements is/are correct about KAVACH-2023? 1. It is a joint coordination committee of all three wings of India's armed forces to protect India's borders. 2. It is India's national level hackathon jointly launched by AICTE and BPRD to tackle cyber threats.

    Asked in: UPSC CAPF 2023

    1. 1 only
    2. 2 only
    3. Both 1 and 2
    4. Neither 1 nor 2
    Show answer

    Answer: B. 2 only

    Statement 1: It is a joint coordination committee of all three wings of India's armed forces to protect India's borders. This statement is incorrect. KA‐ VACH-2023 was not related to military coordination for border protection.Statement 2: It is India's national level hackathon jointly launched by AICTE and BPRD to tackle cyber threats. This statement is correct. KAVACH-2023 was a national-level cyber security hackathon. It was jointly organized by the All India Council for Technical Education (AICTE) and the Bureau of Police Research and Development (BPR&D), in collaboration with the Indian Cyber Crime Coordination Centre (I4C) and the National Security Council Secretariat (NSCS). The aim was to identify innovative concepts and solutions to address cyber security and cybercrime challenges.

  4. To safeguard against cyber attacks and threats of data theft the "Centre for Development of Advanced Computing" has developed a new software called

    Asked in: UPPSC Upper Mains 2009

    1. AVARODH
    2. NAYAN
    3. TR1KAL
    4. None of these
    Show answer

    Answer: A. AVARODH

    - The question asks about a software developed by the Centre for Development of Advanced Computing (CDAC) to safeguard against cyber attacks and data theft. - CDAC is a premier R&D organization under India's Ministry of Electronics and Information Technology, involved in various aspects of IT, including cyber security. - Around the time this question would have been relevant (leading up to 2010), CDAC was indeed involved in developing network security solutions. - Among the options, AVARODH is a name associated with network security/intrusion prevention systems developed by CDAC. The term "Avarodh" in Hindi means obstruction or hindrance, which aligns with the function of preventing cyber threats.

  5. Mule Hunter, ai has been introduced by

    Asked in: ASO 2025

    1. NPCI
    2. SEBI
    3. CERT-In
    4. RBI
    Show answer

    Answer: C. CERT-In

    CERT-In is the national agency for cybersecurity incident response. It plays a crucial role in protecting India's cyberspace from malicious activities.

  6. Consider the following statements and select the correct answer from the codes given below: I. The full form of CERT-In is the Indian Computer Emergency Response Team. II. CERT-In is the national nodal agency for responding to the cyber security issues as and when they occur. III. CERT-In is under the Ministry of Electronics and Information Technology, Government of India. IV. CERT-In is the certificate issuing wing of the NCERT. Codes:

    Asked in: JrInfoPR 19 2023 2912 2023

    1. I and II
    2. I, II and III
    3. II and III
    4. IV
    Show answer

    Answer: B. I, II and III

    CERT-In is the primary government agency in India responsible for cybersecurity incident response, threat analysis, and cybersecurity awareness. It plays a crucial role in protecting India's cyberspace.

  7. Which of the following telecom companies has launched the women's safety app "My Circle"?

    Asked in: tcs pre 19

    1. Reliance
    2. Bharti Airtel
    3. BSNL
    4. Vodafone
    Show answer

    Answer: B. Bharti Airtel

    This question is related to current affairs and corporate social responsibility initiatives by telecom companies.

  8. The NCCC is an e-surveillance and operational cybersecurity project of Government of India. Here, NCCC stands for :

    Asked in: Ayurvedic Medical Officer Examination 2021 · Homeopathy Medical Officer Examination 2021

    1. National Cyber and Computer Centre
    2. National Cyber Coordination Centre
    3. National Cyber Conduction Centre
    4. National Cyber Community Centre
    Show answer

    Answer: B. National Cyber Coordination Centre

    NCCC stands for National Cyber Coordination Centre.

Types of Cyber Crimes: Data Theft, Financial Fraud, Cyberstalking, Cyberterrorism, Intellectual Property Theft, Online Impersonation

  1. Which of the following are the two essential features of cyber crime?

    Asked in: MPPSC CS Prelims 2018

    1. Computer technology as modus operandi and intangibility of the environment
    2. Offender computer skills and victim ignorance of computer technology
    3. Hardware and software
    4. Hackers and crackers
    Show answer

    Answer: A. Computer technology as modus operandi and intangibility of the environment

    Cyber crime is defined by its reliance on computer systems/networks and its operation in the digital realm.

  2. What is Digital arrest ?

    Asked in: APPSC Group II Mains paper 2 2025

    1. Arrest made by police when the accused is in foreign countries
    2. Arrest made by police when the accused cannot be arrested physically
    3. Arrest made by police when the accused is granted anticipatory bail by courts
    4. Term used by cyber criminals to scare victims
    Show answer

    Answer: D. Term used by cyber criminals to scare victims

    - Cyber criminals impersonate law enforcement officials (police, CBI, ED) or other authorities. - They contact victims through calls or online platforms, falsely claiming the victim is involved in illegal activities (like money laundering, drug trafficking, or having suspicious packages). - They demand money immediately to avoid legal action, often isolating the victim and using threats to induce panic. - This tactic is a form of online fraud or cybercrime, not an official method of arrest.

  3. Which of the following is not an example of cyber crime?

    Asked in: Assistant District Public Prosecution Officer Examination 2021

    1. Denial of Service
    2. Phishing
    3. Spamming
    4. Cryptography
    Show answer

    Answer: D. Cryptography

    Cryptography is a technique for securing data, not a cybercrime. Denial of Service, Phishing, and Spamming are cybercrimes.

  4. Hacking, Sending phishing emails, Ransomware are the examples of

    1. Online Banking Services
    2. Online Business Activities
    3. Cyber Crime Activities
    4. Governments Online Services
    Show answer

    Answer: C. Cyber Crime Activities