Cyber Security — Practice

Question 1

Malware that encrypts the victim's files and demands payment for the decryption key is called:
(a) spyware (b) ransomware (c) adware (d) worm

Accepted Answer

(b) ransomware.

The behaviour — encrypt files, demand ransom — is the definition. WannaCry (2017) is the classic example cited in exams.

Question 2

Fraudulent emails that appear to come from a legitimate bank and ask users to 'verify' their account details are an example of:
(a) spamming (b) phishing (c) hacking (d) tracking

Accepted Answer

(b) phishing.

Impersonation by email to steal credentials. Spam is merely unsolicited bulk mail — it may carry phishing, but the impersonation con itself is phishing.

Question 3

A security system that monitors and controls incoming and outgoing network traffic based on rules is a:
(a) router (b) antivirus (c) firewall (d) modem

Accepted Answer

(c) firewall.

It is the barrier between a trusted internal network and the untrusted internet, implemented in hardware or software. Antivirus scans files, not traffic.

Question 4

Which type of malware can replicate itself and spread across networks WITHOUT attaching to a host file or requiring user action?
(a) virus (b) trojan horse (c) worm (d) adware

Accepted Answer

(c) worm.

Self-replication without a host is the worm's defining trait. A virus needs a host file and typically a user action; a trojan needs the user to install it.

Question 5

Malware that disguises itself as legitimate software to trick users into installing it is called a:
(a) worm (b) trojan horse (c) keylogger (d) botnet

Accepted Answer

(b) trojan horse.

Named for the Greek legend: it enters by invitation, then opens a backdoor. A keylogger records keystrokes; a botnet is a network of already-infected machines.

Question 6

Two-factor authentication (2FA) improves security by:
(a) using two passwords (b) requiring a second proof of identity such as an OTP in addition to the password (c) encrypting the password twice (d) changing the password every two days

Accepted Answer

(b).

2FA pairs something you know (password) with something you have (OTP, authenticator app). A stolen password alone then fails — which is why it is the single best account upgrade.

Question 7

A program that secretly records every keystroke to steal passwords and card numbers is a:
(a) keylogger (b) firewall (c) cookie (d) patch

Accepted Answer

(a) keylogger — a species of spyware.

Cookies are ordinary browser files for remembering preferences (a privacy issue, not malware); patches are the security FIXES.

Question 8

India's Information Technology Act, which governs cybercrime and electronic commerce, was enacted in:
(a) 1998 (b) 2000 (c) 2008 (d) 2013

Accepted Answer

(b) 2000.

The IT Act 2000 also gave digital signatures legal validity. 2008 — the major amendment year — is the planted distractor.

Question 9

A security professional who tests an organisation's systems for vulnerabilities WITH its permission is called a:
(a) black hat hacker (b) white hat hacker (c) grey hat hacker (d) cracker

Accepted Answer

(b) white hat hacker (ethical hacker).

Black hats attack for gain; grey hats probe without permission but without malicious intent; 'cracker' is an older term for a malicious intruder.

Question 10

The national nodal agency for responding to computer security incidents in India is:
(a) TRAI (b) CERT-In (c) NITI Aayog (d) C-DAC

Accepted Answer

(b) CERT-In — the Indian Computer Emergency Response Team, under the Ministry of Electronics and IT (MeitY).

TRAI regulates telecom; C-DAC builds computing technology (PARAM supercomputers); NITI Aayog is the policy think tank.

Question 11

An attack that floods a server with so much traffic that genuine users cannot access it is called:
(a) phishing (b) a brute force attack (c) a denial-of-service attack (d) spoofing

Accepted Answer

(c) a denial-of-service (DoS) attack.

When the flood comes from thousands of botnet machines it becomes a DDoS (Distributed DoS). Brute force targets passwords; spoofing forges identity.

Practice — Cyber Security

Sign in to save attempts to your dashboard and track your accuracy over time

Find a verified tutor

Join a live course

Browse coaching centres

About

Categories

Support

Documentation

Get Study Tips & Updates

Download Our App

Download for iOS

Download for Android

Popular Cities