UPSC Internal Security – Chapter 12: Basics of Cyber Security (21 MCQs)

← Back

UPSC Internal Security – Chapter 12: Basics of Cyber Security (21 MCQs) – 21 questions, subject: Internal Security. Every question has the correct answer with a one-line explanation; tap "Show Answer". Free practice for TNPSC, UPSC, SSC, Bank and RRB exams – Shanmugam IAS Academy, Coimbatore.

Get daily current affairs & exam alerts – follow us YouTube WhatsApp Channel Telegram Channel Facebook Page Instagram
Share with friends & study groups
Link to this page from your website / blog (HTML code)
1.  

An attack in which the attacker secretly intercepts communication between two parties is called a:

Correct Answer: B [man-in-the-middle attack]

Explanation:

A man-in-the-middle attacker positions himself between two parties to intercept or alter the data passing between them.

2.  

The Mirai botnet, used in large DDoS attacks in 2016, was built mainly from infected:

Correct Answer: C [Internet of Things devices such as home routers, cameras and video recorders]

Explanation:

US CISA reported that Mirai infected mainly home routers, network-enabled cameras and digital video recorders – Internet of Things devices.

3.  

The SolarWinds compromise revealed in December 2020 is best described as a:

Correct Answer: D [supply-chain attack in which malicious code was inserted into a widely used software product]

Explanation:

Attackers inserted malicious code into SolarWinds Orion through its build process, so customers installing it were compromised – a supply-chain attack.

4.  

A "zero-day" vulnerability is one that:

Correct Answer: D [is unknown to the software maker, so no patch exists]

Explanation:

A zero-day flaw is unknown to the software maker, who has had zero days to fix it, so no patch exists.

5.  

Stuxnet, discovered in 2010, is known for:

Correct Answer: A [damaging nuclear centrifuges]

Explanation:

Stuxnet sabotaged uranium-enrichment centrifuges at Iran's nuclear facility, the first known cyber weapon to cause physical damage.

6.  

"Smishing" is a form of phishing carried out through:

Correct Answer: C [SMS text messages]

Explanation:

Smishing combines SMS and phishing: fraudsters send fake text messages to steal passwords or money.

7.  

Which section of the IT Act deals with cyber terrorism?

Correct Answer: D [Section 66F]

Explanation:

Section 66F, inserted by the IT (Amendment) Act, 2008, defines cyber terrorism and punishes it with up to life imprisonment.

8.  

A network of infected devices controlled by an attacker is a:

Correct Answer: C [botnet]

Explanation:

A botnet is a network of infected devices, called bots or zombies, controlled remotely by an attacker, often for DDoS.

9.  

The ransomware attack that disrupted services at AIIMS, New Delhi took place in:

Correct Answer: A [2022]

Explanation:

The ransomware attack on AIIMS, New Delhi in November 2022 disrupted its hospital services for days.

10.  

Consider the following statements:

1. A Trojan disguises itself as useful software.
2. Ransomware encrypts data and demands payment.
3. A virus spreads without any host file.

Which of the statements given above is/are correct?

Correct Answer: B [1 and 2 only]

Explanation:

Statements 1 and 2 are correct; statement 3 is wrong because a virus needs a host file to spread.

11.  

Assertion (A): Multi-factor authentication reduces the risk of account takeover.

Reason (R): A stolen password alone is not enough to log in when a second factor is required.

Correct Answer: A [Both A and R are true, and R is the correct explanation of A]

Explanation:

Both are true, and R explains A: a second factor blocks login even when the password has been stolen.

12.  

An "Advanced Persistent Threat" is usually:

Correct Answer: A [a long, stealthy campaign by a well-resourced, often state-backed group]

Explanation:

An APT is a long, stealthy, targeted campaign, usually by a state-backed group, to spy on or sabotage a target.

13.  

The security approach of "never trust, always verify" is called:

Correct Answer: B [zero trust]

Explanation:

Zero trust trusts no user or device by default and verifies every access request, every time.

14.  

NotPetya (2017) was mainly a:

Correct Answer: D [data-destroying malware disguised as ransomware]

Explanation:

NotPetya (June 2017) posed as ransomware, but its main effect was to destroy data on infected systems.

15.  

Tricking people into revealing information, rather than breaking technology, is called:

Correct Answer: B [social engineering]

Explanation:

Social engineering manipulates people rather than machines, for example through phishing or impersonation, exploiting the human weak link.

16.  

Arrange the following in chronological order:

1. Stuxnet discovered
2. AIIMS ransomware attack
3. Cosmos Bank cyber heist
4. WannaCry attack

Select the correct answer using the code given below:

Correct Answer: C [1-4-3-2]

Explanation:

2010, 2017, 2018, 2022.

17.  

Which of the following is the best protection against losing data to ransomware?

Correct Answer: D [keeping regular offline backups]

Explanation:

Clean offline backups let data be restored without paying, and ransomware spreading through the network cannot reach them.

18.  

EternalBlue, used by WannaCry, exploited a flaw in:

Correct Answer: A [Microsoft Windows]

Explanation:

EternalBlue exploited a flaw in the Windows SMB file-sharing protocol, which let WannaCry spread across networks.

19.  

"Vishing" is a fraud carried out mainly through:

Correct Answer: D [voice calls]

Explanation:

Vishing is voice phishing: fraudsters use phone calls to trick victims into sharing OTPs, passwords or money.

20.  

Ransomware is malware that:

Correct Answer: D [encrypts or locks a victim's data and demands payment to release it]

Explanation:

Ransomware encrypts or locks a victim's files or systems and demands payment, often in cryptocurrency, to release them.

21.  
UPSC Prelims 2018

The terms ‘Wanna Cry, Petya and Eternal Blue’ sometimes mentioned in the news recently are related to:

Correct Answer: C [Cyber attacks]

Explanation:

WannaCry was ransomware that used the EternalBlue exploit in Windows; Petya was another malware attack of 2017.

➤ Full notes, maps, tables, a reason for every option and Mains PYQs – U20 · Internal Security (UPSC book, ₹249): www.shanmugamiasacademy.in/study-materials/upsc-internal-security

📘 U20 · Internal Security – UPSC Civil Services (Prelims & Mains)
Here you get the answer with a one-line explanation. 18 chapters · 367 MCQs incl. UPSC Prelims PYQs with a reason for every option · 90 Mains questions + Mains PYQs · maps, tables, revision cards
Get the book – ₹249 ₹499 →
Score: 0 Answered: 0 / 0