UPSC Internal Security – Chapter 13: India's Cyber Security Framework (21 MCQs)

← Back

UPSC Internal Security – Chapter 13: India's Cyber Security Framework (21 MCQs) – 21 questions, subject: Internal Security. Every question has the correct answer with a one-line explanation; tap "Show Answer". Free practice for TNPSC, UPSC, SSC, Bank and RRB exams – Shanmugam IAS Academy, Coimbatore.

Get daily current affairs & exam alerts – follow us YouTube WhatsApp Channel Telegram Channel Facebook Page Instagram
Share with friends & study groups
Link to this page from your website / blog (HTML code)
1.  

CERT-In functions as the national agency for incident response under which section of the IT Act?

Correct Answer: D [Section 70B]

Explanation:

Section 70B, inserted by the 2008 amendment, designates CERT-In as the national agency for incident response.

2.  

NCIIPC works under:

Correct Answer: A [the National Technical Research Organisation]

Explanation:

NCIIPC, designated under Section 70A in January 2014, is a unit of the National Technical Research Organisation.

3.  

Under the CERT-In directions of 2022, specified cyber incidents must be reported within:

Correct Answer: C [6 hours]

Explanation:

The CERT-In directions of 28 April 2022 require specified incidents to be reported within 6 hours of noticing them.

4.  

The Sahyog portal, developed by the Indian Cyber Crime Coordination Centre, is mainly used to:

Correct Answer: D [send notices to online intermediaries for removal of unlawful content]

Explanation:

Sahyog lets authorised agencies send takedown notices to intermediaries under Section 79(3)(b) of the IT Act.

5.  

The Indian Cyber Crime Coordination Centre (I4C) works under:

Correct Answer: C [the Ministry of Home Affairs]

Explanation:

I4C was set up under the Ministry of Home Affairs and inaugurated in January 2020 to coordinate action against cyber crime.

6.  

The National Cyber Security Policy, 2013 aimed to create how many cyber security professionals in five years?

Correct Answer: B [5 lakh]

Explanation:

The National Cyber Security Policy, 2013 set a goal of creating 5 lakh skilled cyber security professionals in five years.

7.  

Section 43A of the IT Act, on compensation for failure to protect sensitive personal data, is to be omitted by the:

Correct Answer: C [Digital Personal Data Protection Act, 2023]

Explanation:

Section 44(2)(a) of the DPDP Act, 2023 provides that Section 43A of the IT Act shall be omitted.

8.  

The Budapest Convention, to which India is not a party, deals with:

Correct Answer: C [cyber crime]

Explanation:

The Council of Europe's Budapest Convention (2001) is the first international treaty on cyber crime.

9.  

The Supreme Court held privacy to be a fundamental right in:

Correct Answer: B [Justice K.S. Puttaswamy v. Union of India (2017)]

Explanation:

A nine-judge bench in Puttaswamy (2017) held privacy to be a fundamental right under Article 21 and Part III.

10.  

Consider the following statements:

1. CERT-In was set up in 2004 under MeitY.
2. NCIIPC protects Critical Information Infrastructure under Section 70A of the IT Act.
3. India ratified the Budapest Convention in 2018.

Which of the statements given above is/are correct?

Correct Answer: B [1 and 2 only]

Explanation:

CERT-In began in 2004 under MeitY and NCIIPC is the Section 70A agency; India is not a party to the Budapest Convention.

11.  

Assertion (A): Cyber crime in India is investigated mainly by State police.

Reason (R): "Police" and "public order" are in the State List of the Constitution.

Correct Answer: A [Both A and R are true, and R is the correct explanation of A]

Explanation:

Both are true and linked: police and public order are State List subjects, so State police investigate cyber crime.

12.  

The Cyber Swachhta Kendra is a:

Correct Answer: D [botnet cleaning and malware analysis centre]

Explanation:

Cyber Swachhta Kendra, launched by CERT-In in 2017, is the Botnet Cleaning and Malware Analysis Centre offering free cleaning tools.

13.  

The body set up to enforce the DPDP Act, 2023 is the:

Correct Answer: B [Data Protection Board of India]

Explanation:

The DPDP Act, 2023 creates the Data Protection Board of India to inquire into breaches and impose penalties.

14.  

Under the 2022 CERT-In directions, ICT system logs must be kept for:

Correct Answer: D [180 days]

Explanation:

The 2022 directions require service providers to keep ICT system logs securely for a rolling period of 180 days within India.

15.  

Under the DPDP Act, 2023, a Data Fiduciary must obtain verifiable consent of a parent or lawful guardian before processing the personal data of a child, that is, an individual below the age of:

Correct Answer: C [18 years]

Explanation:

Section 2(f) defines a child as an individual who has not completed eighteen years; Section 9 requires verifiable parental consent.

16.  

The National Cyber Crime Reporting Portal is run by:

Correct Answer: B [I4C, Ministry of Home Affairs]

Explanation:

cybercrime.gov.in, the National Cyber Crime Reporting Portal, is run by I4C under the Ministry of Home Affairs.

17.  

Arrange the following in chronological order:

1. DPDP Act enacted
2. I4C inaugurated
3. CERT-In set up
4. National Cyber Security Policy released

Select the correct answer using the code given below:

Correct Answer: C [3-4-2-1]

Explanation:

2004, 2013, 2020, 2023.

18.  

"Critical Information Infrastructure" is defined in which section of the IT Act?

Correct Answer: D [Section 70]

Explanation:

explanation to Section 70(1).

19.  

The UN Convention against Cybercrime was opened for signature in 2025 at:

Correct Answer: A [Hanoi]

Explanation:

After adoption by the General Assembly in December 2024, the Convention was opened for signature at a ceremony in Hanoi in October 2025.

20.  

Which of these coordinates national cyber security in the National Security Council Secretariat?

Correct Answer: B [National Cyber Security Coordinator]

Explanation:

The National Cyber Security Coordinator, located in the National Security Council Secretariat, coordinates national cyber security work.

21.  
UPSC Prelims 2017

In India, it is legally mandatory for which of the following to report on cyber security incidents?

1. Service providers
2. Data centres
3. Body corporate

Select the correct answer using the code given below:

Correct Answer: D [1, 2 and 3]

Explanation:

under Section 70B of the IT Act and the CERT-In Rules, 2013, service providers, intermediaries, data centres and body corporate must report cyber security incidents to CERT-In.

➤ Full notes, maps, tables, a reason for every option and Mains PYQs – U20 · Internal Security (UPSC book, ₹249): www.shanmugamiasacademy.in/study-materials/upsc-internal-security

📘 U20 · Internal Security – UPSC Civil Services (Prelims & Mains)
Here you get the answer with a one-line explanation. 18 chapters · 367 MCQs incl. UPSC Prelims PYQs with a reason for every option · 90 Mains questions + Mains PYQs · maps, tables, revision cards
Get the book – ₹249 ₹499 →
Score: 0 Answered: 0 / 0