Which is the national nodal agency of India for responding to computer security incidents?
- A.NIC
- B.CERT-In
- C.TRAI
- D.STQC
Correct answer
Explanation
The correct answer is B, CERT-In, the Indian Computer Emergency Response Team, which works under the Ministry of Electronics and Information Technology and is the national agency for collecting, analysing and issuing alerts on cyber incidents and for coordinating the response to them. Option A is wrong because the National Informatics Centre builds and runs the information technology infrastructure of government departments; it is a service provider, not the incident response agency. Option C is wrong because the Telecom Regulatory Authority of India regulates tariffs and the quality of telecom service and has no incident response role. Option D is wrong because the Standardisation Testing and Quality Certification directorate certifies the quality of information technology products and services. Also remember the National Critical Information Infrastructure Protection Centre for critical sectors and the Cyber Swachhta Kendra for cleaning botnets.
Read the full article: Cyber Security and Threats: Malware, Attacks and PYQs
Practice Questions
View allWhich of the following is a type of cyber attack that involves tricking users into revealing sensitive information?
- A.Phishing attack
- B.SQL injection attack
- C.DoS attack
- D.None of the above
Show answer
Phishing sends a message that looks as if it came from a bank, an employer or a government office, and asks the reader to confirm a password, a card number or a one-time password on a page that belongs to the attacker; the target of the attack is the person…
Read the full explanation →What is the purpose of a firewall in cyber security?
- A.To allow unrestricted access to a network
- B.To block unauthorised access to a network
- C.To create a backup of a network's data
- D.None of the above
Show answer
A firewall sits between a trusted internal network and the untrusted world outside, inspects the traffic crossing it and permits only what its rules allow, dropping the rest; it may be a hardware appliance, a software program or both together.
Read the full explanation →What is the term for a cyber security attack that targets multiple interconnected devices simultaneously to create a large-scale attack network?
- A.DDoS attack
- B.Botnet attack
- C.Zero-day attack
- D.Spear phishing attack
Show answer
A botnet is built by infecting many connected devices, each of which becomes a zombie obeying a single controller; the network so assembled is then rented out or used for spam, fraud or a flood of traffic.
Read the full explanation →The feature(s) of cyber security is/are:
- A.Compliance
- B.Defence against internal threats
- C.Threat prevention
- D.All of the above
Show answer
The correct answer is D, all of the above, because cyber security is not one activity but a programme that covers all three.
Read the full explanation →In the CIA triad of information security, the letter I stands for:
- A.Identification
- B.Integrity
- C.Internet
- D.Isolation
Show answer
The triad names the three goals of information security: confidentiality, that only authorised people can read the data; integrity, that the data is complete and unaltered from the moment it was created or sent; and availability, that the system works when an authorised user needs it.
Read the full explanation →