Cyber security practice questions

CERT-In stands for Indian Computer Emergency Response Team

CERT-In was established in 2004

CERT-In handles cybersecurity incidents in India

Malware is malicious software

Firewall is not malware, it’s protection

Virus is malware that replicates by attaching to files

Worm is self-replicating malware that spreads independently

Trojan disguises as legitimate software

Ransomware encrypts data and demands payment

WannaCry ransomware attacked in May 2017

Spyware secretly monitors user activity

Adware displays unwanted advertisements

Phishing is fraudulent attempt to obtain sensitive information

Spear phishing targets specific individuals

Vishing is voice phishing over phone

Smishing is SMS phishing

Hacking is unauthorized access to systems

Ethical hacking is legal hacking to find vulnerabilities

White hat hacker hacks ethically

Black hat hacker hacks maliciously

DDoS is Distributed Denial of Service attack

DDoS overwhelms server with traffic

Firewall monitors and controls network traffic

Antivirus detects and removes malware

Encryption converts data into coded form

Decryption converts encrypted data back to original

VPN stands for Virtual Private Network

VPN encrypts internet connection and hides IP

2FA requires two forms of verification

IT Act 2000 governs cyber activities in India

IT Act was enacted in 2000

IT Act was amended in 2008

Section 66A dealt with offensive messages (struck down)

Supreme Court struck down 66A in 2015

Section 66F deals with cyber terrorism

National Cyber Security Policy was released in 2013

NCIIPC stands for National Critical Information Infrastructure Protection Centre

NCIIPC was established in 2014

Data breach is unauthorized access to data

Identity theft is stealing personal information

Social engineering manipulates people to divulge information

Zero-day exploits unknown vulnerability

Botnet is network of infected computers

SQL injection inserts malicious code into database

XSS injects malicious scripts into websites

XSS stands for Cross-Site Scripting

Cyber warfare is use of cyber attacks by nations

Dark web is hidden part of internet requiring special software

Deep web is unindexed, dark web is intentionally hidden