Cyber Security: Threats, Safety and Cyber Laws
Cyber security questions test whether a candidate can name the common online threats, tell one from another and recall the basic rules of safe internet use and the main provisions of the cyber law. The questions are direct and fact based, so a short, well-organised revision secures this section quickly.
This deep-study note covers the basic terms, the types of malware, the kinds of attacks, safe practices, encryption and the cyber laws of India, the question patterns, a solving method, the traps examiners set and a preparation plan. After reading it, a candidate should be able to identify a threat or a rule without hesitation.
Basic Terms
- Cyber security: the protection of computers, networks and data from online threats and unauthorised access.
- Cyber crime: any crime committed using a computer or the internet.
- Malware: malicious software such as a virus, worm, trojan, ransomware or spyware.
- Virus: a program that attaches itself to a file and spreads when the file is opened.
- Worm: a program that copies itself and spreads across a network on its own.
- Trojan horse: harmful code hidden inside a useful-looking program.
- Ransomware: malware that locks a user's files and demands payment to unlock them.
- Spyware: software that secretly watches a user's activity and sends the data to someone else.
- Phishing: tricking a user into giving personal details through fake e-mails, messages or websites.
- Hacking: gaining unauthorised access to a computer or network.
- Firewall: a barrier that monitors and filters the traffic entering or leaving a network.
- Antivirus: software that detects and removes malware.
- Encryption: converting readable data into a coded form so that only the right person can read it.
- Password: a secret string of characters used to prove a user's identity.
Core Concepts and Rules
- A virus needs a host file and a user action, while a worm spreads by itself over a network.
- A trojan looks useful but works in secret, and ransomware locks files and asks for money.
- Phishing, smishing and vishing are the same trick done by e-mail, SMS and voice call.
- A firewall filters network traffic, and an antivirus scans files and removes malware.
- Encryption converts plain text into cipher text and decryption reverses it.
- A strong password is long, mixes letters, digits and symbols and is not reused.
- Two-factor authentication asks for two proofs, such as a password and a one-time code.
- A digital signature proves the sender's identity and that a message was not changed.
- A VPN creates a secure, private channel over a public network.
- In India cyber crimes are dealt with under the Information Technology Act, 2000.
Types of Malware and Attacks
Malware is a general name for harmful software. A virus attaches to a file and runs when the file is opened, and it needs a host. A worm is similar but spreads on its own across a network without a user opening a file. A trojan hides inside a useful-looking program and performs secret harmful work. Ransomware locks files or the whole system and demands a payment to release them. Spyware and keyloggers quietly record activity and keystrokes and send them to the attacker, and adware floods the user with unwanted advertisements. Among attacks, phishing uses fake e-mails or websites to steal details, and its forms by SMS and phone call are called smishing and vishing. A denial-of-service attack floods a service so that real users cannot reach it. Identity theft uses another person's personal details, and social engineering simply tricks a person into revealing secrets.
Safety Practices and Cyber Laws
Safe use begins with a strong password that is changed from time to time and never shared, and with two-factor authentication wherever it is offered. Software and the operating system should be updated, an antivirus and a firewall should be kept on, and links and attachments from unknown senders should not be opened. Personal details should not be posted publicly, and public wi-fi should not be used for banking. Data should be backed up, since a backup is the best defence against ransomware. In India the main law is the Information Technology Act, 2000, which was amended in 2008 and deals with offences such as unauthorised access, identity theft, publishing obscene material and cyber terrorism, and it recognises electronic records and digital signatures. The CERT-In is the national agency for responding to cyber security incidents.
Types of Questions Asked
The most common pattern asks which threat matches a given description, such as which malware spreads by itself. The second asks the full form or meaning of a term such as VPN or CERT-In. The third asks the name of the Indian cyber law. The fourth asks a safe practice, such as the rule for a strong password. The fifth asks the difference between two terms, such as a virus and a worm. Direct identification questions take most of the marks.
Steps to Solve a Cyber Security Question
First, read the question and see whether it asks for a threat, a tool, a rule or a law. Second, if it asks for a threat, match the key clue, such as self-spreading for a worm or locked files for ransomware. Third, if it asks for a tool, recall its one-line job, such as a firewall filtering traffic. Fourth, if it asks for a law, remember the Information Technology Act, 2000. Fifth, remove options that belong to a different category. Finally, check the full form word by word, because one wrong word hides the correct answer.
Examination Trends
In Assam recruitment papers malware types, phishing and its forms, encryption, firewall and antivirus, safe practices and the IT Act, 2000 appear most often, followed by terms such as VPN, digital signature, DDoS and identity theft. Questions are short and single fact based, so steady revision is enough. The same definitions repeat with small changes, which makes this section quick to secure.
Common Mistakes to Avoid
- Do not confuse a virus with a worm; a worm spreads on its own.
- Do not confuse a trojan with a virus; a trojan hides inside a useful program.
- Do not call a firewall an antivirus; both protect, but in different ways.
- Do not confuse encryption with decryption, since one locks and the other unlocks.
- Do not forget that the Indian cyber law is the IT Act, 2000.
- Do not mix phishing, smishing and vishing; they are e-mail, SMS and voice.
How to Prepare This Topic
Make a table of the malware types with their one-line definition and one clue that gives each away. Next write the common attacks, such as phishing and denial of service, with one example each. Then list the safe practices, including strong passwords, updating software and using a firewall and antivirus. Finally, write the key points of the IT Act, 2000 and the role of CERT-In.
Attempt twenty questions a day and keep a register of the definitions and full forms you got wrong, because the same items recur. Revise the difference between a virus and a worm, and between a firewall and an antivirus, aloud, since these are the most common traps. In the last week revise only the tables and the register, and the section will be ready.
Quick Revision Tips
- A virus needs a host; a worm spreads on its own.
- A trojan hides, ransomware locks, spyware watches.
- Phishing is e-mail, smishing is SMS, vishing is voice.
- Encryption locks data into cipher text; decryption unlocks it.
- The Indian cyber law is the Information Technology Act, 2000.
Final Revision Note
On the last day, revise the malware table, the safe practices and the IT Act points, then attempt a timed set of twenty questions. For every wrong answer, write the exact term that was missed. Cyber security questions reward clear definitions, and a candidate who has them answers fast and gains easy marks.
Frequently Asked Questions
What is the difference between a virus and a worm?
A virus attaches to a file and spreads when the file is opened, while a worm spreads by itself across a network without user action.
What is phishing?
Phishing is tricking a user into revealing personal details through fake e-mails, messages or websites.
What is the main cyber law of India?
The Information Technology Act, 2000, amended in 2008, is the main cyber law of India.
What is the job of a firewall?
A firewall monitors and filters the traffic entering or leaving a network to block unauthorised access.
What is ransomware?
Ransomware is malware that locks a user's files or system and demands a payment to unlock them.