1. In the context of cybersecurity, "Phishing" refers to:
Malicious software that encrypts data.
Overloading a server with traffic.
Fraudulent attempts to obtain sensitive information (like passwords) by disguising as a trustworthy entity.
Physical theft of hardware.
Explanation:
Phishing typically uses spoofed emails or fake websites to trick users into revealing credentials. It is a "Social Engineering" attack.
2. Two-Factor Authentication (2FA) requires a user to provide two out of three types of credentials. Which is NOT one of them?
Something you are (Biometrics)
Something you have (Card/Phone)
Something you want (Desire)
Something you know (Password/PIN)
Explanation:
2FA combines: 1. Knowledge (PIN/Password), 2. Possession (Card/Token/Phone), 3. Inherence (Fingerprint/Iris). "Desire" is not an authentication factor.
3. A "Trojan Horse" in computer security is:
A firewall setting.
A hardware device to boost speed.
A type of antivirus.
A malicious program disguised as legitimate software.
Explanation:
Like the mythical wooden horse, a Trojan appears useful/harmless to trick the user into installing it, after which it executes malicious code (stealing data, creating backdoors).
4. What is the main difference between Symmetric and Asymmetric Encryption?
Symmetric uses one key for both encryption and decryption; Asymmetric uses a public-private key pair.
Symmetric is slower than Asymmetric.
Symmetric uses no keys.
Asymmetric is less secure.
Explanation:
Asymmetric encryption (Public Key Infrastructure) is crucial for digital banking security (like SSL/TLS) because it allows secure exchange of data without sharing the private secret key.
5. How does "Pharming" differ from "Phishing"?
Phishing involves voice calls; Pharming involves SMS.
Pharming attacks servers; Phishing attacks ATMs.
Phishing lures victims to fake sites via email; Pharming redirects users to fake sites via DNS poisoning (even if they type the correct URL).
There is no difference.
Explanation:
Pharming is more dangerous because it manipulates the DNS (Domain Name System) server or the user's host file. Even if the user types the correct website address (e.g., www.bank.com), they are redirected to a fraudulent site without clicking any suspicious link, making it harder to detect than Phishing.
6. A "Distributed Denial of Service" (DDoS) attack differs from a simple DoS attack because:
It uses a single computer to launch the attack.
It targets multiple servers at once.
It uses a network of multiple infected computers (Botnet) to flood the target from many sources.
It physically destroys the server.
Explanation:
In a DDoS attack, the traffic comes from hundreds or thousands of sources (zombie computers/bots), making it nearly impossible to stop the attack simply by blocking a single IP address. This makes DDoS much more destructive and harder to mitigate than simple DoS.
7. The "Zero Trust" security model in banking IT infrastructure is based on the principle:
Trust but verify.
Trust internal employees, verify external users.
Never trust, always verify.
Trust devices, verify users.
Explanation:
Zero Trust assumes that threats exist both inside and outside the network. It requires strict identity verification for every person and device trying to access resources, regardless of whether they are sitting within the network perimeter or outside.
8. Which type of malware restricts access to a computer system (encrypts files) and demands payment to remove the restriction?
Spyware
Adware
Ransomware
Worm
Explanation:
Ransomware (like WannaCry) encrypts the user's data and demands a ransom (usually in crypto) for the decryption key. It is a major threat to banking data availability.
9. Which standard is used to secure credit/debit card data during transmission and storage?
PCI-DSS
ISO 9001
Basel III
IFRS 9
Explanation:
Payment Card Industry Data Security Standard (PCI-DSS) is a set of security standards designed to ensure that all companies that accept, process, store or transmit credit card information maintain a secure environment.
10. In biometric authentication, what does "False Acceptance Rate" (FAR) refer to?
The speed of biometric matching.
The rate at which an authorized user is rejected.
The rate at which an unauthorized user is incorrectly accepted/verified.
The rate at which the system fails to scan.
Explanation:
FAR is a critical security metric. It measures the likelihood that the biometric security system will incorrectly accept an access attempt by an unauthorized user. In high-security banking applications (like vaults or server rooms), the system is tuned to have an extremely low FAR, even if it means a slightly higher False Rejection Rate (FRR).
11. "Vishing" is a form of social engineering attack where:
Attackers physically steal ATM cards.
Attackers use telephone calls (Voice) to trick users into revealing personal financial details.
Attackers send SMS with malicious links.
Attackers redirect web traffic to fake sites.
Explanation:
Vishing stands for "Voice Phishing." Criminals pose as bank officials, RBI agents, or tech support over a phone call to create a sense of urgency (e.g., "Your card is blocked") and manipulate victims into sharing OTPs, PINs, or passwords. Smishing involves SMS; Phishing involves Email.
12. In network security, what is the purpose of a "Honeypot"?
To act as a decoy system to attract and trap cyber attackers to study their behavior.
To store sweet deals for customers.
To encrypt passwords.
To speed up the server.
Explanation:
A Honeypot is a security mechanism set up to detect, deflect, or counteract attempts at unauthorized use of information systems. It consists of a computer, data, or network site that appears to be part of a network, but is actually isolated and monitored, looking like a valuable target to hackers.
13. An Information Systems (IS) Audit distinguishes between "System Audit" and "Process Audit". What does a Process Audit focus on?
Technical configuration of firewalls.
Validating that the business procedures and controls (SOPs) around the IT system are being followed by staff.
Testing the battery life of UPS.
Checking the source code of the software.
Explanation:
A System Audit looks at the technical aspects (hardware, software, security settings). A Process Audit looks at the human/operational aspect—whether users are following the Standard Operating Procedures (SOPs), like password hygiene, maker-checker discipline, and authorization workflows.
14. The RSA algorithm is a classic example of which type of encryption?
Hashing Algorithm
Symmetric Key Encryption
Asymmetric (Public Key) Encryption
Data Masking
Explanation:
RSA (Rivest–Shamir–Adleman) is the most widely used Asymmetric Encryption algorithm. It uses two different keys: a Public Key to encrypt data and a Private Key to decrypt it. This is the foundation of secure internet communication (SSL/TLS).
15. Data Loss Prevention (DLP) solutions are deployed by banks primarily to:
Scan for viruses.
Speed up internet access.
Block spam emails.
Detect and prevent unauthorized transmission of sensitive data (like customer credit card info) outside the corporate network.
Explanation:
DLP tools monitor data in motion (network traffic), data at rest (storage), and data in use (endpoints) to ensure that sensitive/confidential data is not leaked, emailed, or uploaded to unauthorized external locations.
16. What is the primary objective of "Penetration Testing" (Pen Testing) in banking security?
To check the speed of the network.
To install antivirus software.
To simulate a cyber-attack on the system to find exploitable vulnerabilities before hackers do.
To monitor employee internet usage.
Explanation:
Vulnerability Assessment and Penetration Testing (VAPT) is a proactive security measure. While Vulnerability Assessment identifies potential weak points, Penetration Testing goes a step further by actively trying to exploit them to see how deep an attacker can get into the system, helping banks patch holes before real attacks occur.
17. In digital security, "Non-Repudiation" ensures that:
The system never fails.
The message is encrypted.
The sender cannot deny having sent the message/transaction.
The receiver cannot read the message.
Explanation:
Non-repudiation provides proof of the origin and integrity of data. Digital Signatures provide non-repudiation because only the sender has the private key to sign it; thus, they cannot later claim they didn't send it.
18. A "Keylogger" is a type of spyware that:
Locks the keyboard physically.
Records every keystroke made by the user to steal passwords and credit card numbers.
Encrypts keys.
Logs the user out of the system.
Explanation:
Keyloggers run silently in the background, capturing everything typed on the keyboard. This is a common method used to steal Netbanking login credentials.
19. "Pretexting" is a social engineering technique where the attacker:
Creates a fabricated scenario (a pretext) to gain the victim's trust and obtain information.
Sends a virus via email.
Hacks the Wi-Fi.
Guesses the password.
Explanation:
In Pretexting, the attacker impersonates someone else in authority (e.g., "I am calling from the Bank's Fraud Dept") to manipulate the victim into divulging sensitive data like OTPs.
20. Which of the following is an example of "Inherence" factor in Multi-Factor Authentication (MFA)?
Password
Smart Card
Fingerprint or Retina Scan
OTP sent to mobile
Explanation:
Inherence refers to something the user "is" (Biometrics). Password is "Knowledge" (something you know). OTP/Card is "Possession" (something you have).
21. "Spear Phishing" is a targeted attack where:
The network is flooded with data.
Fraudulent emails are customized and sent to a specific individual or organization to make them look highly credible.
Emails are sent to millions of random users.
Hackers attack with spears.
Explanation:
Unlike generic phishing (casting a wide net), Spear Phishing targets specific victims using personalized information (name, role) to increase the success rate of the deception.
22. The "Lock Icon" in the browser address bar indicates that the connection is secured using:
Java
SSL/TLS Encryption
HTTP
HTML
Explanation:
SSL (Secure Sockets Layer) or its successor TLS (Transport Layer Security) encrypts the link between the web server and the browser, ensuring privacy and data integrity. It turns HTTP into HTTPS.