Cyber Security
🔒 Log in to trackMalware families (virus, worm, trojan, ransomware), social-engineering attacks (phishing and cousins), preventive measures, and IT Act 2000 sections with CERT-In. Statement-based malware questions appear in nearly every CKT shift.
One page per subtopic: detailed notes, every question type, formulas, tricks and practice sets.
Every formula on one printable page, grouped by subtopic.
4 exam-level questions worked step by step.
69 questions — untimed practice or a timed test with analysis.
Track record in the exam
Test difficulty mix (69 questions)
Question patterns exams keep repeating
Taken from previous-year papers. If a pattern is marked "very common", expect to see it in your exam.
Name the malware
very common"A program that copies itself on its own is called ___"
Needs a host file = virus. Spreads alone = worm.
Looks useful but harmful = trojan. Locks files for money = ransomware.
Which malware spreads by itself through a network without a host file?
Virus needs a host file to travel
Worm does not need any host
It crawls through the network alone
Answer: Worm
Phishing type by channel
very commonA fraud by e-mail, call or SMS, and the attack name is asked.
E-mail = phishing. Phone call = vishing. SMS = smishing.
Correct web address but fake site = pharming.
An SMS says your account will be blocked and asks you to enter your bank password on a link. This is:
The message came by SMS
Fraud by SMS has its own name
Phishing by e-mail, vishing by call
Answer: Smishing
What a security tool does
common"Which of these is a job of a firewall / antivirus / encryption?"
Firewall filters network traffic by rules.
Antivirus scans and removes malware. Encryption scrambles data.
What does a firewall do?
It sits at the doorway of the network
It allows or blocks traffic by rules
It does not scan or clean files (antivirus does that)
Answer: Filters network traffic
IT Act sections
common"Identity theft is punished under which section?"
Learn: 66 hacking, 66C identity theft, 66D online cheating.
Section 66A was struck down in 2015.
Identity theft (misusing another person's password or digital signature) falls under which section of the IT Act?
Section 66 = hacking
Section 66D = cheating online
Misusing a password or signature = identity theft
Answer: Section 66C
Name the attack from the story
commonA short story (tiny thefts, waiting code, flooded server) and the attack name is asked.
Salami = many tiny thefts. Logic bomb = code that waits for a trigger.
DoS = flooding a server. SQL injection = commands typed into a form.
A harmful program stays hidden in a bank system until 1 April and then deletes all records. This is a:
It stays hidden and waits
It acts only on a trigger (the date)
That is the mark of a logic bomb
Answer: Logic bomb
Encryption and passwords
common"Scrambled data is called ___" or "the padlock in the browser means ___".
Plaintext = readable. Ciphertext = scrambled.
https + padlock = encrypted connection.
The padlock icon next to https:// in a browser shows that:
https means the connection uses encryption
Data travels as unreadable ciphertext
Outsiders cannot read it on the way
Answer: The connection is encrypted