Cyber Security & Safe Browsing Habits: 100 Questions & Answers

Cyber Security Concepts, Malware Types (Viruses, Worms, Trojans, Ransomware), Network & Web Security, Safe Browsing Practices, Data Privacy, aur Cyber Laws

Part 1: Cyber Security Basics, Threat Landscape & Malware Types (25 Questions)

  1. Question: Cyber Security kya hai aur iska primary goal kya hota hai? Answer: Internet se jude systems, networks, devices aur data ko unauthorized access, cyber attacks, aur damage se surakshit rakhna.

  2. Question: Information Security ka CIA Triad kya hota hai? Answer: CIA = Confidentiality (Gopniyata), Integrity (Pavitrata/Data Sahi Hona), aur Availability (Upalabdhta).

  3. Question: Malware ka full form kya hai aur iska kya matlab hota hai? Answer: Malicious Software; aisa koi bhi program ya code jo computer, network, ya user ko nuksan pahunchane ke irade se banaya gaya ho.

  4. Question: Computer Virus kya hota hai aur yeh kaise failta hai? Answer: Ek malicious code jo kisi host file/program se attach hota hai aur jab user us program ko execute karta hai, tab yeh self-replicate karke doosri files ko infect karta hai.

  5. Question: Computer Virus aur Computer Worm mein kya mukhya antar hai? Answer: Virus ko failne ke liye host file aur human action (click/execute) ki zaroorat hoti hai; Worm bina kisi host file ya human intervention ke self-replicate karke network par khud failta hai.

  6. Question: Trojan Horse malware kya hota hai? Answer: Ek aisa malicious program jo dekhne mein legitimate/useful software (jaise utility app ya game) lagta hai, lekin background mein hacker ko system ka unauthorized access deta hai.

  7. Question: Ransomware attack kya hota hai aur iska mukhya uddeshya kya hai? Answer: Malware jo user ke system ya files ko encrypt (lock) kar deta hai aur unhe unlock karne ke liye paise (ransom) ki maang karta hai.

  8. Question: Famous Ransomware attacks ke 2 udaharan dein? Answer: WannaCry aur Petya / NotPetya.

  9. Question: Spyware kya hai aur iska ek example kaun sa hai? Answer: Program jo user ki jankari (browsing activity, passwords, personal data) bina uski ijazat ke chupke se track karta hai (Example: Keylogger).

  10. Question: Keylogger (Keystroke Logger) kaise kaam karta hai? Answer: User dwara hardware keyboard par type kiye gaye har ek button/keystroke (passwords, PINs) ko record karke hacker ko bhejta hai.

  11. Question: Adware kya hota hai? Answer: Software jo automatically user ki screen par unwanted advertisements, pop-ups, ya banners display karta hai (kabhi-kabhi unwanted tracking ke sath).

  12. Question: Rootkit malware ka kya kaam hai? Answer: Operating System ke deep level (root) par chhup kar hacker ko administrator-level access dena aur antivirus detection se bachna.

  13. Question: Botnet aur Zombie Computers kya hote hain? Answer: Malware se infected computers ka ek jhund (network) jise hacker remote control karke mass cyber attacks (jaise DDoS) ke liye use karta hai.

  14. Question: Logic Bomb malware kab trigger hota hai? Answer: Jab kisi specific condition match hoti hai (jaise ek specific Date/Time par ya kisi user ke system se delete hone par).

  15. Question: Scareware kya hota hai? Answer: Fake security warning pop-ups (jaise "Your PC is Infected!") dikha kar user ko darr me daalna taaki woh fake antivirus khareede ya malware download karein.

  16. Question: Zero-Day Vulnerability / Attack kya hai? Answer: Software mein paayi jaane wali wahi kamzori (flaw) jiska abhi tak vendor ko pata na ho aur jiska koi security patch/update abhi tak release na hua ho.

  17. Question: Fileless Malware kya hota hai? Answer: Aisa malware jo hard drive par koi file save kiye bina seedhe RAM (system memory) mein execute hota hai aur legitimate tools (jaise PowerShell) ka use karta hai.

  18. Question: Backdoor / Trapdoor ka cyber security mein kya matlab hai? Answer: System mein banaya gaya ek secret bypass path jo standard authentication mechanisms ko skip karke unauthorized remote access deta hai.

  19. Question: Cryptojacking / Crypto-mining malware kya karta hai? Answer: Victim ke computer processing power (CPU/GPU) ka bina permission use karke cryptocurrency (jaise Bitcoin, Monero) mine karna.

  20. Question: Malvertising kya hai? Answer: Legitimate online advertising networks par malicious ads insert karna jo click karne par malware download karwa dete hain.

  21. Question: Polymorphic Virus ki kya khasiyat hoti hai? Answer: Yeh har baar infect karte waqt apna underlying code aur signature badal leta hai taaki traditional signature-based Antivirus ise pakad na sake.

  22. Question: Macro Virus kin files ke zariye failta hai? Answer: Microsoft Office (Word, Excel) ya LibreOffice documents ke andar embedded Macros (VBA scripts) ke zariye.

  23. Question: Boot Sector Virus system ko kaise prabhavit karta hai? Answer: Hard disk ke Master Boot Record (MBR) ko infect karta hai jisse system boot up hote hi virus active ho jata hai.

  24. Question: RAT ka full form cyber security mein kya hota hai? Answer: Remote Access Trojan (jo hacker ko remote PC ka full control jaise webcam access, screen view deta hai).

  25. Question: Drive-by Download ka kya matlab hota hai? Answer: Compromised/fake website visit karte hi bina kisi click ke background mein automatically malware download ho jana.

Part 2: Network & Web Security, Authentication & Cryptography Basics (25 Questions)

  1. Question: Network Firewall ka primary function kya hota hai? Answer: Incoming aur Outgoing network traffic ko predefined security rules ke aadhar par monitor aur filter karna (Unauthorized access ko rokna).

  2. Question: Hardware Firewall aur Software Firewall mein kya antar hai? Answer: Hardware Firewall physical device hai jo network gateway par sthit hota hai; Software Firewall individual operating system par install hone wala application hota hai.

  3. Question: Antivirus Software kaise kaam karta hai (Signature-based vs Heuristic Detection)? Answer: Signature-based = Known virus signatures ke database se match karta hai; Heuristic = Suspicious behavior aur patterns ke aadhar par naye unknown threats ko identify karta hai.

  4. Question: Cryptography mein Encryption aur Decryption kya hote hain? Answer: Encryption = Plain text (readable data) ko Ciphertext (secret code) mein convert karna; Decryption = Ciphertext ko dobara Plain text mein convert karna.

  5. Question: Symmetric Encryption aur Asymmetric Encryption mein kya fark hai? Answer: Symmetric mein Encryption aur Decryption dono ke liye same single key use hoti hai; Asymmetric mein Public Key (encryption) aur Private Key (decryption) ki pair use hoti hai.

  6. Question: SSL / TLS Protocol ka web communications mein kya role hai? Answer: Web Browser aur Web Server ke beech hone wale data flow ko Encrypt karke secure connection ($HTTPS$) banana.

  7. Question: HTTPS mein '$S$' ka kya matlab hota hai aur kaun sa Port use hota hai? Answer: '$S$' = Secure; yeh Port $443$ ka use karta hai (Unencrypted HTTP Port $80$ use karta hai).

  8. Question: Hashing Function (jaise SHA-256, MD5) kya karta hai? Answer: Data ko fixed-length string (Hash Value/Fingerprint) mein convert karta hai jise Reverse (Decrypt) nahi kiya ja sakta; Data Integrity check karne ke liye use hota hai.

  9. Question: VPN (Virtual Private Network) ka primary benefit kya hai? Answer: Internet traffic ko encrypted tunnel ke zariye route karke user ka IP address hide karna aur public networks par secure connection dena.

  10. Question: DoS aur DDoS attack mein kya antar hai? Answer: DoS = Single machine se attack; DDoS (Distributed Denial of Service) = Multiple infected systems (Botnets) se ek saath target server par traffic flood karke use crash kar dena.

  11. Question: Man-in-the-Middle (MITM) Attack kya hota hai? Answer: Hacker do users ya client-server communication ke beech mein chhup kar unke data packets ko intercept, read ya modify karta hai.

  12. Question: DNS Cache Poisoning / Spoofing kya hai? Answer: DNS database mein galat IP enter kar dena taaki jab user legal website (jaise bank.com) khole, toh woh hacker ki fake phishing site par redirect ho jaye.

  13. Question: IP Spoofing ka kya matlab hai? Answer: Data packet ke header mein fake sender IP address lagana taaki identity conceal ki ja sake.

  14. Question: Port Scanning tool (jaise Nmap) ka cybersecurity mein kya upyog hai? Answer: Network par active hosts aur unke open ports/services ki kamzoriyo (vulnerabilities) ko discover karna.

  15. Question: SQL Injection (SQLi) attack web application par kaise hota hai? Answer: Input fields (jaise login box) mein malicious SQL queries insert karke backend database se confidential data chura lena.

  16. Question: Cross-Site Scripting (XSS) attack kya hota hai? Answer: Web application mein malicious client-side JavaScript code inject karna jo doosre users ke browser par run hokar session cookies chura leta hai.

  17. Question: Password Hashing aur Salting kya hoti hai? Answer: Password ko plain text ke bajaye encrypted hash format mein store karna; Salting = Hash karne se pehle random characters (salt) jorna taaki Rainbow Table attacks fill ho jayein.

  18. Question: Multi-Factor Authentication (MFA) security ko kaise badhata hai? Answer: Login ke liye 2 ya usse adhik alag types ke factors mangna — Something you know (Password), Something you have (OTP/Phone), Something you are (Fingerprint).

  19. Question: Zero Trust Security Architecture ka mukhya niyam kya hai? Answer: "Never Trust, Always Verify" — System ke andar ya bahar kisi bhi device/user par by default trust na karna aur har access request ko re-verify karna.

  20. Question: Security Patch / Software Update apply karna kyun critical hota hai? Answer: Software mein dhundhi gayi security vulnerabilities ko fix karne ke liye vendor dwara code patch apply karna.

  21. Question: Honeypot ka network security mein kya role hai? Answer: Ek fake/decoy system jo hackers ko attract karne ke liye banaya jata hai taaki unke attack vectors aur methods ko analyze kiya ja sake.

  22. Question: Penetration Testing (Ethical Hacking) kya hoti hai? Answer: Authorization ke saath system par fake cyber attack karke uski security vulnerabilities aur weaknesses ko pehle hi khojna.

  23. Question: Social Engineering Attacks kis par attack karte hain? Answer: Technical software kamzori par nahi, balki Human Psychology (Insaani darr, lalach, ya trust) par manipualtion karte hain.

  24. Question: DMZ (Demilitarized Zone) network topology mein kya hota hai? Answer: Internal private network aur external public internet ke beech ka subnet jo public-facing services (Web Server, Email Server) ko isolate karta hai.

  25. Question: Intrusion Detection System (IDS) aur Intrusion Prevention System (IPS) mein kya fark hai? Answer: IDS malicious activity ko sirf detect aur alert karta hai; IPS active inline device hai jo malicious traffic ko detect ke saath-saath block bhi kar deta hai.

Part 3: Safe Browsing Habits, Data Privacy & Email/Mobile Security (25 Questions)

  1. Question: Safe Browsing ka basic standard indicator kya hota hai web address bar par? Answer: Address bar par Padlock Icon (Kala symbol) aur URL ki shuruaat https:// se hona.

  2. Question: Phishing Emails ki pehchan karne ke 3 sabse bade Red Flags kya hain? Answer: Sender Address mein misspelling (jaise @paypaal.com), Urgent action/threat mandate, aur Anjaan links/attachments.

  3. Question: Spear Phishing aur Whaling attacks mein kya antar hai? Answer: Spear Phishing = Target specific individual ya employee; Whaling = High-profile executives (CEO, CFO) ko target karne wala specific phishing attack.

  4. Question: Vishing aur Smishing kisse kehte hain? Answer: Vishing = Phone Call dwara fraud (Voice Phishing); Smishing = Fake Text Message (SMS) dwara phishing.

  5. Question: Watering Hole Attack kya hota hai? Answer: Specific target group dwellers dwara frequently visit ki jaane wali popular legitimate website ko pehle infect karna taaki targeted users victim banein.

  6. Question: Typosquatting / URL Hijacking kya hota hai? Answer: Popular websites ke common spelling mistakes vale domain names register karna (jaise g00gle.com ya gogle.com) taaki mistype karne wale users ko fake site par laya ja sake.

  7. Question: Public Wi-Fi Networks (Airports, Cafes) par Net Banking ya confidential work kyun nahi karna chahiye? Answer: Open public Wi-Fi unencrypted hote hain, jahan hacker Packet Sniffing ya Man-in-the-Middle (MITM) attacks dwara aapka clear-text data intercept kar sakta hai.

  8. Question: Rogue Access Point / Evil Twin Attack Wi-Fi mein kya hota hai? Answer: Hacker official public Wi-Fi ke same naam (SSID) se duplicate fake Wi-Fi hotspot setup kar leta hai taaki connected users ka data capture kar sake.

  9. Question: Browser Extensions / Add-ons install karte waqt kya precaution honi chahiye? Answer: Unnecessary ya unverified third-party extensions install na karein kyunki woh full browsing history aur keystrokes read kar sakte hain.

  10. Question: Session Hijacking / Cookie Poisoning kya hoti hai? Answer: User ke login active session token/cookie ko chura kar bina password enter kiye uske account ka unauthorized access lena.

  11. Question: Browser mein Auto-fill Passwords / Saved Credentials option enable rakhna kyun risky hai? Answer: Device physical theft ya malware infection ke case mein unauthorized person saved passwords local browser storage se direct decrypt kar sakta hai.

  12. Question: Incognito Mode / Private Browsing mode ka real truth kya hai? Answer: Yeh sirf local browser mein history aur cookies save nahi karta; yeh aapko Internet Service Provider (ISP), website admins, ya network monitoring se anonymous nahi banata.

  13. Question: Strong Password create karne ka standard guideline kya hai? Answer: Minimum $12-16$ characters length; Uppercase, Lowercase, Numbers, Special Symbols (@, #, $, %) ka combination (Do not use personal names or DOB).

  14. Question: Password Manager Software (jaise Bitwarden, KeePass) ka upyog kyun safe hai? Answer: Har site ke liye unique, complex passwords generate karta hai aur unhe single Master Password dwara encrypted vault mein hold karta hai.

  15. Question: Mobile App Permission Audit ka kya matlab hai? Answer: App install karte waqt unnecessary permissions (jaise Torch app ko Contacts ya Location demand karna) ko Revoke/Deny karna.

  16. Question: Android devices par Sideloading (Third-party .apk install karna) kyun khatarnak hai? Answer: Unofficial source se .apk files mein malicious Trojan payloads ya spyware embedded ho sakte hain jo Google Play Protect verification ko bypass kar dete hain.

  17. Question: Smartphones ko Jailbreak (iOS) ya Root (Android) karne ka cyber security risk kya hai? Answer: OS ki builtin security sandboxing layers disable ho jaati hain jisse malware full device administrator access gain kar sakta hai.

  18. Question: Juice Jacking Attack se bachne ke liye kya karein? Answer: Public USB charging stations par direct USB cable connect karne ke bajaye Power Bank, own AC adapter wall socket, ya "Data Blocker" dongle (USB Condom) ka use karein.

  19. Question: Shoulder Surfing kya hota hai aur isse kaise bachein? Answer: Public space mein kisi person ko screen par PIN, Password ya Pattern type karte waqt chori se dekhna. Keypad ko haath se cover karke isse bachein.

  20. Question: Dumpster Diving in Social Engineering kya hai? Answer: Physical kachre/trash bins se discarded documents, password papers, ya old hard drives dhundhna taaki credentials chura sakein.

  21. Question: Data Backup ka $3-2-1$ Rule kya hai? Answer: Keep 3 total copies of data, store on 2 different media types (e.g., HDD & Cloud), and keep 1 copy offsite (different physical location).

  22. Question: Clean Desk & Clear Screen Policy ka kya matlab hai? Answer: Seat chhodne se pehle screen lock karna (Win + L) aur desk par confidential physical papers ko open na chhodna.

  23. Question: Oversharing on Social Media ke cyber risks kya hain? Answer: Vacation photos ya real-time location tags physical burglary aur targeted social engineering attacks ke liye attackers ko assist karte hain.

  24. Question: Identity Theft kya hoti hai? Answer: Kisi vyakti ka Aadhaar, PAN, SSN, ya credentials chura kar uske naam se illegal transactions, loans ya crimes execute karna.

  25. Question: End-to-End Encryption (E2EE) messaging apps (jaise Signal, WhatsApp) mein kya karti hai? Answer: Message ko sender ke device par encrypt aur recipient ke device par decrypt karti hai — beech mein server provider bhi content read nahi kar sakta.

Part 4: Incident Response, Cyber Laws, Legal Framework & Best Practices (25 Questions)

  1. Question: Cyber Incident Response Lifecycle ke main phases kaun se hain? Answer: Preparation -> Identification -> Containment -> Eradication -> Recovery -> Lessons Learned.

  2. Question: India mein CERT-In ka full form aur role kya hai? Answer: Indian Computer Emergency Response Team; India mein national level cyber security threats ko handle karne aur security alerts issue karne wali Nodal Agency.

  3. Question: IT Act, 2000 ka full form kya hai? Answer: Information Technology Act, 2000 (India ka primary law for cybercrime and e-commerce).

  4. Question: IT Act, 2000 ka Section 66 (Section 66B-F) kis se sambandhit hai? Answer: Hacking, computer system source code tampering, identity theft, aur cyber terrorism par punishment aur fines se.

  5. Question: IT Act, 2000 ka Section 66C aur Section 66D kiske punishment se deal karte hain? Answer: Section 66C = Identity Theft (using password/biometrics of another person); Section 66D = Cheating by personation using computer resource.

  6. Question: IT Act, 2000 ka Section 67 kis topic se related hai? Answer: Electronic format mein obscene (ashleel) ya sexually explicit content publish ya transmit karne par punishment.

  7. Question: DPDP Act 2023 in India ka full form aur purpose kya hai? Answer: Digital Personal Data Protection Act, 2023; citizens ke personal digital data processing aur privacy rights ko legal protection dena.

  8. Question: India mein National Cyber Crime Online Complaint portal kaun sa hai? Answer: cybercrime.gov.in

  9. Question: Financial Cyber Fraud report karne ke liye National Helpline Number kya hai? Answer: Helpline Number: 1930

  10. Question: Financial Cyber Fraud cases mein "Golden Hour" ka kya significance hai? Answer: Fraud hone ke $1-2\text{ hours}$ (Golden Hour) ke andar 1930 par inform karne se stolen money ko inter-bank level par freeze karna aur refund paana sabse high chances hote hain.

  11. Question: Cyber Hygiene ka kya matlab hota hai? Answer: Users dwara daily baseline security practices maintain rakhna (jaise regular OS updates, 2FA, backups, strong passwords).

  12. Question: Cyber Forensics (Digital Forensics) kya hai? Answer: Digital devices se digital evidence collect, preserve, analyze aur court of law mein present karne ki forensic scientific method.

  13. Question: Digital Forensics mein "Chain of Custody" maintain rakhna kyun zaroori hai? Answer: Yeh record rakhna ki digital evidence kab, kiske dwara aur kis tarah handle hua taaki court mein evidence ki authenticity integrity invalidate na ho.

  14. Question: Security Operations Center (SOC) kya hota hai? Answer: Organization ke andar dedicated team/facility jo $24 \times 7$ enterprise networks ko cyber threats ke liye monitor, detect aur respond karti hai.

  15. Question: SIEM (Security Information and Event Management) tools ka kya kaam hota hai? Answer: Network devices, firewalls aur servers se logs aggregate karke real-time correlation dwara threats identify karna.

  16. Question: VAPT ka full form kya hai in enterprise cybersecurity? Answer: Vulnerability Assessment and Penetration Testing.

  17. Question: Phishing Simulation Training ka kya fayda hota hai? Answer: Employees ko fake test phishing emails bhej kar unke awareness level check karna aur security training dena.

  18. Question: Air-gapped System kya hota hai? Answer: Ek aisa computer ya network jo internet ya kisi bhi external network se physically disconnected (isolated) hota hai (High Security Military/Nuclear Systems).

  19. Question: EDR ka full form kya hai? Answer: Endpoint Detection and Response (Advanced tool jo continuous monitoring and response feature endpoint machines par provide karta hai).

  20. Question: DLP (Data Loss Prevention) software ka kaam kya hai? Answer: Sensitive company data (jaise source code, customer records) ko corporate network se bahar unauthorized exfiltrate hone se rokna.

  21. Question: Dark Web, Deep Web aur Surface Web mein kya antar hai? Answer: Surface Web = Search engines dwara indexed web ($4\%$); Deep Web = Password protected unindexed web (banking databases, private emails); Dark Web = Encrypted networks (Tor) jo anonymity par chalte hain.

  22. Question: Tor Browser aur Onion Routing kaise anonymity dete hain? Answer: User ke network traffic ko duniya bhar ke multiple encrypted relays (nodes) ke zariye wrap/route karke IP address hide karta hai.

  23. Question: Corporate Cyber Insurance policy ka kya benefit hai? Answer: Ransomware, data breach recovery costs, aur legal liability financial losses ke against protection.

  24. Question: System Restore / Image Backup ka Ransomware attack mein kya role hai? Answer: Ransomware attack hone par ransom pay karne ke bajaye system ko purani clean backup state par restore karna.

  25. Question: Cyber Security ke 5 Golden Rules summary mein kya hain? Answer:

    1. Complex unique passwords use karein aur 2FA enable rakhein.

    2. Anjaan links aur attachments par click na karein.

    3. Operating system aur apps ko hamesha updated rakhein.

    4. Public Wi-Fi par sensitive data transmit na karein (VPN use karein).

    5. Important data ka regular offline/cloud backup lein.

Posted by

Comments

Post a Comment