Connect the appropriate malware identification methods with respective descriptions :a. Signature-based detection1. Observes the behaviour of a file in a virtual environment to determine if it is a potential threat.b. Sandbox detection2. Continuously compares a suspected program's source code with known viruses in a database.c. Data mining techniques3. Uses a database called Virus Definition File (VDF) to detect known malware and requires regular updates.d. Heuristics4. Monitors the behaviour of applications during execution to detect dormant or activated malware.e. Real-time protection5. Utilizes techniques to classify the behaviour of a file as benign or malicious.Choose the most appropriate option from below :

The correct matching is a-3, b-1, c-5, d-2, e-4.Signature-based detection checks files against a database of known malware signatures, the Virus Definition File, which needs regular updates (3).Sandbox detection runs a suspicious file in an isolated virtual environment and watches its behaviour (1).Data mining techniques classify a file's behaviour as benign or malicious (5).Heuristics examine a suspected program's code and compare it with code from known viruses (2).Real-time protection monitors applications while they run (4).Signature-3 and sandbox-1 occur together in only one option.

Computer Security Questions and Answers

Q: The purpose of a cyber criminal spreading viruses and other malwares is to :

The purpose is to steal private and confidential data for blackmailing and extortion.Malware such as viruses, spyware and ransomware is spread to gain unauthorised access to systems, copy or lock data, and then use it for fraud, blackmail or ransom demands.The other options describe what security professionals do, not criminals. Improving system security and fixing vulnerabilities are the work of defenders, and helping organisations recover lost data is the job of backup and recovery services. A cyber criminal exploits vulnerabilities rather than fixing them.

Q: _______ is another term for antivirus software.

Another term for antivirus software is Anti-Malware.Malware is the umbrella term for malicious software: viruses, worms, Trojans, spyware, ransomware and so on. Modern antivirus programs detect and remove all of these, so the two names are used interchangeably.'Malware detection program' describes only one function, detection, and not removal. A spyware eliminator deals with one kind of malware only. Network protection software, such as a firewall, controls network traffic rather than scanning for and removing malicious programs.

Q: ______ can be a malware or a hardware.

The answer is keyloggers.A keylogger records every key pressed on a keyboard, capturing passwords and other private data. It can be software, a malicious program running in the background, or hardware, a small device plugged in between the keyboard and the computer.A virus, a Trojan and adware are always software. A virus attaches itself to files and spreads, a Trojan disguises itself as a useful program, and adware pushes unwanted advertisements; none of them exists as a physical device.

Q: What is true for worms and viruses? (Choose the most appropriate option from below)

The keyed answer is Only worms propagate via the network.A worm is a standalone program that copies itself from computer to computer across a network on its own, using security holes, with no host file and no user action. A virus has no such ability: it attaches to a host file or program and spreads only when that file is run or shared, for instance as an email attachment.The other options are false. Worms do not need a host application. Viruses cannot replicate without human action such as opening an infected file. And worms spread without anyone executing infected files. The keyed option is the only one left, read as self-propagation across a network.

Q: Which hacker exploits system flaws for personal gain? (Choose the most appropriate option from below)

The hacker who exploits flaws for personal gain is a black hat hacker.Black hat hackers break into systems without permission and use what they find for profit, theft or damage.A white hat hacker, also called an ethical hacker, tests systems with the owner's permission and reports the weaknesses so they can be fixed. A grey hat hacker sits in between: they may probe a system without permission, but usually disclose what they find rather than exploit it for gain. That leaves black hat as the only option describing exploitation for personal benefit.

Q: Junk email is also called

Junk email is called spam.Spam is unsolicited bulk email, usually advertising or fraud, sent to large numbers of recipients who never asked for it. Email programs move it to a junk or spam folder.Spoofing is forging the sender's address so that a message appears to come from someone else; it is a technique, not a name for junk mail. Spool (spooling) is the queuing of jobs, such as print jobs, for a device. A sniffer is a program that captures network traffic.

Q: Which of the following Act is related to cyber related crimes ?

The Act is the IT Act.The Information Technology Act, 2000 is India's main law on cyber crime and electronic commerce. It gives legal recognition to electronic records and digital signatures, and it defines offences such as hacking and damage to computer systems, identity theft, and publishing obscene material electronically. It was substantially amended in 2008.India has no statute called the 'Cyber Act' or the 'Computer Act', so those options are not real laws.

Q: Which firewall feature can be used to restrict access to specific websites or content categories ?

The feature is Content filtering.Content (or web) filtering blocks access to particular websites, URLs or whole categories of content, such as social media or gambling, according to the organisation's policy.An intrusion detection system watches traffic for signs of attack and raises alerts. VPN support creates encrypted tunnels for remote users. Deep packet inspection examines the contents of packets and can be used inside a filter, but the firewall feature that restricts sites and categories is content filtering.

Q: What is the term for a firewall configuration that allows traffic from specific IP addresses or ranges and denies all other traffic ?

The term is White-listing.A whitelist (allow list) names the IP addresses or ranges that are permitted; everything not on the list is denied by default. It is the stricter approach, used for example to let only office networks reach an administration server.Black-listing is the reverse, blocking listed addresses and allowing all others. An 'open policy' allows traffic generally, and 'closed policy' is not the standard name for a configuration built from a list of permitted addresses.

21.

The purpose of a cyber criminal spreading viruses and other malwares is to :

A.improve system security
B.steal private and confidential data for blackmailing and extortion
C.fix system vulnerabilities
D.help organizations recover lost data

Exam Year(s)

RSMSSB - 2025, Rajasthan Nursing Tutor - 2025,

Answer: B

The purpose is to steal private and confidential data for blackmailing and extortion.

Malware such as viruses, spyware and ransomware is spread to gain unauthorised access to systems, copy or lock data, and then use it for fraud, blackmail or ransom demands.

The other options describe what security professionals do, not criminals. Improving system security and fixing vulnerabilities are the work of defenders, and helping organisations recover lost data is the job of backup and recovery services. A cyber criminal exploits vulnerabilities rather than fixing them.

Discuss in Forum

22.

_______ is another term for antivirus software.

A.Anti-Malware
B.Malware detection program
C.Spyware eliminater
D.Network protection software

Exam Year(s)

RSMSSB - 2025, NHM Rajasthan Pharmacist - 2025, Rajasthan NHM Pharma Assistant - 2025,

Answer: A

Another term for antivirus software is Anti-Malware.

Malware is the umbrella term for malicious software: viruses, worms, Trojans, spyware, ransomware and so on. Modern antivirus programs detect and remove all of these, so the two names are used interchangeably.

'Malware detection program' describes only one function, detection, and not removal. A spyware eliminator deals with one kind of malware only. Network protection software, such as a firewall, controls network traffic rather than scanning for and removing malicious programs.

Discuss in Forum

23.

______ can be a malware or a hardware.

A.Keyloggers
B.Virus
C.Trojan
D.Adware

Exam Year(s)

RSMSSB - 2025, Rajasthan ANM - 2025,

Answer: A

The answer is keyloggers.

A keylogger records every key pressed on a keyboard, capturing passwords and other private data. It can be software, a malicious program running in the background, or hardware, a small device plugged in between the keyboard and the computer.

A virus, a Trojan and adware are always software. A virus attaches itself to files and spreads, a Trojan disguises itself as a useful program, and adware pushes unwanted advertisements; none of them exists as a physical device.

Discuss in Forum

24.

What is true for worms and viruses? (Choose the most appropriate option from below)

A.Only worms propagate via the network.
B.Both need a host application to replicate.
C.Both can replicate autonomously without human intervention.
D.Both disseminate by executing infected files.

Exam Year(s)

RSMSSB - 2025, Rajasthan ANM - 2025,

Answer: A

The keyed answer is Only worms propagate via the network.

A worm is a standalone program that copies itself from computer to computer across a network on its own, using security holes, with no host file and no user action. A virus has no such ability: it attaches to a host file or program and spreads only when that file is run or shared, for instance as an email attachment.

The other options are false. Worms do not need a host application. Viruses cannot replicate without human action such as opening an infected file. And worms spread without anyone executing infected files. The keyed option is the only one left, read as self-propagation across a network.

Discuss in Forum

25.

Connect the appropriate malware identification methods with respective descriptions :

a. Signature-based detection	1. Observes the behaviour of a file in a virtual environment to determine if it is a potential threat.
b. Sandbox detection	2. Continuously compares a suspected program's source code with known viruses in a database.
c. Data mining techniques	3. Uses a database called Virus Definition File (VDF) to detect known malware and requires regular updates.
d. Heuristics	4. Monitors the behaviour of applications during execution to detect dormant or activated malware.
e. Real-time protection	5. Utilizes techniques to classify the behaviour of a file as benign or malicious.

Choose the most appropriate option from below :

A.a-4, b-1, c-2, d-5, e-3
B.a-1, b-4, c-2, d-3, e-5
C.a-3, b-1, c-5, d-2, e-4
D.a-5, b-3, c-1, d-4, e-2

Exam Year(s)

RSMSSB - 2025, Rajasthan ANM - 2025,

Answer: C

The correct matching is a-3, b-1, c-5, d-2, e-4.

Signature-based detection checks files against a database of known malware signatures, the Virus Definition File, which needs regular updates (3).
Sandbox detection runs a suspicious file in an isolated virtual environment and watches its behaviour (1).
Data mining techniques classify a file's behaviour as benign or malicious (5).
Heuristics examine a suspected program's code and compare it with code from known viruses (2).
Real-time protection monitors applications while they run (4).

Signature-3 and sandbox-1 occur together in only one option.

Discuss in Forum

26.

Which hacker exploits system flaws for personal gain? (Choose the most appropriate option from below)

A.White hat hacker
B.Grey hat hacker
C.Black hat hacker
D.Ethical hacker

Exam Year(s)

RSMSSB - 2025, RSMSSB Lab Technician - 2025,

Answer: C

The hacker who exploits flaws for personal gain is a black hat hacker.

Black hat hackers break into systems without permission and use what they find for profit, theft or damage.

A white hat hacker, also called an ethical hacker, tests systems with the owner's permission and reports the weaknesses so they can be fixed. A grey hat hacker sits in between: they may probe a system without permission, but usually disclose what they find rather than exploit it for gain. That leaves black hat as the only option describing exploitation for personal benefit.

Discuss in Forum

27.

Junk email is also called

A.spam
B.spoof
C.Spool
D.Sniffer script

Exam Year(s)

Tripura Public Service Commission - 2022,

Answer: A

Junk email is called spam.

Spam is unsolicited bulk email, usually advertising or fraud, sent to large numbers of recipients who never asked for it. Email programs move it to a junk or spam folder.

Spoofing is forging the sender's address so that a message appears to come from someone else; it is a technique, not a name for junk mail. Spool (spooling) is the queuing of jobs, such as print jobs, for a device. A sniffer is a program that captures network traffic.

Discuss in Forum

28.

Which of the following Act is related to cyber related crimes ?

A.Cyber Act
B.Computer Act
C.IT Act
D.None of these

Exam Year(s)

Tripura Public Service Commission - 2021,

Answer: C

The Act is the IT Act.

The Information Technology Act, 2000 is India's main law on cyber crime and electronic commerce. It gives legal recognition to electronic records and digital signatures, and it defines offences such as hacking and damage to computer systems, identity theft, and publishing obscene material electronically. It was substantially amended in 2008.

India has no statute called the 'Cyber Act' or the 'Computer Act', so those options are not real laws.

Discuss in Forum

29.

Which firewall feature can be used to restrict access to specific websites or content categories ?

A.Intrusion Detection System (IDS)
B.Virtual Private Network (VPN) support
C.Deep Packet Inspection (DPI)
D.Content filtering

Exam Year(s)

Tripura Public Service Commission - 2026,

Answer: D

The feature is Content filtering.

Content (or web) filtering blocks access to particular websites, URLs or whole categories of content, such as social media or gambling, according to the organisation's policy.

An intrusion detection system watches traffic for signs of attack and raises alerts. VPN support creates encrypted tunnels for remote users. Deep packet inspection examines the contents of packets and can be used inside a filter, but the firewall feature that restricts sites and categories is content filtering.

Discuss in Forum

30.

What is the term for a firewall configuration that allows traffic from specific IP addresses or ranges and denies all other traffic ?

A.White-listing
B.Black-listing
C.Open policy
D.Closed policy.

Exam Year(s)

Tripura Public Service Commission - 2026,

Answer: A

The term is White-listing.

A whitelist (allow list) names the IP addresses or ranges that are permitted; everything not on the list is denied by default. It is the stricter approach, used for example to let only office networks reach an administration server.

Black-listing is the reverse, blocking listed addresses and allowing all others. An 'open policy' allows traffic generally, and 'closed policy' is not the standard name for a configuration built from a list of permitted addresses.

Discuss in Forum

Loading…

Topics

Other Subjects

Tags: Computer Security Questions and Answers || Computer Security MCQ Questions and Answers || Computer Security GK Questions and Answers || Computer Security GK MCQ Questions || Computer Security Multiple Choice Questions and Answers || Computer Security GK || GK on Computer Security || Computer Awareness Questions and Answers || Computer Awareness MCQ Questions and Answers || Computer Awareness GK Questions and Answers || GK on Computer Awareness

Computer Security Questions and Answers

Topics

Other Subjects

About Us

Stay informed about all important Dates & Notifications