Cyber security is the practice of protecting computers, networks, programs, and data from digital attacks, unauthorized access, and damage. Think of it as the lock-and-alarm system for your digital life — just as a police constable protects physical property, cyber security tools and laws protect digital assets.
Here is the analogy that makes this stick: your house has a main door (network firewall), a safe (encryption), a security camera (antivirus/monitoring software), and a legal framework (IT Act) to punish intruders. Cyber security operates on exactly the same logic — prevention, detection, and prosecution.
For UP Police Constable GK, this topic is not about writing code or setting up servers. The exam tests whether you can identify the correct name for a type of attack, know which agency handles cyber security in India, and distinguish one type of digital threat from another. The question style is definitional — "X means ___" or "Which institution handles ___?"
The landscape of cybercrime breaks into roughly two buckets:
Crimes against individuals — where a specific person is targeted. Cyberstalking, cyberbullying, identity theft, phishing, and image phishing fall here. The attacker wants something personal — your money, your credentials, your peace of mind.
Crimes against systems/organizations — where the target is a network, website, or institution. Hacking, web hijacking, ransomware, malware attacks, botnets, and DDoS attacks fall here. The attacker wants control, money (ransom), or disruption.
The key legal framework in India is the Information Technology Act, 2000 (IT Act), amended in 2008. It defines cybercrimes, sets penalties, and gives investigating agencies their powers. The nodal agency for cyber incident response in India is CERT-In (Computer Emergency Response Team — India), operating under the Ministry of Electronics and Information Technology (MeitY).
The UP Police Constable paper tests these as single-sentence definitions. Read each one, close your eyes, repeat it.
Malware — Malicious software designed to damage, disrupt, or gain unauthorized access to a system. It is the parent category. Viruses, worms, trojans, spyware, ransomware — all are types of malware. When a computer system or network gets infected with a computer virus, it is called a malware attack.
Ransomware — A specific malware that encrypts the victim's files, then demands a ransom payment in exchange for the decryption key. The attacker locks your data and says "pay us or lose everything." High-profile examples include WannaCry (2017) and Petya attacks on global systems.
Phishing — An attack where the criminal sends fraudulent emails or messages that appear to come from a legitimate source (bank, government agency, employer) to trick users into revealing passwords, credit card numbers, or other sensitive data. The name comes from "fishing" — you cast a fake bait and wait.
Spear Phishing — A targeted version of phishing. Instead of sending the same fake email to millions of random people, the attacker researches a specific individual or organization and crafts a personalized message. The goal is to compromise the security of the organization the target works for. Much more dangerous than generic phishing because it is harder to detect.
Image Phishing — A phishing variant where malicious files are hidden inside image files (.jpg, .png). When the victim opens the image, the malicious code executes — stealing credentials or infecting the computer. The trap is that most people trust image files more than executable files.
Smishing — Phishing conducted via SMS (text messages). "Smishing" = SMS + Phishing.
Vishing — Phishing conducted via voice calls. "Vishing" = Voice + Phishing.
Cyberstalking — Using the internet to harass or stalk a person through repeated messages, emails, and online communications. The key element is repetition and harassment directed at one person. It is not a single rude comment — it is a sustained campaign of online harassment.
Cyberbullying (साइबर-धमकी) — Using electronic means such as social media to intimidate, harass, defame, or cause mental harm to someone. Often confused with cyberstalking. Distinction: cyberbullying is broader and often targets minors or groups; cyberstalking is more specific, sustained, and legally defined as following/tracking behavior.
Identity Theft — Stealing another person's personal information (Aadhaar, PAN, passwords) to impersonate them for financial or other gain.
Web Hijacking — Taking unauthorized, forceful control of someone else's website. The original owner loses access; the attacker takes over. Different from hacking in that hijacking specifically means seizing control of a resource (website), not just breaking in.
Hacking — Gaining unauthorized access to a computer system or network. Can be done for malicious purposes (Black Hat) or to identify vulnerabilities (White Hat / ethical hacking).
Botnets — A network of computers infected with malware and controlled remotely by an attacker (bot-herder) without the owners' knowledge. Used to send spam, launch DDoS attacks, or spread malware at scale. Your laptop could be part of a botnet right now without you knowing.
Cryptojacking — Secretly using someone else's computer resources to mine cryptocurrency. No ransom, no data theft — the attacker simply steals your CPU power.
Catfishing — Creating a fake online identity to deceive someone, usually for romantic fraud or manipulation.
IT Act, 2000 — Primary legislation. Key sections:
IT (Amendment) Act, 2008 — Added sections dealing with data protection, cybercrime definitions, and corporate liability.
CERT-In — Computer Emergency Response Team India. Nodal agency under MeitY responsible for responding to cyber security incidents, issuing advisories, and coordinating national cyber response. Note: One PYQ from 2024 marked NIA as correct per official answer key — remember what the answer key says, but also know that CERT-In is the actual designated cyber security agency of India.
| Tool | Function | |------|----------| | Firewall | Filters incoming/outgoing network traffic | | Antivirus | Detects and removes malware | | Encryption | Converts data into unreadable code without a key | | VPN | Creates a secure, encrypted tunnel over the internet | | Two-Factor Authentication (2FA) | Requires a second verification step beyond password |
Map all phishing variants to their delivery channel:
Remember: P-S-S-V-I → "Please Stop Sending Very Irritating (messages)."
Standard recall without this: 40-50 seconds of mental searching. With this tree: under 10 seconds — you just scan the delivery channel in the question and match.
Both involve online harassment. Here is how to distinguish them in 5 seconds:
The question always gives you a clue: if it says "plethora of online messages and emails," the answer is cyberstalking. If it says "social media, intimidate, defame, mental degradation," the answer is cyberbullying.
This reduces a confusing 4-option question to a 2-step elimination — cuts decision time from ~30s to ~8s.
Break the word: Ransom (payment demanded for hostage) + Ware (software). So ransomware literally holds your files hostage and demands payment. If a question describes encryption + demand for money, the answer is ransomware — not hacking, not phishing, not spyware.
Wrong trap options usually include "monitors user activity" (that is spyware) or "unauthorized network access" (that is hacking). Three wrong answers eliminated in 4 seconds using etymology alone.
Both involve unauthorized access. The distinguishing word in every exam question on web hijacking is "forceful control" or "taking over" a website. Hacking is breaking in; hijacking is taking the wheel.
Same logic as the difference between picking a lock (hacking) and then driving away in someone's car (hijacking). If the question says "forceful control of a website," eliminate hacking, phishing, and spam — pick web hijacking. This is a 3-option elimination leaving one answer, done in under 6 seconds.
Computer Emergency Response Team — India.
Exam questions ask either the full form or which institution handles cyber security. Lock in: CERT-In = cyber security, DRDO = defence research, NIA = national investigation (terrorism/serious crimes), RAW = foreign intelligence. Four agencies, four distinct roles — no overlap. Distinguishing them takes under 5 seconds once this grid is memorized, versus 20+ seconds of guessing.
When you see a cyber security question in the exam hall, run this decision tree:
Step 1 — Is it a definition question? (X means ___ / ___ is defined as)
Step 2 — Is it an institution/agency question? (Which body handles ___)
Step 3 — Is it a law/act question? (Which act covers ___)
Step 4 — Eliminate obvious wrong answers first.
Total time per question using this framework: 15-25 seconds.
Why these questions matter: The 2024 UP Police Constable paper had a cluster of cyber security questions, all testing definitional recall. The pattern is consistent — one-line definition, four options, one correct. These solved PYQs cover every attack type that appeared.
Solving path: The question says "plethora of online messages and emails" directed at a user. That is sustained, repeated harassment via internet — the textbook definition of cyberstalking. Identity theft = stealing credentials. Phishing = fraudulent emails to steal data. Botnets = networks of infected computers. None of those involve repeated harassment of a single person. Cyberstalking wins by definition match.
Solving path: Break the word — Ransom + Ware. The definition involves two steps: (1) encrypts files, (2) demands payment. Option A (unauthorized network access) = hacking. Option B (phishing attack) = phishing. Option D (monitors user activity) = spyware. Only Option C matches the encrypt-then-demand structure. No calculation needed — pure definition match.
Solving path: Key phrase is "forceful control of another person's website." Phishing = fake emails. Hacking = unauthorized access (not necessarily taking over). Spam = bulk unsolicited messages. Web hijacking = taking unauthorized, forceful control of a website. The word "forceful control" eliminates all three distractors immediately.
Solving path: The Hindi question describes intimidating, harassing, defaming, or causing mental harm through electronic means like social media. Cryptojacking = using someone's CPU for mining. Identity theft = stealing personal information. Credit card fraud = financial fraud. साइबर-धमकी (Cyberbullying) = exactly what is described — harassment and intimidation via social media. Match is direct.
Solving path: The question describes targeting specific individuals to compromise the organization they work for. Generic phishing targets random people — so "spamming" and generic phishing are out. Cyberstalking targets an individual for personal harassment, not organizational security compromise. Spear phishing is defined by its targeted, personalized nature aimed at breaching organizational security through specific employees. Answer: स्पियर फिशिंग (Spear Phishing).
Confusing Ransomware with Spyware. Spyware monitors and reports your activity silently — it does not encrypt anything or demand money. Ransomware encrypts + demands ransom. If a question says "monitors user activity," it is spyware. If it says "encrypts + demands payment," it is ransomware. Do not swap these.
Treating Hacking and Web Hijacking as the same. Hacking is unauthorized access. Web hijacking is taking control — a step beyond access. The exam explicitly tests this distinction with the phrase "forceful control of a website." Always look for that phrase before picking web hijacking.
Confusing Cyberstalking with Cyberbullying. Both involve online harassment, but cyberstalking emphasizes repeated messages/emails to one victim and the element of "following." Cyberbullying emphasizes social media, groups, defaming, and mental harm. The question wording will tell you which — read for "plethora of messages/emails" vs "social media, defame, intimidate."
Assuming CERT-In is a wrong answer because NIA appeared in a PYQ answer key. CERT-In is the actual designated agency for cyber security in India under MeitY. One PYQ's official answer key listed NIA — but this is a known discrepancy. For any future exam, CERT-In is the correct answer unless the question explicitly asks about terrorism-related cyber investigation.
Calling all phishing attacks "phishing" without recognizing variants. Spear phishing, image phishing, smishing, and vishing are distinct types. When the question mentions a specific delivery channel (SMS = smishing, image files = image phishing, specific individual = spear phishing), pick the specific variant — not the generic "phishing."
Mixing up Botnets and Malware. Malware is the parent category (any malicious software). A botnet is a specific network of malware-infected computers controlled remotely. All botnet-infected machines have malware, but not all malware creates a botnet. If the question mentions "network of infected computers controlled remotely," the answer is botnet, not generic malware.