Cybersecurity Questions for SSC CGL

Core Concepts of Cybersecurity

Cybersecurity is the practice of protecting computers, networks, programs and data from unauthorised access, damage or attack. Three foundational goals are bundled under CIA Triad: Confidentiality (only authorised people see data), Integrity (data is not altered without permission), and Availability (systems remain accessible when needed). Think of it like a bank locker: only you hold the key (confidentiality), the money inside must not be tampered with (integrity), and the locker must open when you need it (availability).

• CIA Triad: Confidentiality, Integrity, Availability — the three pillars of security.
• Authentication: verifying identity of a user or system (password, OTP, biometric).
• Authorisation: determining what an authenticated user is allowed to do.
• Encryption: converting plain text to coded form so only intended receiver can read it.
• Firewall: a barrier between trusted internal network and untrusted external network.
• Vulnerability: a weakness in a system that can be exploited by an attacker.

Types of Cyber Attacks and Threats

SSC CGL loves match-the-definition questions on attack types. The key is to remember a one-line description for each. Malware is the umbrella term for all malicious software. Under it fall viruses (attach to files), worms (self-replicate without a host file), Trojans (disguised as legitimate software), ransomware (locks data and demands payment), and spyware (secretly monitors user activity). Phishing is a social engineering trick — fake emails or websites steal your credentials. Remember: phishing uses a fake bait just like fishing.

• Virus: attaches itself to a legitimate file and spreads when that file is shared.
• Worm: self-replicates and spreads across networks without needing a host file.
• Trojan: looks useful but hides malicious code — named after the Trojan Horse myth.
• Ransomware: encrypts victim's data and demands ransom — WannaCry (2017) is a famous example.
• Phishing: fraudulent email or website to steal login credentials or financial info.
• DDoS (Distributed Denial of Service): floods a server with traffic to make it crash/unavailable.
• Keylogger: records keystrokes to capture passwords silently.
• Man-in-the-Middle (MitM): attacker secretly intercepts communication between two parties.

Cryptography and Encryption Basics

Cryptography is the science of securing information by transforming it into an unreadable format. Plain text is converted to cipher text using an encryption key, and the receiver uses a decryption key to read it. Symmetric encryption uses the same key for both encryption and decryption (example: AES — Advanced Encryption Standard). Asymmetric encryption uses a pair of keys — a public key to encrypt and a private key to decrypt (example: RSA). HTTPS websites use SSL/TLS protocols which combine both methods to secure data in transit.

• Symmetric encryption: one key for both encrypt and decrypt — faster, used for bulk data (AES).
• Asymmetric encryption: public key encrypts, private key decrypts — used in digital signatures (RSA).
• SSL/TLS: protocols securing internet communication — HTTPS uses TLS.
• Digital Signature: verifies authenticity and integrity of a message using asymmetric keys.
• Hash Function: converts data to a fixed-length digest — MD5, SHA-256 are common algorithms.
• Two-Factor Authentication (2FA): combines password with a second proof like OTP.

Security Tools and Terminology

Various tools and terms appear in SSC questions as direct definition matches. An antivirus detects and removes malware. A firewall filters network traffic based on rules. A VPN (Virtual Private Network) creates an encrypted tunnel over the internet for secure remote access. IDS (Intrusion Detection System) monitors network traffic and alerts on suspicious activity. IPS (Intrusion Prevention System) does the same but also blocks threats automatically. Patch: a software update that fixes a security vulnerability.

• Antivirus: scans, detects and removes malware from a device.
• Firewall: monitors incoming and outgoing network traffic and blocks unauthorised access.
• VPN: encrypts internet connection and hides IP address for secure and private browsing.
• IDS: detects intrusions and raises alerts but does not block — think of it as a CCTV camera.
• IPS: detects AND blocks threats automatically — think of it as a CCTV camera plus a security guard.
• Patch Management: process of regularly updating software to fix known security flaws.

Indian Cyber Law — IT Act 2000

The Information Technology Act 2000 (amended in 2008) is India's primary law governing cybersecurity and e-commerce. SSC frequently asks about specific sections. Section 43 covers unauthorised access and damage to computers. Section 66 deals with computer related offences (hacking). Section 66C covers identity theft. Section 66D covers cheating by impersonation using a computer resource. Section 67 covers publishing obscene material online. CERT-In (Computer Emergency Response Team India) is the national nodal agency for cybersecurity incidents under MeitY.

• IT Act 2000 — India's primary law on cybercrime and digital signatures.
• Section 66: Hacking / computer related offences — imprisonment up to 3 years.
• Section 66C: Identity theft — punishment up to 3 years and fine up to Rs 1 lakh.
• Section 66D: Cheating by impersonation using computer resource.
• Section 67: Publishing obscene content electronically.
• CERT-In: nodal agency under MeitY that responds to cybersecurity incidents in India.

• Confusing Virus and Worm: a virus needs a host file to spread; a worm is self-sufficient and spreads on its own through networks.
• Mixing up IDS and IPS: IDS only detects and alerts, IPS detects AND prevents — remember D for Detect only, P for Prevent too.
• Confusing symmetric and asymmetric encryption: symmetric uses ONE key, asymmetric uses a KEY PAIR (public + private).
• Thinking phishing is always about email only: phishing also includes fake websites, SMS (smishing) and voice calls (vishing).
• Getting IT Act sections wrong: Section 66 is general hacking, 66C is identity theft, 66D is impersonation — do not mix these up in match-the-pair questions.

• CIA Triad mnemonic: Confidentiality-Integrity-Availability = C I A like the spy agency that keeps secrets (Confidentiality), never lies about facts (Integrity), and is always reachable (Availability).
• Virus vs Worm: Virus needs a HOST (like biological virus needs a body); Worm is INDEPENDENT (wiggles around alone like an earthworm).
• IDS vs IPS: D = Detect only (like a smoke Detector that only beeps), P = Prevent (like a Sprinkler that beeps AND sprays water).
• IT Act sections shortcut: 66C = C for Credential theft (identity theft), 66D = D for Deception by impersonation — alphabetical order matches crime severity.

• Definition-match and odd-one-out formats are most common in SSC CGL for this topic — focus on one-line crisp definitions of each attack type.
• CERT-In, IT Act sections and HTTPS/SSL questions appear in Tier 1 GK as well as Tier 2 Computer Awareness — cover them from both angles.
• Recent papers (2022-2024) have asked about ransomware (WannaCry), phishing, and two-factor authentication — these three are high-frequency currently.
• Time investment: these are pure memory questions — aim to answer each in under 20 seconds. Do not spend time calculating or re-reading options.
• Watch for trick options that swap symmetric and asymmetric encryption properties or swap IDS with IPS — these are the most common setter traps in this topic.