Question

Difficulty: Very hardInformation Technology and Cybersecurity

Match List-I (Cybersecurity Concepts and Legal Provisions) with List-II (Core Features and Operational Principles) and select the correct matching pairs.

  • Section 66F of Information Technology Act, 2000Penalizes acts committed with intent to threaten the unity, integrity, security, or sovereignty of India using computer resources
  • Homomorphic EncryptionEnables mathematical computations directly on encrypted data without requiring prior decryption
  • DNS Amplification AttackLeverages open recursive domain name servers with spoofed IP addresses to overwhelm targets with amplified traffic payloads
  • Zero Trust Architecture (ZTA)Operates on the core posture of 'never trust, always verify', enforcing continuous authentication regardless of network location

Answer

The correct matching pairs Section 66F of the Information Technology Act, 2000 with statutory penalties for cyber terrorism affecting national sovereignty; Homomorphic Encryption with performing operations on ciphertexts without decryption; DNS Amplification Attack with exploiting open resolvers using spoofed IP addresses for DDoS traffic amplification; and Zero Trust Architecture with continuous authentication under the 'never trust, always verify' security model.
The correct pairings align each cybersecurity term and legal provision with its exact technical or statutory definition: Section 66F penalizes cyber terrorism against national security; Homomorphic Encryption enables computation over ciphertexts without prior decryption; DNS Amplification exploits open resolvers via spoofed requests to flood target systems; and Zero Trust Architecture eliminates implicit perimeter trust by enforcing continuous authentication.

Step-by-Step Solution

1
Identify the legal scope of Section 66F of the IT Act, 2000.
Section 66F focuses on Cyber Terrorism against national security, unity, and sovereign electronic infrastructure.
State PSC exams frequently test specific sections of the Indian IT Act, particularly provisions related to cyber terrorism (66F), privacy (66E), and identity theft (66C).
2
Evaluate the technical definition of Homomorphic Encryption.
Connect Homomorphic Encryption to performing computations on encrypted data without decrypting it first.
This cryptographic technique is essential for secure cloud computing and privacy-preserving data analytics.
3
Analyze the attack mechanism of DNS Amplification.
Associate DNS Amplification with reflection-based DDoS attacks using open recursive resolvers and IP spoofing.
Small UDP queries generate disproportionately large DNS response payloads sent to the victim's spoofed IP address.
4
Determine the operational paradigm of Zero Trust Architecture.
Link Zero Trust Architecture with continuous identity verification and zero implicit network perimeter trust.
ZTA assumes threats exist both outside and inside the corporate network boundary.

Key Concept

Information Security Frameworks, Cryptography, Cyber Attacks, and Statutory Laws
Estimated Time:2m 0s
Rate this question