Which of the following statements are true with reference to cybersecurity? A.…
2024
Which of the following statements are true with reference to cybersecurity?
A. Incident response in cyber security involves identifying vulnerabilities and patching them before an attack occurs
B. CERT-In acts as an early warning system for cyber threats and attacks in India
C. 'Tor' is an acronym for 'The Onion Router', which is a web browser that enables people to communicate anonymously online to prevent bad actors from tracking their Internet activity
D. Using a Virtual Personal Network can help secure a network by encrypting the data transmitted over it
Answer: D. B and C only — ConceptCybersecurity questions that present several statements are solved by classifying each statement against the standard definition of the named control,…
- A.
A and D only
- B.
A and C only
- C.
B and D only
- D.
B and C only
Attempted by 18 students.
Show answer & explanation
Correct answer: D
Concept
Cybersecurity questions that present several statements are solved by classifying each statement against the standard definition of the named control, organization, or technology.
Incident response concerns handling and recovery from an actual or suspected incident; preventive vulnerability management is a separate activity. Acronyms must also be checked exactly because one changed word can make a statement false.
Application
Statement A conflates incident response with pre-incident vulnerability identification and patching. Those are preventive vulnerability-management activities, whereas incident response focuses on containing an incident and restoring affected systems.
Statement B describes CERT-In's national role: it issues advisories, analyzes threats and incidents, and provides warning and response support in India.
Statement C gives the conventional expansion 'The Onion Router' and describes anonymous online communication that resists tracking. Its wording is loose — strictly, Tor is the anonymity network and Tor Browser is the client application built on it — but the expansion and the stated purpose match the standard description, so the statement holds as written.
Statement D changes the standard expansion of VPN. VPN means 'Virtual Private Network', not 'Virtual Personal Network', although VPN technology can encrypt data in transit.
Contrast
A and D only depends on two statements that misuse the definitions of incident response and VPN.
A and C only retains the incident-response misconception in statement A.
B and D only retains the incorrect expansion in statement D.
B and C only contains the two statements supported by the standard cybersecurity meanings used in this item.
Cross-check
The exact UGC NET 27 August 2024 evening-shift answer key identifies B and C only as the accepted combination.
Result
Therefore, the true statements are B and C only.