Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Network Basics and Security

A Mumbai firm finds that an attacker, after gaining access without authority, copied customer data from its network and deleted logs. Which statement best links the technology and the Information Technology Act, 2000?

Unauthorised access, copying of data and deletion of logs from a computer system can lead to compensation to the affected firm and criminal punishment under the Information Technology Act, 2000. The Act does not require a botnet or encrypted data, and tampering with logs is itself actionable.

  1. AUnauthorised access and data extraction from a computer system can attract civil compensation and criminal liability under the ActCorrect
  2. BThe Act applies only if the attacker uses a botnet, not for a single intruder
  3. CLiability arises only if the data is encrypted, since plain data is outside the Act
  4. DNo liability arises because deleting logs is only a technical event

Explanation

The IT Act penalises accessing a computer system without permission, downloading or copying data, and destroying or altering information, with compensation for damage and criminal provisions for dishonest or fraudulent acts. It does not require a botnet or encryption, and log deletion can itself be an offence.

Did you get it right without looking?

One question tells you little. A timed set on Network Basics and Security shows your real accuracy, how long you take and where you lose marks.

More Network Basics and Security questions