CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security
Meera receives an email that appears to come from her bank and asks her to enter her net-banking password on a look-alike website. She does so and money is withdrawn. Which combination best describes the technique and the relevant IT Act offence?
The technique is phishing, because a fake email and look-alike site were used to capture her password. Under the IT Act this is cheating by personation using a computer resource, and often identity theft as well. Denial-of-service and ransomware do not match the facts described.
- APhishing, with cheating by personation using a computer resourceCorrect
- BDenial-of-service attack, with cyber terrorism
- CRansomware, with data diminution only
- DSpamming, with breach of intermediary guidelines
Explanation
Luring a user to a fake site to capture credentials is phishing. The IT Act punishes cheating by personation by means of a computer resource (Section 66D), and identity theft (Section 66C) may also apply. DoS floods a service, and ransomware encrypts data for ransom; neither occurred here.
Did you get it right without looking?
One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.
More Cyber Security questions
- Employees of a Pune logistics firm receive an email that appears to come from the company's CEO, with a link to a page that imitates the cor…
- A Mumbai company's employee finds her files unreadable and a message demanding payment in cryptocurrency for a decryption key. Investigation…
- An attacker enters the string ' OR '1'='1 into the login field of a company's web portal and gains access without a valid password, because …
- Under the CERT-In Directions of 2022, for how long must logs of all ICT systems be maintained securely, within the Indian jurisdiction?
- A company detects ransomware encrypting files on one finance-department server connected to the corporate network. The incident team must ac…
- Kaveri Retail Pvt Ltd, an Indian company, suffers a ransomware attack that encrypts its servers. Under the CERT-In Directions of April 2022,…