Medium Level – GK Questions

UEBA uses ML to establish behavioral baselines and detect anomalies indicating compromised accounts or insider threats.

IAM systems manage user identities, authentication, authorization. Critical for implementing least privilege access controls.

EDR monitors endpoint behavior; device posture assesses security configuration. Both enable continuous verification in Zero Trust.

Digital India ecosystem: UMANG for service delivery, MyGov for citizen engagement, DigiLocker for documents.

India's rapid 5G deployment driven by competitive telecom operators, government policy support, indigenous technology development.

Function calling enables LLMs to invoke APIs, run code, query databases for tasks beyond text generation.

Parquet is columnar storage format optimized for analytics: efficient compression, predicate pushdown, schema evolution.

Stream processing handles continuous data flows for real-time insights: fraud detection, monitoring, personalization.

Kafka (messaging), Flink (stream processing), Spark Streaming (micro-batch) enable real-time analytics with varying consistency guarantees.

Threat hunting uses hypotheses, analytics, and analyst expertise to find hidden adversaries. Complements automated detection.

IOCs are forensic artifacts indicating potential breaches. Used for proactive blocking, hunting, and incident response.

STIX/TAXII standardizes threat data exchange; MITRE ATT&CK catalogs adversary TTPs. Both enable threat-informed defense and collaboration.

Cloud Security Posture Management automates detection/remediation of misconfigurations: public storage, weak IAM, unencrypted resources.

Cloud provider secures infrastructure ('security OF cloud'); customer secures data/apps ('security IN cloud'). Responsibilities vary by service model (IaaS/PaaS/SaaS).

Principle of Least Privilege restricts user/system access rights to only what is essential. Reduces attack surface and limits damage from compromised accounts.

Micro-segmentation creates granular security zones around workloads, containing breaches and limiting attacker movement. Critical for Zero Trust implementation.

Zero Trust assumes breach and verifies every request regardless of source. Implements identity verification, least privilege, micro-segmentation, continuous monitoring.

India's digital education ecosystem integrates: DigiLocker (store/share certificates), Academic Bank of Credits (ABC) for credit accumulation/transfer under NEP 2020, and NDEAR (National Digital Education Architecture) for interoperable standards. Blockchain pilots ensure tamper-proof credential verification. Supports lifelong learning and student mobility.

INNER JOIN returns only matching rows. OUTER JOIN (LEFT/RIGHT/FULL) returns matching rows PLUS unmatched rows from one or both tables, with NULLs for missing side. LEFT JOIN: all left table rows; RIGHT JOIN: all right table rows; FULL OUTER: all rows from both. Essential for comprehensive data analysis and reporting.

Penetration Testing (ethical hacking) involves authorized simulated cyberattacks to identify security weaknesses before malicious actors exploit them. Types: black-box (no prior knowledge), white-box (full knowledge), gray-box (partial). Conducted by certified professionals (CEH, OSCP). Findings guide remediation and strengthen security posture.