Technology – MCQ – GK Questions

Q: Which framework standardizes threat information sharing using structured formats?

Both A and B – STIX/TAXII standardizes threat data exchange; MITRE ATT&CK catalogs adversary TTPs. Both enable threat-informed defense and collaboration.

Q: Which cloud security model defines shared responsibilities between provider and customer?

Shared Responsibility Model – Cloud provider secures infrastructure ('security OF cloud'); customer secures data/apps ('security IN cloud'). Responsibilities vary by service model (IaaS/PaaS/SaaS).

Q: Which principle is foundational to Zero Trust Architecture?

Never Trust, Always Verify – Zero Trust assumes breach and verifies every request regardless of source. Implements identity verification, least privilege, micro-segmentation, continuous monitoring.

Q: Which platform enables seamless transfer of education credentials between institutions using blockchain?

All of these – India's digital education ecosystem integrates: DigiLocker (store/share certificates), Academic Bank of Credits (ABC) for credit accumulation/transfer under NEP 2020, and NDEAR (National Digital Education Architecture) for interoperable standards. Blockchain pilots ensure tamper-proof credential verification. Supports lifelong learning and student mobility.

Q: Which cloud cost optimization strategy involves shutting down non-production resources during off-hours?

Scheduling – Scheduling (or start-stop automation) shuts down dev/test environments nights and weekends, reducing costs by 60-70%. Implemented via cloud provider tools (AWS Instance Scheduler, Azure Automation) or third-party solutions. Complements other strategies: right-sizing (match resources to workload), reserved instances (commitment discounts), and auto-scaling (demand-based scaling).

Q: Which database design pattern stores historical changes to data by adding new rows instead of updating existing ones?

Both B and C – Temporal Tables (SQL:2011 standard) automatically track row history with system-versioned tables. Event Sourcing stores state changes as immutable events, enabling reconstruction of any historical state. Both support audit trails, time-travel queries, and compliance. Trade-offs: increased storage and query complexity for historical analysis.

Q: Which Indian regulation mandates data localization for certain categories of personal data?

All of these – Data localization requirements exist in: RBI directive (payment system data stored only in India), DPDP Act 2023 (significant data fiduciaries may be notified for localization), and sectoral guidelines (telecom, health). Balances data sovereignty, law enforcement access, and global data flow needs. Compliance requires careful architecture planning.

Q: Which initiative provides a digital platform for citizens to participate in policy discussions and give feedback?

MyGov – MyGov is a citizen engagement platform launched under Digital India. Enables Indians to participate in policy discussions, submit ideas, vote on proposals, and provide feedback on government initiatives. Fosters collaborative governance, transparent decision-making, and inclusive policy formulation through digital participation.

Q: Which ISRO satellite provides high-resolution imagery for urban planning and infrastructure monitoring?

CARTOSAT-3 – CARTOSAT-3 is a third-generation agile advanced earth observation satellite with sub-meter resolution (0.25m panchromatic). Used for cartography, urban planning, infrastructure monitoring, and strategic applications. Launch on PSLV in 2019. Part of India's self-reliance in high-resolution remote sensing data for development and security.

Q: Which cloud service provides on-demand access to virtual machines, storage, and networks?

IaaS – IaaS (Infrastructure as a Service) provides fundamental computing resources: virtual machines, storage, networks, and operating systems. Customers manage applications, data, runtime, and middleware. Examples: AWS EC2, Azure VMs, Google Compute Engine. Offers maximum flexibility but requires more management than PaaS or SaaS.