Technology – Medium Level – GK Questions

Membership inference exploits model confidence to infer training data membership. Mitigation: differential privacy, regularization, output perturbation.

Data poisoning injects malicious samples; backdoor attacks embed triggers that activate misclassification. Both compromise model integrity during training.

Runtime security (Falco, Tetragon) monitors system calls, network activity, file access in real-time to detect threats in containerized environments.

Security Context defines pod/container privileges; Pod Security Standards enforce baseline/restricted policies. Both critical for container security.

IaC scanning (Checkov, tfsec) analyzes Terraform/CloudFormation for misconfigurations before deployment. Critical for shift-left security in DevOps.

SDP creates dynamic, identity-based perimeters: resources invisible until user/device authenticated and authorized. Critical for reducing attack surface.

Behavioral biometrics analyzes typing, mouse movements; adaptive authentication adjusts requirements based on risk. Both enable continuous verification in Zero Trust.

NIST SP 800-207 provides comprehensive Zero Trust guidance: identity verification, device trust, network segmentation, continuous monitoring.

Digital India Act aims to address: platform accountability, user rights, emerging tech governance, algorithmic transparency. Complements DPDP Act and IT Rules.

Panchamrit (five nectars) announced at COP26 includes: 500 GW non-fossil capacity, 50% energy from renewables, 1 billion tonne CO2 reduction, net-zero by 2070.

Chandrayaan-3's Vikram lander and Pragyan rover analyzed lunar soil near south pole, searching for water ice and studying surface composition.

UPI's success driven by interoperability, zero MDR, and innovation. Inspired similar systems globally: Singapore PayNow, UAE, France discussions.

QKD uses no-cloning theorem and measurement disturbance to detect eavesdropping. Provides provable security unlike computational security of classical cryptography.

DPDP Act 2023 establishes framework for processing digital personal data in India, with rights for data principals and obligations for data fiduciaries.

Right to Erasure (Article 17 GDPR) allows individuals to request deletion when data is no longer necessary, consent withdrawn, or processing unlawful. Critical privacy right.

GDPR requires explicit consent for special category data; ePrivacy Directive covers electronic communications. Both emphasize user control and transparency in data processing.

Model inversion exploits model confidence scores to infer sensitive attributes of training data. Mitigation: differential privacy, output perturbation, access controls.

Container image scanning identifies known vulnerabilities, misconfigurations, and secrets in images before deployment. Critical for secure CI/CD pipelines in cloud-native environments.

Service mesh (Istio, Linkerd) automatically encrypts service-to-service traffic with mTLS, provides authentication, authorization, and observability without application code changes.

Kubernetes security: Pod Security Policies restrict privileges, Network Policies control traffic, Resource Limits prevent DoS. Combined for defense-in-depth in container environments.