Create a custom practice set
Pick category, difficulty, number of questions, and time limit. Start instantly with your own quiz.
Generate QuizGK Questions
Filter by category, type, and difficulty. Reading is open for everyone.
The Digital India Act proposal includes provisions for regulating algorithmic transparency and accountability.
- True
- False
Answer: True
Digital India Act (proposed) aims to address: platform accountability, user rights, emerging tech governance, and algorithmic transparency. Complements DPDP Act and IT Rules. Critical for understanding India's evolving digital regulatory framework in policy exams.
Which tool is commonly used for infrastructure provisioning using declarative configuration?
- Jenkins
- Terraform
- Ansible
- Docker
Answer: Terraform
Terraform (HashiCorp) uses HCL declarative language to provision cloud resources across providers (AWS, Azure, GCP). Supports state management, modules, and plan/apply workflow. Ansible is configuration management; Jenkins is CI/CD; Docker is containerization. Critical for IaC questions.
The technology that enables querying data directly in object storage without loading into a database is called ________ Query.
Answer: Serverless / Athena
Serverless query engines (AWS Athena, Google BigQuery) enable SQL queries directly on data in object storage (S3, GCS) using schema-on-read. Eliminates ETL for ad-hoc analysis. Pay-per-query pricing. Critical for modern data lake architecture questions.
Which pattern enables gradual rollout of new features to a subset of users for testing?
- Blue-Green Deployment
- Canary Release
- Feature Toggles
- A/B Testing
Answer: Canary Release
Canary Release deploys new version to small user subset (canary group), monitors metrics, and gradually expands if stable. Reduces risk vs big-bang releases. Implemented via service mesh, load balancers, or feature flags. Critical for safe deployment strategies.
Multi-Factor Authentication (MFA) using authenticator apps is more secure than SMS-based OTP.
- True
- False
Answer: True
Authenticator apps (Google Authenticator, Authy) generate TOTP locally, immune to SIM swapping, SS7 attacks, and phishing that compromise SMS OTP. NIST recommends moving away from SMS for high-security applications. Critical for authentication best practices questions.
Which authority adjudicates disputes under the Digital Personal Data Protection Act 2023?
- CERT-In
- Data Protection Board of India
- TRAI
- MeitY
Answer: Data Protection Board of India
Data Protection Board of India is independent regulatory body established under DPDP Act 2023 to: adjudicate disputes, impose penalties, and enforce compliance. Distinct from CERT-In (cyber incidents) and MeitY (policy). Critical for data governance questions.
The practice of intentionally injecting failures to test system resilience is called ________ Engineering.
Answer: Chaos
Chaos Engineering (Netflix Chaos Monkey) proactively tests system resilience by injecting failures (network latency, instance termination) in controlled experiments. Builds confidence in fault tolerance. Requires monitoring, blast radius limits, and automated rollback. Critical for SRE practices.
Which data modeling approach is optimized for analytical queries with denormalized schemas?
- Third Normal Form
- Star Schema
- Entity-Relationship
- Graph Model
Answer: Star Schema
Star Schema (data warehousing) uses denormalized fact tables linked to dimension tables for fast analytical queries. Optimizes read performance at cost of storage redundancy. Contrasts with 3NF (normalized for OLTP). Critical for BI and analytics architecture questions.
Serverless functions automatically scale to zero when not in use, reducing idle resource costs.
- True
- False
Answer: True
Serverless (AWS Lambda, Azure Functions) scales automatically: from zero to thousands of instances based on demand. Pay-per-execution pricing eliminates idle costs. Trade-offs: cold starts, execution time limits, vendor lock-in. Critical for cost-optimized cloud architecture questions.
Which attack exploits speculative execution vulnerabilities in CPUs to leak sensitive data?
- Meltdown/Spectre
- Rowhammer
- BlueBorne
- Log4Shell
Answer: Meltdown/Spectre
Meltdown/Spectre (2018) exploit CPU speculative execution and cache side-channels to read kernel memory or other processes' data. Mitigated via microcode updates, OS patches, and compiler fixes. Highlights hardware-level security challenges. Critical for system security questions.
The regulatory framework for digital lending in India is issued by ________.
Answer: RBI
RBI's Digital Lending Guidelines (2022) regulate: entity eligibility (banks/NBFCs only), direct fund flow, standardized disclosures, cooling-off period, and grievance redressal. Aims to protect consumers from predatory apps and data misuse. Critical for fintech compliance questions.
Which practice involves automatically rolling back deployments when error rates exceed thresholds?
- Canary Release
- Automated Rollback
- Feature Flags
- Chaos Engineering
Answer: Automated Rollback
Automated Rollback uses monitoring alerts (error rate, latency) to trigger immediate reversion to previous stable version. Reduces MTTR and blast radius of bad releases. Implemented via CI/CD pipelines and SRE runbooks. Critical for production reliability practices.
Change Data Capture (CDC) enables real-time replication of database changes to downstream systems.
- True
- False
Answer: True
CDC captures insert/update/delete operations from database logs (binlog, WAL) and streams to targets (Kafka, data lake). Enables real-time analytics, cache invalidation, and event-driven architectures. Tools: Debezium, AWS DMS. Critical for modern data integration patterns.
Which Kubernetes resource provides stable network identity and DNS name for pods?
- Deployment
- StatefulSet
- DaemonSet
- ReplicaSet
Answer: StatefulSet
StatefulSet manages stateful applications: provides stable pod names (pod-0, pod-1), persistent storage, and ordered deployment/scaling. Used for databases, Kafka, etc. Deployment is for stateless apps; DaemonSet runs one pod per node; ReplicaSet manages pod replicas.
The security approach of validating every request as if it originates from an untrusted network is called ________ Security.
Answer: Zero Trust
Zero Trust Security assumes breach and verifies every request regardless of source. Implements: identity verification, least privilege, micro-segmentation, and continuous monitoring. Contrasts with perimeter-based 'castle-and-moat' model. Critical for modern enterprise security architecture.
Which CERT-In direction mandates synchronization of IT system clocks with National Time Server?
- Direction 12
- Direction 20
- Direction 44
- Direction 66
Answer: Direction 20
CERT-In Direction 20 (April 2022) requires service providers to synchronize ICT system clocks with NIC's National Time Server for accurate incident timeline correlation. Also mandates 6-hour incident reporting and 180-day log retention. Critical for cybersecurity compliance questions.
Blue-Green deployment minimizes downtime by maintaining two identical production environments.
- True
- False
Answer: True
Blue-Green deployment: run current version (Blue) and new version (Green) in parallel; switch traffic to Green after validation. Enables instant rollback by reverting traffic. Reduces risk vs in-place updates. Critical for zero-downtime release strategies in DevOps.
Which technology enables distributed processing of large datasets across clusters?
- MySQL
- Apache Spark
- MongoDB
- Redis
Answer: Apache Spark
Apache Spark provides in-memory distributed computing for big data: batch, streaming, ML, graph processing. Faster than Hadoop MapReduce due to in-memory processing. Supports Scala, Python, SQL. Critical for big data engineering and analytics questions.
The pattern of packaging application code with dependencies into a lightweight, portable unit is called ________.
Answer: Containerization
Containerization (Docker, containerd) packages apps with runtime, libraries, and config into isolated, portable containers. Enables consistent deployment across environments. Contrasts with VMs (heavier, OS-level isolation). Foundation of cloud-native architecture. Critical for modern deployment questions.
Which technique analyzes network traffic patterns to detect anomalies without known signatures?
- Signature-based Detection
- Behavioral Analytics
- Heuristic Analysis
- Sandboxing
Answer: Behavioral Analytics
Behavioral Analytics uses ML to establish baselines of normal behavior and flag deviations indicating threats (insider threats, zero-days). Complements signature-based detection. Implemented in UEBA, NDR solutions. Critical for next-gen SOC and threat hunting questions.