Sample Questions

NISM-IFSCA-02A: Cyber Security and Cyber Resilience in the GIFT IFSC (Basic) Mock Test — 5 random MCQs with answers & explanations

← Back to NISM-IFSCA-02A: Cyber Security and Cyber Resilience in the GIFT IFSC (Basic) Mock Test

These 5 questions are randomly selected (standard MCQs only, not case-based).

Q1 Cross-Site Scripting (XSS) attacks target application users primarily by:

  • A. Unplugging network routers.
  • B. Overheating mobile phone batteries.
  • C. Injecting malicious scripts into trusted websites, which then execute in the victim's web browser. Correct Answer
  • D. Encrypting server hard drives.
Explanation:
XSS attacks execute untrusted client-side scripts in a user's browser, hijacking sessions or stealing session cookies.

Marks: 1

Q2 What is 'Cryptographic Erasure' (Crypto-Shredding)?

  • A. Shredding paper documents containing passwords.
  • B. Deleting files into the Windows Recycle Bin.
  • C. Deliberately destroying or overwriting the encryption key used to encrypt a dataset, rendering the data unrecoverable. Correct Answer
  • D. Wiping monitor screens with alcohol.
Explanation:
Crypto-shredding destroys the unique key protecting encrypted data, making the remaining ciphertext permanently unreadable.

Marks: 1

Q3 Why is 'Onboarding Security Training' necessary for new employees?

  • A. To ensure new joiners understand security policies, acceptable use rules, and reporting channels before gaining system access. Correct Answer
  • B. To collect employee personal photos.
  • C. It is optional and rarely recommended.
  • D. To slow down the hiring process.
Explanation:
Onboarding training sets clear security expectations and teaches safety rules before access rights are enabled.

Marks: 1

Q4 Identity Lifecycle Management (ILM) manages user identities across three main phases, which are:

  • A. Provisioning, Maintenance, and De-provisioning Correct Answer
  • B. Identify, Protect, Recover
  • C. Scan, Exploit, Report
  • D. Install, Update, Delete
Explanation:
ILM covers the full lifecycle of an identity from account creation (provisioning) through role changes to exit (de-provisioning).

Marks: 1

Q5 In incident forensics, 'Volatile Data' (such as RAM contents and active network connections) must be collected first because:

  • A. Volatile data takes up too much hard drive space.
  • B. Volatile data is lost permanently when the physical computer is powered down or rebooted. Correct Answer
  • C. Volatile data is unencrypted.
  • D. Volatile data is generated by backup tapes.
Explanation:
Volatile data resides in temporary memory and disappears upon reboot, requiring immediate forensic capture.

Marks: 1

Start Mock Tests →

Explore More Mock Tests

Practice structured mock tests designed exactly like real NISM exams.

Browse All Subjects Start Free Test

Notify me when you add new Sample Questions

Free account · No payment needed for Test 1

Create a free PassNISM account

Continue with Google to start a free NISM mock test (Test 1) for this subject, save scores, and compare attempts.

Continue with Google