Computer Science MCQs – Page 82 (Q811-820)

Identity theft, in the context of cybersecurity, is correctly defined as the fraudulent use of someone else's personal information, typically for financial gain, occurring when a criminal obtains and misuses a victim's sensitive personal details, such as their name, national ID number, or financial account information, to fraudulently open accounts, make purchases, or otherwise impersonate the victim for illicit purposes. This crime often stems from information obtained through data breaches, phishing attacks, or other forms of cybercrime, illustrating how various cybersecurity threats can ultimately culminate in serious real-world financial and personal harm to victims. Recovering from identity theft can be an extremely time-consuming and stressful process for victims, often requiring extensive communication with financial institutions, credit agencies, and sometimes law enforcement to resolve fraudulent accounts and restore their financial standing. Understanding identity theft as a serious, tangible consequence of compromised personal information underscores the practical importance of protecting sensitive personal data through good cybersecurity practices.

Encryption is correctly used for converting readable data into a coded form to prevent unauthorized access, transforming plain, understandable information into a scrambled, unreadable format using mathematical algorithms, such that only someone possessing the correct decryption key can convert it back into its original, meaningful form. This process is fundamental to protecting sensitive information both while it's being transmitted across networks and while it's stored (encryption 'at rest'), ensuring that even if data is intercepted or accessed by an unauthorized party, it remains unreadable and effectively useless without the corresponding decryption key. Encryption underlies many everyday security features, including the HTTPS protocol protecting web browsing, encrypted messaging apps, and the security protocols protecting Wi-Fi networks and stored files from unauthorized access. Understanding encryption's core purpose in transforming data into an unreadable, protected format is foundational to grasping how modern digital privacy and security protections actually function at a technical level.

Decryption correctly refers to converting encrypted data back into its original, readable form, representing the reverse process of encryption, requiring the correct decryption key to successfully unscramble the coded data and restore it to its original, understandable state. This process ensures that authorized parties possessing the correct key can access and use protected information normally, while unauthorized parties without that key remain unable to make sense of the intercepted or accessed encrypted data. The security strength of any encryption system fundamentally depends on how difficult it is for unauthorized parties to perform decryption without possessing the legitimate key, a difficulty typically achieved through complex mathematical algorithms designed to be computationally infeasible to reverse-engineer through brute force. Understanding the encryption-decryption pair as complementary processes, one scrambling data for protection and the other restoring it for legitimate authorized use, is foundational cybersecurity literacy.

A digital signature is correctly used for verifying the authenticity and integrity of a digital message or document, providing cryptographic proof that a particular document or message genuinely originated from the claimed sender and has not been altered or tampered with since it was signed. Digital signatures rely on public-key cryptography, where a sender uses their private key to create a unique signature for a specific document, which recipients can then verify using the sender's corresponding public key, confirming both the sender's identity and that the document's content remains unchanged. This technology is widely used for legally binding electronic contracts, securing software downloads to confirm they haven't been tampered with, and verifying the authenticity of official digital communications. Understanding digital signatures as a cryptographic mechanism for verifying authenticity and integrity, distinct from simple encryption for confidentiality, is important nuanced cybersecurity literacy.

Biometric security, such as fingerprint or facial recognition, is correctly defined as a security method that uses unique physical characteristics to verify identity, relying on distinctive biological traits like fingerprints, facial features, iris patterns, or voice characteristics that are difficult for an unauthorized person to replicate or steal compared to a traditional password. This authentication method has become increasingly common in everyday consumer devices, particularly smartphones, offering a convenient balance of strong security and quick, effortless user access without needing to remember or type a complex password each time. While biometric security offers significant convenience and a strong layer of protection, it also raises unique considerations, such as the fact that biometric data, unlike a password, cannot simply be changed if compromised, since a person cannot easily obtain a new fingerprint or face. Understanding biometric security as this physical-characteristic-based authentication approach is relevant everyday technology literacy given its widespread adoption in modern smartphones and other consumer devices.

The purpose of a CAPTCHA on websites is correctly to distinguish between human users and automated bots, presenting a challenge, such as identifying distorted text or selecting specific images, that is designed to be relatively easy for a human to solve but difficult for automated computer programs to reliably complete. This helps websites prevent various forms of automated abuse, including spam form submissions, automated account creation, credential stuffing attacks, and other malicious bot-driven activities that could otherwise overwhelm or exploit a website's systems at a scale far beyond what human attackers alone could achieve. CAPTCHA technology has evolved considerably since its introduction, from early distorted text challenges to more sophisticated approaches like image selection puzzles and even invisible background analysis of user behavior patterns that require no direct user interaction at all. Understanding CAPTCHA's purpose as a bot-detection mechanism helps explain why this sometimes mildly annoying verification step remains a common and practically necessary feature across countless websites.

CAPTCHA correctly commonly stands for Completely Automated Public Turing test to tell Computers and Humans Apart, a somewhat elaborate acronym reflecting its core purpose as an automated, publicly accessible test designed to distinguish human users from computer programs, drawing conceptual inspiration from the famous 'Turing test' proposed by computing pioneer Alan Turing as a method for evaluating whether a machine could exhibit behavior indistinguishable from a human. The term was coined in 2000 by researchers at Carnegie Mellon University who developed one of the earliest widely deployed versions of this bot-detection technology. Despite its playful, somewhat convoluted full name, CAPTCHA has become a serious and widely deployed practical cybersecurity tool, protecting countless websites from various forms of automated abuse and bot-driven attacks. Understanding this acronym's full meaning provides interesting context connecting a common everyday web security feature back to foundational concepts in computer science and artificial intelligence theory.

Public Wi-Fi security risk is correctly commonly associated with the fact that data transmitted over unsecured public networks can potentially be intercepted by attackers, since many public Wi-Fi hotspots, found in places like cafes, airports, and hotels, either lack proper encryption entirely or use weak, shared security protocols that make it relatively easier for a nearby malicious actor on the same network to intercept and read data being transmitted by other connected users. This risk is particularly concerning for activities involving sensitive information, such as online banking or entering login credentials, since intercepted data could potentially be used for identity theft, unauthorized account access, or other malicious purposes. Using a VPN (Virtual Private Network) while connected to public Wi-Fi is a commonly recommended practical countermeasure, since it encrypts a user's traffic even on an otherwise insecure network, protecting it from potential interception by other users sharing that same public connection. Understanding public Wi-Fi's inherent security risks is practical, everyday cybersecurity literacy relevant to anyone who regularly uses these convenient but potentially vulnerable network connections.

The general advice regarding clicking links from unknown sources is correctly to avoid clicking suspicious or unknown links to prevent malware infection or phishing, since malicious links represent one of the most common ways attackers deliver malware or direct victims to convincing fake websites designed to steal login credentials or other sensitive personal information. Suspicious links might be disguised through shortened URL services that hide their true destination, or through visually similar but subtly misspelled domain names designed to trick users who don't examine the address carefully before clicking. Best practice generally involves hovering over a link before clicking to preview its actual destination URL, being especially cautious with links received via unsolicited emails or messages, and when in doubt, manually navigating directly to a known, trusted website rather than clicking a potentially suspicious provided link. Understanding this cautious approach to unfamiliar links is a fundamental, practical cybersecurity habit relevant to avoiding a significant proportion of common phishing and malware infection attempts.

Malware is correctly a general term for any software intentionally designed to cause damage or unauthorized access to a system, encompassing a broad umbrella category that includes specific types like viruses, worms, Trojan horses, ransomware, spyware, and adware, each with somewhat different specific behaviors and methods for causing harm to an infected system or its users. This broad classification helps distinguish malware from legitimate software, even legitimate software that might contain unintentional bugs or vulnerabilities, since the defining characteristic of malware is the deliberate, malicious intent behind its design and deployment. Malware can be delivered and spread through numerous vectors, including infected email attachments, malicious downloads, compromised websites, and infected removable storage devices, making comprehensive cybersecurity defense require multiple layered protective measures rather than relying on any single defensive technique alone. Understanding malware as this broad, umbrella term is foundational cybersecurity vocabulary underlying discussion of the many more specific malicious software categories that fall beneath it.