UGC NET Questions (Paper – 1)

Statement D is the only wrong statement because cybercrimes can and often do occur over networks without any physical theft of computers. Hacking, identity theft and phishing frequently exploit vulnerabilities and human behaviour online. Statements A, B and C correctly describe common types of cybercrime. Therefore, the option that selects only D as wrong is correct.

Option A:
Option A is incorrect because it lists A and D as wrong statements. Statement A is true, as hacking does involve unauthorised access to systems or networks. Including this correct definition in the wrong set undermines the accuracy of the option.

Option B:
Option B is incorrect because it groups C and D as wrong statements. While D is wrong, C correctly explains that phishing tricks users into disclosing sensitive information. Mixing a true statement with a false one disqualifies the combination.

Option C:
Option C is incorrect because it combines A, B and D as wrong statements. Statements A and B are accurate descriptions of hacking and identity theft and should not be treated as wrong. Only D is incorrect, so this option misclassifies important concepts.

Option D:
Option D is correct because it isolates D as the sole wrong statement. It acknowledges that cybercrimes can occur entirely online and are not limited to physical theft of devices. Recognising A, B and C as correct descriptions of cybercrime types makes this option consistent with ICT security understanding.

Statements B and D are the wrong statements because they promote unsafe security practices. Using the same simple password for all accounts increases vulnerability; if one account is compromised, many others can be accessed easily. Similarly, public Wi-Fi networks, even when password protected, may be insecure for sensitive transactions like online banking due to risks such as snooping and fake hotspots. Statements A and C are correct as they highlight the importance of applying security patches and recognising phishing attempts, so the correct option must include only B and D as wrong.

Option A:
Option A is correct because it groups exactly the two wrong statements, B and D. Both of these statements contradict established cyber security guidelines that advise unique strong passwords and caution when using public Wi-Fi for confidential activities. By excluding A and C, which are accurate, this option matches the requirement to select only the wrong statements.

Option B:
Option B is incorrect because it treats only B as wrong and ignores D. While B is indeed a wrong statement, D is also unsafe advice since public Wi-Fi networks can be compromised in various ways. Leaving out one of the wrong statements means this option does not satisfy the question's demand to identify all wrong statements.

Option C:
Option C is incorrect because it includes A along with B and D as wrong statements. Statement A is actually correct; applying updates and security patches is a recommended security practice. Including a correct statement among wrong ones makes this combination logically inconsistent.

Option D:
Option D is incorrect because it groups A, C and D as wrong statements. Both A and C present correct security principles related to patching systems and recognising phishing attacks. Only D is wrong among these three, so treating all three as wrong misrepresents the conceptual content of ICT security and cyber ethics.

Phishing exploits human trust by sending messages that appear to come from legitimate institutions such as banks or universities. These messages typically ask users to click a link and enter passwords or other sensitive data on fake websites. The goal is to steal credentials or financial information for misuse. This deceptive practice is known as phishing.

Option A:
Option A, spooling, is a legitimate operating system technique for managing input and output operations and has no inherent fraudulent intent. It is unrelated to tricking users into revealing information.

Option B:
Option B is correct because phishing is precisely defined as attempting to acquire sensitive information by pretending to be a trustworthy entity in digital communication. The stem exactly matches this definition.

Option C:
Option C, farming, in its usual sense relates to agriculture and does not describe online fraud. Even in computing, related terms like pharming refer to different technical attacks.

Option D:
Option D, defragging, is a maintenance process that reorganises data on a disk to improve performance and has nothing to do with email based deception.

Phishing typically involves sending deceptive emails or messages that appear to come from legitimate organisations to trick users into revealing confidential information. It relies on social engineering rather than purely technical attacks. Because it exploits human trust, it is a major ICT security concern. The practice described is accurately termed phishing.

Option A:
Option A is correct because phishing is the established name for fraudulent communication that attempts to lure users into providing sensitive data under false pretences.

Option B:
Option B, hacking, is a broader term covering unauthorised access to systems and may involve technical exploitation, not necessarily deceptive messages as in the question.

Option C:
Option C, debugging, involves finding and correcting errors in software and is a legitimate development activity.

Option D:
Option D, compiling, translates source code into machine code and has nothing to do with fraudulent acquisition of credentials.

Statements A, B, C and E describe standard cyber security practices, while D and F are clearly wrong. Phishing seeks to harvest information, so users need strong passwords, antivirus protection and updated software to reduce risk. Opening suspicious attachments deliberately increases the chance of infection, and claiming that only IT staff are responsible ignores the critical role of user behaviour. Thus the correct combination comprises A, B, C and E only.

Option A:
Option A is incorrect because it includes F, which wrongly limits cyber security responsibility to IT staff only. Even though A, B, C and E are correct, including F makes the combination invalid.

Option B:
Option B is correct because it gathers together phishing awareness, password hygiene, malware defence and patch management while excluding unsafe ideas in D and F. It matches the comprehensive set of correct statements given in the stem.

Option C:
Option C is incorrect because it introduces F, which absolves users of responsibility. Even though B, C and E are true, including F contradicts modern cyber security training that emphasises user vigilance.

Option D:
Option D is incorrect because it leaves out B and includes F. It underplays the importance of strong passwords and suggests security is only an IT concern, so this combination cannot be considered correct.

Phishing is a social engineering technique where attackers pose as trustworthy entities to persuade users to disclose sensitive information. They often mimic legitimate banks, payment gateways or popular services in their messages and web pages. Victims who respond may unknowingly hand over credentials or financial data. Therefore the deceptive attacks described in the stem are known as phishing attacks.

Option A:
Option A is correct because cybersecurity literature defines phishing precisely as fraudulent attempts to obtain confidential information by disguising oneself as a reputable entity in electronic communication. The focus on passwords and bank details in the stem aligns with this definition.

Option B:
Option B, spoofing, involves forging technical details such as IP addresses or email headers and may be part of phishing, but it is not the user-facing tactic described. Spoofing alone does not necessarily aim directly at credential theft via persuasive messages.

Option C:
Option C, caching, is a performance optimisation process where data are temporarily stored for faster retrieval and has nothing to do with fraud.

Option D:
Option D, indexing, is related to organising information for efficient search and is not associated with malicious attempts to deceive users.

Phishing is a social engineering technique where attackers impersonate trusted organisations to trick users into revealing sensitive data. Fake emails often copy logos and language of real institutions and direct victims to fraudulent websites. When users enter passwords or card details, attackers capture them for misuse. The described scenario matches this pattern exactly.

Option A:
Using strong passwords and two-factor authentication is a protective measure, not an attack. It reduces the chance that stolen credentials can be abused.

Option B:
Updating antivirus software from an official site is a recommended security practice. It helps detect malware but is not itself malicious.

Option C:
Backing up data protects against loss due to failure or attack but does not involve deception or credential theft.

Option D:
This option correctly highlights impersonation, deceptive email and a request for confidential information, which are hallmark features of phishing attacks.

Phishing is a social engineering technique in which attackers disguise themselves as trustworthy entities in electronic communication. They often use emails or websites that closely resemble genuine ones to lure users into entering sensitive information. Such data can then be misused for identity theft or financial fraud. The scenario in this option captures the deceptive and fraudulent nature of phishing.

Option A:
This option correctly emphasises that the email appears legitimate but is actually fraudulent. The attacker’s goal is to obtain confidential data such as login credentials, bank details or OTPs. Recognising such attempts is an important ICT security awareness outcome for students and staff.

Option B:
Legitimately updating a password on the official portal is a recommended security practice, not an example of fraud. The user interacts with a genuine site and improves account protection. Hence, this behaviour is the opposite of phishing.

Option C:
Regular backups contribute to data availability and disaster recovery, not to social engineering attacks. They are a positive security measure undertaken by administrators. Therefore, this action is unrelated to phishing.

Option D:
Downloading open-source software from verified sources can be safe if checksums and signatures are verified. This behaviour shows cautious ICT use rather than falling for deceptive schemes. Thus, it is not an example of phishing.