UGC NET Questions (Paper – 1)

Statements B and D are the wrong statements because they promote unsafe security practices. Using the same simple password for all accounts increases vulnerability; if one account is compromised, many others can be accessed easily. Similarly, public Wi-Fi networks, even when password protected, may be insecure for sensitive transactions like online banking due to risks such as snooping and fake hotspots. Statements A and C are correct as they highlight the importance of applying security patches and recognising phishing attempts, so the correct option must include only B and D as wrong.

Option A:
Option A is correct because it groups exactly the two wrong statements, B and D. Both of these statements contradict established cyber security guidelines that advise unique strong passwords and caution when using public Wi-Fi for confidential activities. By excluding A and C, which are accurate, this option matches the requirement to select only the wrong statements.

Option B:
Option B is incorrect because it treats only B as wrong and ignores D. While B is indeed a wrong statement, D is also unsafe advice since public Wi-Fi networks can be compromised in various ways. Leaving out one of the wrong statements means this option does not satisfy the question's demand to identify all wrong statements.

Option C:
Option C is incorrect because it includes A along with B and D as wrong statements. Statement A is actually correct; applying updates and security patches is a recommended security practice. Including a correct statement among wrong ones makes this combination logically inconsistent.

Option D:
Option D is incorrect because it groups A, C and D as wrong statements. Both A and C present correct security principles related to patching systems and recognising phishing attacks. Only D is wrong among these three, so treating all three as wrong misrepresents the conceptual content of ICT security and cyber ethics.

Statement D is the only wrong statement because Internet connectivity actually increases exposure to malware instead of ensuring immunity. Statements A, B and C correctly define malware, emphasise the value of antivirus software and warn about risky attachments. No technology can make a system permanently immune to all attacks; continuous vigilance and updates are needed. Therefore the option that selects only D as wrong is the correct answer.

Option A:
Option A is incorrect because it groups A and D as wrong statements. Statement A is accurate in using malware as an umbrella term for various malicious software types. Including this correct statement among the wrong ones makes the option logically inconsistent.

Option B:
Option B is correct because it isolates D as the sole incorrect statement while accepting that A, B and C are valid security guidelines. It underlines that connecting to the Internet does not eliminate risk and that protective measures remain vital.

Option C:
Option C is incorrect because it labels C and D as wrong. C is true, as attachments from unknown senders frequently carry malware or phishing attempts. Combining one true statement with a false one produces an invalid set.

Option D:
Option D is incorrect because it treats B and D as wrong statements. Statement B is a sound recommendation about antivirus use, so grouping it with the false claim in D misrepresents good security practice.

An information security policy sets out principles and rules to protect institutional information assets, including data, systems and networks. It covers issues such as user responsibilities, password management, incident reporting and sanctions for misuse. Such policies guide technical and administrative controls to mitigate risks. Therefore, the documents described in the stem are information security policies.

Option A:
Option A, cafeteria, policy would deal with canteen operations and is unrelated to network and password use.

Option B:
Option B is correct because the focus on acceptable use of ICT resources and security incident procedures is central to an information security policy as defined in standards and guidelines.

Option C:
Option C, transportation, policy would cover commute or vehicle regulations and has no connection with ICT networks.

Option D:
Option D, alumni, policy concerns engagement with former students and not security of digital resources.

Statements A, B, C and E capture key aspects of reliable backup strategies, whereas D and F are unsafe. Regular and documented backups to separate locations, along with test restorations, help institutions recover from failures or disasters. Keeping only one copy is not a backup at all, and performing backups only once a year ignores day-to-day data changes. Thus the correct set excludes D and F and includes A, B, C and E.

Option A:
Option A is incorrect because it omits A, which stresses regular backups to reduce loss, and it includes F, which wrongly suggests backups only once a year are sufficient. Therefore this set is not correct.

Option B:
Option B is incorrect because it includes F and omits C. Adding F suggests that annual backups are sufficient, which is inappropriate for dynamic institutional data. Leaving out C removes reference to documented schedules, so this option is not acceptable.

Option C:
Option C is correct because it encompasses regular backups, off-site storage, clear schedules and test restorations as a coherent strategy. It properly rejects D’s and F’s oversimplified approaches that expose data to unnecessary risk.

Option D:
Option D is incorrect because it includes F and omits B. Without B, there is no protection against local disasters, and including F implies very infrequent backups, so this combination cannot be correct.

Statements A, C and D are correct and together describe the major steps and principles guiding environmental risk assessment and management. Hazard identification and exposure assessment are core elements, risk management legitimately includes broader social and economic considerations and precautionary measures are accepted when there is uncertainty about serious harm. Statements B and E are incorrect because risk assessment involves assumptions and value choices, and it is applied not only to chemicals but also to other hazards such as radiation and physical infrastructure risks. Therefore, the combination A, C and D only is the correct answer.

Option A:
Option A is incorrect because it omits D, which is an important statement about the role of the precautionary approach in situations of scientific uncertainty. Without D, the answer does not fully reflect contemporary environmental risk governance.

Option B:
Option B is incorrect as it adds E, which wrongly restricts risk assessment to chemical hazards. Modern practice applies risk assessment frameworks across multiple hazard types, so including E makes the combination factually wrong.

Option C:
Option C is incorrect since it includes statement B, which claims risk assessment is entirely objective and free from value judgements. In reality, choices about endpoints, safety factors and acceptable risk levels involve normative judgments, so accepting B contradicts academic and policy discussions.

Option D:
Option D is correct because it brings together A, C and D, the three statements that align with accepted risk assessment and management practices, and excludes the two clearly false statements. It acknowledges both the technical and value-laden aspects of environmental risk governance.

Option E is incorrect as it includes B, D and E, of which only D is correct. B and E each misrepresent important aspects of risk assessment’s scope and nature, so the combination cannot be accepted.

Option F is incorrect because it groups C, D and E, again including E, which narrows risk assessment to chemicals only. Even though C and D are correct, the presence of E makes this option inconsistent with the broader view of environmental risk assessment.