Digital Safety, Security, and Ethical Practices
This domain tests safe, legal and ethical use of digital tools - a topic with direct, current relevance to Indian users.
Core rules
- The CIA triad: confidentiality, integrity, availability. Authentication proves identity; authorisation decides what you may access.
- Strong passwords are long and unique; use 2FA. Never share an OTP, PIN or CVV - no genuine bank official asks for them.
- Malware types: virus (needs a host file), worm (self-spreads across networks), trojan (disguised as useful), ransomware (encrypts files and demands payment), spyware and keyloggers (steal input), adware.
- Phishing arrives by email, smishing by SMS, vishing by voice. Red flags: urgency, threats, links to odd domains, requests for credentials, poor spelling.
- Defences: firewall, updated antivirus, timely patching, 3-2-1 backups, verifying the sender's domain, avoiding banking on public Wi-Fi.
- Law: IT Act 2000 - s.66C identity theft, s.66D cheating by personation, s.66E privacy violation, s.67 obscene content. Report cyber fraud at cybercrime.gov.in or helpline 1930; quick reporting helps freeze funds.
- Ethics: no plagiarism, no pirated software, respect licences (proprietary vs open source), and remember the digital footprint persists.
Worked example
SMS: 'Dear customer, your account will be blocked in 24 hrs. Verify KYC at http://bit.ly/xy2k.' Reasoning: urgency + threat + shortened link + no name = phishing. Correct response: do not click; open the bank's official app or call the number on the card; report and delete the message.
Traps
- Assuming HTTPS or a familiar logo makes a site safe.
- Believing antivirus removes all risk.
- Reusing one password everywhere.
- Thinking that deleting a post erases it from the internet.