Cybercrime Investigation Indian Medical PG Practice Questions and MCQs
Practice Indian Medical PG questions for Cybercrime Investigation. These multiple choice questions (MCQs) cover important concepts and help you prepare for your exams.
Cybercrime Investigation Indian Medical PG Question 1: The web-based IT system for case-based surveillance under National Tuberculosis Elimination Programme (NTEP, formerly RNTCP) is
- A. NIKSHAY (Correct Answer)
- B. E-TB Tracker
- C. SURAKSHA
- D. SAFETY-NET
Cybercrime Investigation Explanation: ***NIKSHAY***
- **NIKSHAY** is the official web-based IT system used by the National Tuberculosis Elimination Programme (NTEP, formerly RNTCP) in India for **case-based surveillance** and monitoring of TB cases.
- Launched in 2012, it facilitates **real-time data entry**, tracking of patient outcomes, drug logistics management, and program monitoring, significantly improving the efficiency of TB control efforts.
- It enables **notification of all TB cases**, both from public and private sectors, ensuring comprehensive surveillance.
*E-TB Tracker*
- **E-TB Tracker** is not the designated IT system for TB surveillance under NTEP in India.
- This term may refer to other electronic tracking systems used in different contexts, but NIKSHAY remains the official platform for India's TB programme.
*SURAKSHA*
- **SURAKSHA** means safety or protection in Hindi and is not associated with any specific web-based IT system for TB surveillance under NTEP.
- This is not a recognized TB surveillance platform in the Indian context.
*SAFETY-NET*
- **SAFETY-NET** is a generic term referring to social protection programs or health support systems.
- There is no specific NTEP initiative for TB surveillance identified by this name.
Cybercrime Investigation Indian Medical PG Question 2: According to which of the following guidelines must a registered medical practitioner preserve medical records of patients for a minimum of 3 years from the last date of treatment?
- A. Medical Council of India Act: Professional misconduct and medical ethics (Correct Answer)
- B. Indian Medical Council (Professional Conduct) Regulations: Medical certificate guidelines
- C. Consumer Protection Act: Medical services as consumer services
- D. Section 304A IPC: Death caused by negligence (medical negligence)
Cybercrime Investigation Explanation: ***Medical Council of India Act: Professional misconduct and medical ethics***
- The **Professional Conduct, Etiquette, and Ethics Regulations, 2002**, issued under the **Medical Council of India Act**, mandate the preservation of medical records for a minimum of **3 years** from the last date of treatment.
- This regulation falls under the purview of **professional misconduct and medical ethics**, outlining the duties and responsibilities of registered medical practitioners.
*Indian Medical Council (Professional Conduct) Regulations: Medical certificate guidelines*
- While these regulations do describe **medical certificate guidelines**, they do not specifically address the minimum period for preserving general medical records.
- This section focuses on the proper issuance and content of **medical certificates**, not storage duration of patient files.
*Consumer Protection Act: Medical services as consumer services*
- This Act primarily defines **medical services as consumer services** and allows patients to seek redressal for deficiencies in service.
- It does not specify the **duration for medical record preservation** by practitioners but rather grants rights to consumers.
*Section 304A IPC: Death caused by negligence (medical negligence)*
- This section deals with **criminal liability for death caused by negligence**, including medical negligence.
- It is a **penal provision** and does not provide guidelines on the administrative aspect of medical practice, such as record keeping duration.
Cybercrime Investigation Indian Medical PG Question 3: On request of a police officer, a medical examination of an arrested person's body can be done by a registered medical practitioner, as per the following provision in the Code of Criminal Procedure -
- A. Section 53 (Correct Answer)
- B. Section 57
- C. Section 54
- D. Section 56
Cybercrime Investigation Explanation: ***Section 53***
- **Section 53** of the Criminal Procedure Code (CrPC) specifically empowers a registered medical practitioner to examine an **arrested person** at the request of a **police officer of or above the rank of sub-inspector**.
- This section deals with the examination of a person who is arrested on a charge of committing an offense, where there are reasonable grounds for believing that such an examination will afford evidence as to the commission of the offense.
- The examination may include blood, urine, and other bodily samples for DNA profiling and other tests.
*Section 57*
- **Section 57** of the CrPC deals with the time limit for which an arrested person can be detained without a magistrate's order, which is typically **24 hours** (excluding travel time).
- It does not pertain to the medical examination of an arrested person.
*Section 54*
- **Section 54** of the CrPC grants the arrested person the right to be medically examined by a registered medical practitioner at their own request, usually to establish that no injuries were inflicted during custody.
- This is distinct from Section 53, which deals with examination requested by police to gather evidence related to the crime.
*Section 56*
- **Section 56** of the CrPC states that a police officer making an arrest without a warrant shall, without unnecessary delay, take the arrested person before a **Magistrate** or to the officer in charge of a police station.
- This section focuses on the procedural aspect of presenting an arrested person and not on medical examinations.
Cybercrime Investigation Indian Medical PG Question 4: Most reliable method to identify putrefied bodies with metallic implants?
- A. Serial number matching (Correct Answer)
- B. X-ray superimposition
- C. Dental comparison
- D. DNA profiling
Cybercrime Investigation Explanation: ***Serial number matching***
- Metallic implants, such as orthopedic prostheses or pacemakers, often carry **unique serial numbers** that can be traced back to the manufacturer and patient records.
- This method is highly reliable even in cases of severe **putrefaction** or fragmentation, as the implant itself is resistant to decomposition.
*X-ray superimposition*
- This method involves superimposing antemortem (before death) and postmortem (after death) X-rays to look for matching anatomical features.
- While useful for bone and tooth identification, it is less reliable for specific identification with metallic implants compared to direct serial number matching, especially if the antemortem X-rays predate the implant.
*Dental comparison*
- **Dental comparison** involves comparing antemortem dental records (X-rays, charts) with postmortem dental findings.
- This method is very effective for identification in general, but it does not directly utilize the metallic implant for identification and thus is not the *most reliable* method when an implant is present.
*DNA profiling*
- **DNA profiling** is highly effective for identification using biological samples, but it relies on obtaining viable DNA.
- In cases of severe putrefaction, obtaining **high-quality, uncontaminated DNA** suitable for profiling can be very challenging or impossible from the remains themselves.
Cybercrime Investigation Indian Medical PG Question 5: Unreasonable conduct of a patient, combined with a doctor's negligence, contributes to:
- A. Contributory negligence (Correct Answer)
- B. Corporate negligence
- C. Civil negligence
- D. Criminal negligence
Cybercrime Investigation Explanation: ***Contributory negligence***
* When a patient's **unreasonable conduct** contributes to their own injury, it is termed **contributory negligence**.
* This legal doctrine can **limit or bar recovery** for damages even if a doctor's negligence was also present.
*Corporate negligence*
* This refers to the **liability of a healthcare organization** for its own acts of negligence.
* It primarily involves the hospital's duties to its patients, such as **proper credentialing of staff** or maintaining safe facilities, rather than patient conduct.
*Civil negligence*
* This is a broad term for negligence that results in **harm to another person**, leading to a civil lawsuit.
* While a doctor's negligence falls under civil negligence, the specific scenario of a patient's unreasonable conduct contributing to harm points to the more precise term of **contributory negligence**.
*Criminal negligence*
* This involves a **reckless disregard for the safety of others** that goes beyond ordinary carelessness.
* It is a more severe form of negligence that typically results in **criminal charges**, not just civil liability, and does not involve patient conduct as a contributing factor.
Cybercrime Investigation Indian Medical PG Question 6: When a doctor shows gross absence of skill and care during treatment resulting in death of the patient is called:
- A. Malpractice
- B. Criminal negligence (Correct Answer)
- C. Misadventure
- D. Maloccurrence
Cybercrime Investigation Explanation: ***Criminal negligence***
- This involves a **gross deviation from the standard of care** by a medical professional, demonstrating a reckless disregard for the patient's well-being, directly leading to severe harm or death.
- Unlike malpractice, which can be civil, **criminal negligence** includes a higher burden of proof and carries legal penalties such as imprisonment.
*Malpractice*
- This refers to a medical professional's failure to exercise the **degree of care and skill** that a reasonably prudent and competent professional would exercise under similar circumstances.
- It usually results in **civil litigation**, seeking monetary damages for injuries caused by the negligence but does not necessarily imply criminal intent or gross deviation from care.
*Misadventure*
- This describes an **unforeseeable and unavoidable accident** or complication that occurs during medical treatment despite the healthcare provider acting within the standard of care.
- It implies an outcome that is neither the fault of the patient nor the doctor, and it does not involve any **negligence or lack of skill**.
*Maloccurrence*
- This term is often used interchangeably with "misadventure" and refers to an **unfavorable outcome** that occurs during medical treatment, despite the appropriate care being provided.
- It signifies an **unintended negative event** that is not due to negligence or a breach of duty by the medical professional.
Cybercrime Investigation Indian Medical PG Question 7: A woman died within 5 years of marriage under suspicious circumstances. Her parents complained that her in-laws used to frequently demand dowry. Under which of the following sections can a magistrate authorize an autopsy of the case?
- A. Section 302 IPC
- B. Section 174 Cr Pc
- C. Section 304 IPC
- D. Section 176 Cr Pc (Correct Answer)
Cybercrime Investigation Explanation: ***Section 176 Cr PC***
- This section empowers a **Magistrate to hold an inquiry into the cause of death** in cases of suspicious circumstances, including deaths within seven years of marriage where dowry harassment is alleged.
- The magistrate can **order a post-mortem examination** or even a second post-mortem if there are doubts about the initial findings, making it the appropriate section for **magisterial authorization** of autopsy.
- In dowry death cases, Section 176 provides judicial oversight and ensures an independent inquiry beyond police investigation.
*Section 174 Cr PC*
- This section deals with **police inquiry** and report on suicide and suspicious deaths, empowering the **police officer** (not magistrate) to investigate and order an autopsy.
- While Section 174 is used for initial police investigation in suspicious deaths, the question specifically asks about **magistrate authorization**, which falls under Section 176.
- Section 174 is the procedural provision for police-initiated investigation, whereas magisterial inquiry requires Section 176.
*Section 304 IPC*
- This section pertains to **punishment for culpable homicide not amounting to murder**. It is a substantive penal provision, not a procedural law.
- It deals with the legal consequence of an act after investigation and trial, not with the investigative procedure for conducting an autopsy.
- Charges under Section 304 IPC may result from findings after the autopsy, but it doesn't authorize the autopsy itself.
*Section 302 IPC*
- This section specifies the **punishment for murder**. Like Section 304 IPC, it is substantive criminal law defining a crime and its penalty.
- It would be invoked *after* the investigation reveals evidence of murder, not during the initial phase of ordering an autopsy for a suspicious death.
- An autopsy authorized under Cr PC sections might lead to charges under Section 302 IPC, but it doesn't authorize the autopsy procedure.
Cybercrime Investigation Indian Medical PG Question 8: Who orders the autopsy in the case of a Road Traffic Accident (RTA)?
- A. A. Forensic expert
- B. B. Police (Correct Answer)
- C. C. Lawyer
- D. D. Forensic doctor
Cybercrime Investigation Explanation: **B. Police**
- In cases of Road Traffic Accidents (RTAs) and other **medico-legal deaths**, the **police** are typically responsible for ordering an autopsy.
- This is because the death is suspicious and may involve criminal investigation, requiring formal authorization from law enforcement to establish the cause and manner of death.
*A. Forensic expert*
- A **forensic expert** performs the autopsy but does not have the authority to order it.
- Their role is to conduct the examination and provide expert findings to the investigating authorities.
*C. Lawyer*
- A **lawyer** may be involved in the legal proceedings related to the RTA but does not have the authority to order an autopsy.
- Their role is to represent clients and use the autopsy findings as evidence in court.
*D. Forensic doctor*
- A **forensic doctor** (or forensic pathologist) is the medical professional who conducts the autopsy.
- They do not initiate the autopsy themselves but perform it upon the request of authorized parties, such as the police or a medical examiner/coroner.
Cybercrime Investigation Indian Medical PG Question 9: A physician is accused of death threats via anonymous email. Investigation reveals the email was sent through multiple proxy servers and TOR network from a public WiFi location. The suspect's home computer shows no direct evidence. Evaluate which combination of digital artifacts would MOST conclusively link the suspect to the anonymous communication?
- A. TOR browser installation artifacts, typing pattern analysis (keystroke dynamics), linguistic stylometry of email content, correlation with suspect's known writings, WiFi connection logs on suspect's devices matching crime timeframe, and browser artifacts showing proxy/anonymizer research preceding the incident (Correct Answer)
- B. IP address logs from public WiFi and timestamp correlation alone
- C. Eyewitness testimony of suspect's presence at WiFi location
- D. Confession obtained during interrogation
Cybercrime Investigation Explanation: ***TOR browser installation artifacts, typing pattern analysis (keystroke dynamics), linguistic stylometry of email content, correlation with suspect's known writings, WiFi connection logs on suspect's devices matching crime timeframe, and browser artifacts showing proxy/anonymizer research preceding the incident***
- This multimodal approach establishes a link by combining **behavioral biometrics** (keystroke dynamics and stylometry) with **forensic artifacts** (TOR installation and research) to overcome the technological anonymity provided by several proxy layers.
- Evidence of **premeditation** (researching anonymizers) and **temporal-spatial correlation** (WiFi logs matching the crime scene) provides the high level of certainty required for legal attribution in digital forensics.
*IP address logs from public WiFi and timestamp correlation alone*
- While this places a device at the location, it fails to account for **TOR network masking**, which hides the original source IP from external logs.
- **IP addresses** alone are insufficient for definitive attribution, as they do not identify the specific user behind the terminal or account for MAC address spoofing.
*Eyewitness testimony of suspect's presence at WiFi location*
- Presence at a public location is **circumstantial** and does not prove that the suspect was the individual interacting with the specific digital service at that time.
- Testimony is subject to **human error and bias**, lacking the objective scientific rigor found in **digital footprint analysis** and linguistic fingerprints.
*Confession obtained during interrogation*
- Confessions may be **retracted or ruled inadmissible** if any procedural errors or coercion are alleged during the interrogation process.
- Without **corroborating digital evidence**, a confession alone lacks the technical proof necessary to explain how the suspect bypassed complex security and **anonymization protocols**.
Cybercrime Investigation Indian Medical PG Question 10: A hospital's electronic medical records system was allegedly tampered with to alter a patient's medication history before a medico-legal case. The accused claims system errors caused the changes. Multiple users have access. How would you BEST establish intentional tampering versus system malfunction?
- A. Rely on testimony of IT administrator alone
- B. Compare only the final version with the original record
- C. Check only the current database entries for inconsistencies
- D. Correlate database transaction logs with user authentication logs, audit trails, system logs, and backup differentials to establish specific user actions, timing patterns inconsistent with normal workflow, and evidence of privilege escalation or unauthorized access (Correct Answer)
Cybercrime Investigation Explanation: ***Correlate database transaction logs with user authentication logs, audit trails, system logs, and backup differentials to establish specific user actions, timing patterns inconsistent with normal workflow, and evidence of privilege escalation or unauthorized access***
- Intentional tampering is best proven by correlating **multi-source forensic data**, which identifies specific **user-linked actions** that deviate from automated system processes.
- Unlike system glitches, which appear as random or non-specific patterns, deliberate modification is evidenced by **targeted SQL queries**, **privilege escalation**, or changes occurring during unauthorized login sessions.
*Rely on testimony of IT administrator alone*
- Forensic evidence must be **objective and verifiable**; subjective testimony is insufficient for high-level medico-legal cases without technical proof.
- An administrator may have **conflicts of interest** or lack the specific technical data needed to distinguish between a hardware fault and a malicious act.
*Compare only the final version with the original record*
- Comparing versions reveals *that* a change occurred, but it fails to show **how, when, or by whom** the modification was made.
- This method cannot differentiate between a **legitimate clinical update**, an automated system synchronization error, or manual tampering.
*Check only the current database entries for inconsistencies*
- Looking at current entries provides only a **static view** of the data and does not capture the **chronological sequence** of events required for forensic reconstruction.
- Inconsistencies could be blamed on **bug-ridden software** or data corruption unless a full **audit trail** links those inconsistencies to specific user accounts.
More Cybercrime Investigation Indian Medical PG questions available in the OnCourse app. Practice MCQs, flashcards, and get detailed explanations.
