Exam code: 9618
A program is written in a high-level language by a team of three programmers using an Integrated Development Environment (IDE).
The file containing the final program code will be sent by email for beta testing.
Identify one security method that can be used to protect the program code from unauthorised access during email transfer.
Explain how your chosen method protects the program code.
Was this exam question helpful?
The bank also needs to keep its customers’ data private and secure.
The bank’s network has a firewall.
Explain how a firewall can help protect the customers’ data.
Was this exam question helpful?
An assessment board scans exam papers and stores the digitised papers on a server. Exam markers download the digitised papers to mark. The exam markers then upload the mark for each paper.
The assessment board needs to make sure the data stored on the server is secure.
(i) Authentication methods can help to protect the server against hackers.
Identify one other security measure that helps to protect the server from hackers.
Describe how the security measure works.
(3)
(ii) Identify one security measure that helps to protect the data when it is being transmitted to its destination. Describe how the security measure works.
(3)
Was this exam question helpful?
Robots are used to serve food and drink to customers at a restaurant.
The data from the robots is transmitted to a central computer using a wireless connection.
Explain how encryption can protect the security of data during transmission.
Was this exam question helpful?
Authentication is one method a Database Management System (DBMS) can use to improve the security of a database.
Describe other methods that a DBMS can use to improve the security of a database.
Was this exam question helpful?
State the meaning of privacy of data.
State the meaning of integrity of data.
Describe the following threats to a computer system.
Phishing email
Spyware
Was this exam question helpful?
A company sells online Computer Science courses to students in different countries.
The courses are stored on a public cloud.
State how the following security measures can be used to protect computer systems.
Firewall ...............................................
Encryption ..........................................
Passwords ..........................................
Was this exam question helpful?
State one difference and one similarity between pharming and phishing.
Explain how the data security risks of malware can be restricted.
Was this exam question helpful?
A hospital stores the medical records of its patients on a computer system.
Each statement below describes one of these three terms: security of data, privacy of data, integrity of data.
Statement 1: The hospital makes sure that a patient's record can only be read by the doctor who is treating that patient.
Statement 2: The hospital makes sure that a blood test result is stored in the record without any change to its value.
Identify the term that each statement describes.
Was this exam question helpful?
An online shop stores the names, addresses and payment card details of its customers.
Explain the difference between the security of data, the privacy of data and the integrity of data for the shop's customer records.
Was this exam question helpful?
A company gives each of its sales managers a laptop. The customer records stored on each laptop are encrypted.
One of the laptops is stolen.
Describe how encryption protects the customer records held on the stolen laptop.
Was this exam question helpful?
A delivery company stores its delivery records on a server. All the records on the server are encrypted.
A power failure happens while the server is writing a group of new delivery records. When the server restarts, some of the delivery records contain only part of the data that should have been written.
The company manager says:
"Our records are encrypted, so our data is safe. Nothing else needs to be done."
Explain why the manager is wrong. Use the terms security of data and integrity of data in your answer.
Was this exam question helpful?
A travel company stores a file of ticket prices on its file server. The company uses access rights to control how this file can be used.
The table shows three groups of user accounts and what each group must be able to do with the file.
User group | What the group must be able to do | Access right |
|---|---|---|
Sales assistants | Look at the current prices while serving a customer, but never change them | |
Pricing team | Change the prices in the file and delete prices that are no longer offered | |
Warehouse staff | Must not be able to open the file at all |
Complete the table by writing the access right that should be given to each group.
Was this exam question helpful?
A student uses a stand-alone PC at home. The PC is not connected to any other computer.
Anti-virus software is installed on the PC.
Describe how the anti-virus software helps to protect the PC.
Was this exam question helpful?
An online bookshop keeps its customer records in one file on a server.
At present:
every member of staff signs in with the same user account
that account has full access to every file on the server
the customer records file is not encrypted
A security consultant makes two recommendations:
give every member of staff their own user account, with access rights that match their job
encrypt the customer records file
Explain why the bookshop needs both of these recommendations, rather than only one of them.
Was this exam question helpful?
A design company protects each office computer with a user account and a password.
The company decides to replace the passwords with a fingerprint scanner. Each employee will log in to their computer by placing a finger on the scanner.
Explain why a fingerprint scanner gives better protection against unauthorised access than a password.
Was this exam question helpful?
A school has 20 computers in one room. At the moment each computer is a stand-alone PC. It is not connected to any other computer and it has no connection to the internet. Each PC is protected by a user account with a password, and by anti-virus software.
The school will now connect all 20 computers together in a network, and will give the network a connection to the internet.
Explain why the school will need additional security measures once the computers are networked. Name each measure and give the reason it is now needed.
Was this exam question helpful?
Viruses and spyware are two types of malware.
Malware is one of the threats to data that is posed by networks and the internet.
State one feature of a virus that spyware does not have.
State one feature of spyware that a virus does not have.
Was this exam question helpful?
Two customers of an online bank each lose their account details to a criminal.
Customer A types the correct web address of the bank into a web browser. The browser opens a website that looks like the bank's website but is not owned by the bank. Customer A enters their username and password. A later security check finds malicious code on Customer A's computer.
Customer B receives an email that appears to come from the bank. The email asks Customer B to click a link and confirm their username and password. Customer B clicks the link and enters the details.
Identify the threat experienced by each customer.
Give one difference between the two threats that is shown by the scenarios.
Was this exam question helpful?
An online shop stores the names, addresses and payment card details of its customers on a server. The server is connected to the internet.
Complete the table by identifying two different threats to the customers' data that are posed by networks and the internet. Choose each threat from: hacker, virus, spyware.
Describe each threat.
Identify one measure that restricts the risk posed by each threat. The two measures must be different.
Threat | Description | Measure that restricts the risk |
|---|---|---|
Was this exam question helpful?