IGCSE · Practice questions · HTTP, HTTPS and web browsers

Rules for the web.

Six original Cambridge-style questions on HTTP, HTTPS and web browsers, with mark-scheme style solutions.

Original questions All questions on this page are original work, written in the Cambridge IGCSE style. They are not from past papers. They test the same concepts and skills the syllabus rewards.

Keep these straight

Protocol, then program.

HTTP: protocol for requesting and transferring web pages between browser and web server.
HTTPS: HTTP with encryption by SSL/TLS; intercepted data cannot be understood.
Browser purpose: render HTML and display web pages.
Browser functions: bookmarks, history, tabs, cookies, navigation tools, address bar.

Explain

[3 marks]

Describe the purpose and operation of hypertext transfer protocol (HTTP).

HTTP is a protocol / set of rules for transferring web pages / data on the world wide web. ✓
The web browser sends a request to the web server for a web page. ✓
The web server responds by sending the web page files (HTML) back to the browser. ✓

Explain

[2 marks]

Explain why an online shop uses HTTPS rather than HTTP on its checkout page.

HTTPS encrypts the data (using SSL/TLS) sent between the browser and the server. ✓
So if payment / personal details are intercepted they cannot be understood (and the certificate shows the site is genuine). ✓

Recall

[1 marks]

State the main purpose of a web browser.

To render HTML and display web pages. ✓

Recall

[4 marks]

Identify four functions of a web browser, other than displaying web pages.

Storing bookmarks / favourites. ✓
Recording user history. ✓
Allowing multiple tabs. ✓
Any one of: storing cookies, providing navigation tools (back / forward / refresh), providing an address bar. ✓

Apply

[2 marks]

A user types a URL into a browser. Describe how the user can tell whether the page uses HTTPS.

The URL in the address bar begins with https://. ✓
The browser displays a padlock symbol (which can be clicked to view the site's digital certificate). ✓

Analysis

[2 marks]

A student writes: "HTTPS means that hackers cannot intercept your data." Explain why this is not correct.

Data sent using HTTPS can still be intercepted. ✓
But it is encrypted, so the hacker cannot understand / read it without the key. ✓

Mark this once you have attempted all six and checked your working. It records a Practiced badge on the topic and adds a one-time bonus. Revealing the solutions alone does not count.