IGCSE · Practice questions · Keeping data safe from security threats

Explain the how.

Six original Cambridge-style questions on solutions that keep data safe, with mark-scheme style solutions.

Original questions All questions on this page are original work, written in the Cambridge IGCSE style. They are not from past papers. They test the same concepts and skills the syllabus rewards.

Keep these straight

Name it, then explain it.

Network: firewall filters traffic; proxy server hides IP addresses, filters and absorbs DDoS.
Computer: anti-malware scans and quarantines; automatic updates patch weaknesses.
Account: passwords, biometrics, two-step verification; access levels limit what each user sees.
User and data in transit: check spelling, tone and URLs; privacy settings; SSL encrypts.

Explain

[3 marks]

Explain how a firewall helps to keep data safe.

A firewall monitors the traffic coming into and going out of a computer / network. ✓
It checks the traffic against a set of rules / criteria (e.g. blacklisted IP addresses). ✓
Traffic that does not meet the rules is blocked, preventing hacking / malware getting in. ✓

Explain

[2 marks]

Describe two methods of authentication, other than a username and password.

Biometrics: a unique physical feature, such as a fingerprint or face, is scanned and compared with stored data. ✓
Two-step verification: a one-time code is sent to the user's phone / email and must be entered as well as the password. ✓

Apply

[4 marks]

A company is worried about phishing emails. Describe two checks employees should make before clicking a link in an email, and explain why each helps.

Check the spelling and tone of the email, e.g. spelling mistakes, generic greetings or urgent, threatening language. ✓
These are signs the email is not from a genuine organisation, so the link should not be clicked. ✓
Check the URL attached to the link (hover over it) before clicking. ✓
A misspelt or unexpected domain shows the link leads to a fake website. ✓

Explain

[2 marks]

Explain how access levels help to keep data safe in a school's computer system.

Different users are given different permissions, e.g. students can read but not change records, teachers can edit marks. ✓
So users (or a hacker using one account) can only access or change the data they are allowed to, protecting the rest. ✓

Analysis

[4 marks]

For each threat, identify the most suitable solution and explain how it helps: (a) ransomware arriving in an email attachment; (b) data interception on an online payment page.

(a) Anti-malware (anti-virus). ✓
It scans the attachment, compares it with known malware signatures and quarantines / deletes it before it can run. ✓
(b) SSL (HTTPS). ✓
It encrypts the payment data, so if it is intercepted it cannot be understood. ✓

Explain

[2 marks]

Explain why software updates should be automated.

Updates contain patches that fix security weaknesses / bugs that attackers could exploit (and update malware definitions). ✓
Automating them means they are installed as soon as they are released, without relying on the user remembering. ✓

Mark this once you have attempted all six and checked your working. It records a Practiced badge on the topic and adds a one-time bonus. Revealing the solutions alone does not count.