A cyber security company specialises in security solutions that help prevent hackers being successful.
- (a)Identify two security solutions that can be provided to help prevent hackers being successful. Explain how each solution helps prevent hackers being successful. Solution 1 Explanation Solution 2 Explanation[6]
- (b)The company also has a web page that provides information to improve people's awareness of social engineering. Describe what is meant by social engineering. Include an example of social engineering in your answer.[3]
- (c)(i)State one similarity between session cookies and persistent cookies.[1]
- (c)(ii)Explain one difference between session cookies and persistent cookies.[2]
Mark scheme
Marking points from the official mark scheme (Oct/Nov 2025). The mark or mark type is shown in brackets.
- [6] One mark for the security solution
- [6] Two marks for a matching description
- [6] Strong/complex password
- [6] Requires a mixture of letters, number and symbols
- [6] Makes it very difficult for the hacker to guess
- [6] Limiting number of attempts for password
- [6] Cannot keep repeatedly guessing a password
- [6] Stops a brute-force attack being successful
- [6] Biometric device
- [6] Requires the hacker to have biometric data to access the data
- [6] It is very difficult to fake biometric data
- [6] Two-step verification // two-factor authentication
- [6] Requires the hacker to have additional data to access the data
- [6] The data is sent to the users registered device/account that the hacker would also need
- [6] Firewall
- [6] Examines incoming data/traffic
- [6] Can block any data that does not meet set criteria
- [6] Anti-spyware
- [6] Detects/removes any spyware present on the computer
- [6] Hacker cannot use spyware to get data to discover passwords
- [3] Two marks for:
- [3] Involves manipulating/deceiving people
- [3] ... with the aim of obtaining confidential/personal/valuable data
- [3] Any one from: For example:
- [3] Phishing // by example
- [3] Baiting // by example
- [3] Shoulder surfing // by example
- [1] Any one from:
- [1] They are both small text files
- [1] They both store data about the user // by example
- [1] They are both stored/managed by the web browser
- [1] They are both downloaded on to a user's computer
- [2] Two from (one mark for session, one mark for matching comparison to persistent):
- [2] Session cookies are deleted when the web browser is closed
- [2] ... whereas persistent cookies are deleted by the user/expire after a certain time
- [2] Session cookies are only stored in RAM
- [2] ... whereas persistent cookies are stored in the secondary storage
Write your answer and get it marked
On Oracle Prep you can write or photograph your own answer and have it marked by AI against this mark scheme, with feedback on what you missed.
Sign up free →