O-LevelComputer ScienceThe Internet and its uses2210/12 · May/June 2022 · Q614 Marks

Millions of emails are sent between users on a daily basis.

(a)Identify two online security attacks that can be carried out using email. Describe how email is used to enable the attack. Online security attack 1 Description Online security attack 2 Description[6]
(b)Online security attacks can maliciously damage data. One security method to keep data safe from online attacks is a firewall. Identify two other security methods that keep data safe from online attacks. Security method 1 Security method 2[2]
(c)Data can also be damaged accidentally. One example of how data can be damaged accidentally is by shutting down a computer before saving data. To prevent this from happening, a user should make sure they have saved all data before shutting down a computer. Complete the table by giving three other examples of how data can be damaged accidentally. Give a method of prevention for each example. Example Method of prevention[6]

Mark scheme

Marking points from the official mark scheme (May/June 2022). The mark or mark type is shown in brackets.

[1] Online security attack 1: Phishing
[1] Description: Email is sent to user to encourage them to click link
[1] Description: that takes user to fake website
[1] Online security attack: Pharming
[1] Description: Email is sent to user to encourage them to click link/download attachment
[1] Description: that triggers download of malicious code that will redirect user to fake website
[1] Online security attack: Virus/malware
[1] Description: Email is sent to user to encourage them to click link/download attachment
[1] Description: that triggers download of virus/malware
[1] Online security attack: Denial of service // DoS
[1] Description: A very large number of emails are sent to a server/network at the same time
[1] Description: crashing the server/network
[1] Encryption
[1] Password
[1] Two-step / Two-factor authentication/verification
[1] Biometric device
[1] Anti-malware // Anti-virus
[1] Proxy-server
[1] Example: Power surge/loss (damages hardware)
[1] Method of prevention: Use a UPS
[1] Example: Water can be spilled on the device
[1] Method of prevention: Don't have water near the device // Keep device in a waterproof box when not is use
[1] Example: Fire can destroy device
[1] Method of prevention: Use electrics safety // Keep device in a fireproof box when not is use
[1] Example: Data is accidentally deleted
[1] Method of prevention: Add verification method for data deletion // Set access levels for data to limit who can delete the data
[1] Example: Incorrect use of storage device
[1] Method of prevention: Making sure device is ejected before removing
[1] Example: Physical damage to hardware // hardware failure
[1] Method of prevention: Correct care and maintenance of hardware
[1] Example: Software failure
[1] Method of prevention: Making sure it is always up to date // enable automatic updates