O-LevelComputer ScienceThe Internet and its uses2210/11 · May/June 2023 · Q810 Marks
A manager at a company is concerned about a brute-force attack on its employee user accounts.
- (a)Describe how a brute-force attack can be used to gain access to the employee user accounts.[3]
- (b)(i)One possible aim for carrying out a brute-force attack is to install malware onto the company network. (i) State two other aims for carrying out a brute-force attack to gain access to the employee user accounts. 1 2[2]
- (b)(ii)(ii) Identify three types of malware that could be installed. 1 2 3[3]
- (c)Give two security solutions that could be used to help prevent a brute-force attack being successful. 1 2[2]
Mark scheme
Marking points from the official mark scheme (May/June 2023). The mark or mark type is shown in brackets.
- [3] Three from: • Trial and error to guess a password • Combinations are repeatedly entered ... • ... until correct password is found • Can be carried out manually or automatically by software
- [2] Any two from: e.g. • Steal/view/access data • Delete data • Change data • Lock account // Encrypt data • Damage reputation of a business
- [3] Any three from: e.g. • Virus • Worm • Trojan horse • Spyware • Adware • Ransomware
- [2] Any two from: • Two-step verification//Two-factor authentication//by example • Biometrics • Firewall // Proxy-server • Strong/complex password // by example • Setting a limit for login attempts • Drop-down boxes • Request for partial entry of password
Write your answer and get it marked
On Oracle Prep you can write or photograph your own answer and have it marked by AI against this mark scheme, with feedback on what you missed.
Sign up free →