Jian has a website that uses the Secure Socket Layer (SSL) protocol to make sure that data is kept secure during transmission.

Mark scheme

Marking points from the official mark scheme (Oct/Nov 2022). The mark or mark type is shown in brackets.

1. [2] 6(a) Any two from: Check if web address starts with HTTPS // Check if there is a locked padlock // Check the digital certificate for the website
2. [1] 6(b) Transport layer security // TLS
3. [4] 6(c) Any four from: To act as intermediary between browser and web server // to filter/examine/monitor traffic to the web server // to help stop malicious traffic to the web server // To cache frequently viewed web pages // to allow faster response time for requests // to reduce the number of requests the server needs to process // To help prevent DoS // stopping the webserver being overloaded with requests // by redirecting away from server // by stopping DoS attack reaching server // To act as a firewall
4. [1] 6(d)(i) Spyware
5. [6] 6(d)(ii) One mark for a correct method, one mark for a corresponding description • Drop down boxes • this means that the keypresses cannot be recorded • Onscreen/virtual keyboard • this means that the keypresses cannot be recorded • Biometrics // by example • this means that the keypresses cannot be recorded • no password entered to be gathered • Anti-malware // anti-spyware • this will scan for/remove any malware that could be recording keypresses • Random/select values requested from password • this means that full password cannot be obtained (in a single login) • Firewall • to prevent the download of any malware that could gather keypresses