A company has a number of offices around the world.

Mark scheme

Marking points from the official mark scheme (May/June 2017). The mark or mark type is shown in brackets.

1. 8(a) 2 marks for SSL, 2 marks for Firewall SSL protocol Two from: ∞ uses encryption ∞ encryption is asymmetric / symmetric / both ∞ makes use of (public and private) keys ∞ data is meaningless (without decryption key / if intercepted) Firewall Two from: ∞ helps prevent unauthorised access // helps prevent hacking ∞ checks that data meets criteria // identifies when data does not meet criteria ∞ acts as a filter for (incoming and outgoing) data // blocks any unacceptable data //allows acceptable data through
2. 8(b) Six from: Encrypt the data ... so it cannot be understood by those not entitled to view it Password protected / biometrics ... to help prevent unauthorised access Virus checking software ... helps prevent data corruption or deletion ... identifies / removes a virus in the system ... scans a system for viruses Spyware checking software ... helps prevent data being stolen/copied/logged ... scans a system for spyware Drop-down input methods / selectable features ... to reduce risk of spyware / keylogging Physical method e.g. locked doors / CCTV timeout / auto log off ... to help prevent unauthorised access Network / company policies // training employees ... to educate users how to be vigilant Access rights ... allows users access to data that they have permission to view ... prevents users from accessing data that they do not have permission to view