Tick (✓) whether the following are examples of personal data. 1 No (✓) Yes (✓) Full name Capital of England Gender Number of flowers in a garden [2]

1 yes no Full name  Capital of England  Gender  Number of flowers in a garden  2 marks for 4 correct ticks 1 mark for 2 or 3 correct ticks 0 marks for 0 or 1 tick 2 To earn marks, students must correctly identify 'Full name' and 'Gender' as personal data (Yes) and 'Capital of England' and 'Number of flowers in a garden' as not personal data (No). Two marks are awarded for all four correct, and one mark for two or three correct.

Complete the sentences below using the most appropriate word from the list. 4 phishing pharming hacking cookies virus spyware spam smishing The act of gaining unauthorised access to a computer system is called (a) … [1] The software that gathers data by monitoring key presses on a user’s keyboard is called (b) … [1] A fake text message, that could contain a link, sent to a mobile phone is called (c) … [1]

4(a) Hacking 1 4(b) Spyware 1 4(c) Smishing 1 (a) To earn the mark, you must state 'Hacking'. (b) To earn the mark, you must state 'Spyware'. (c) To earn the mark, you must state 'Smishing'.

A parent is concerned about his children sending texts. When sending a text, it is important to follow netiquette. 5 Explain what is meant by the term netiquette. (a) … … … … [2] The parent is planning to produce a number of rules to ensure that his children follow netiquette when texting other people. Write down four rules that he could include in his list. (b) 1… … 2… … 3… … 4… … [4]

5(a) Two from: Internet etiquette Set of social conventions They show common courtesy when communicating online 2 5(b) Four from: Do not use capital letters as it relates to shouting Do not use abusive/vulgar language/threatening behaviour Be clear in the text sent Always check spelling and grammar Remember that sarcasm does not communicate well Respect other’s privacy Respect other people’s views Do not use too many emoticons Do not use text language/slang Do not spam Do not send inappropriate links 4

5 The Internet of Things (IoT) is a computer network which allows users to control household devices remotely. It has many benefits, for example a user can turn on the house central heating via a smartphone. The IoT can use WiFi and Bluetooth which can cause problems regarding data security. Describe the methods that could be taken to protect the user’s data. … … … … … … … … … … … … [6]

5 Six from: Change default name/usernames and passwords on the router Change the default privacy//use a strong privacy setting Disable features not in use Use strong WiFi encryption Separate the IoT from the home WiFi account Keep software/hardware up to date Avoid public WiFi networks Ensure firewall is operational Use anti-spyware/up to date anti-virus Use strong passwords Use unique passwords for each device Change passwords regularly 6 To earn marks, you must describe six distinct methods that can be used to protect a user's data in an IoT environment, such as changing default passwords or using strong encryption.

5 Keeping data secure is very important in any computer system. Many organisations use encryption when sending data. (a) Describe the term encryption. … … … … … … … … [4] (b) Another way of protecting data in a computer system is to use passwords. Identify methods to prevent hackers from gaining knowledge of someone’s password. … … … … … … … … [4]

5(a) Four from: Scrambling of data Changes the data into a form that is not understandable Requires a decryption key/encryption key to decode Encrypted using a encryption key/code Changes plain text into cypher text 4 5(b) Four from: Use anti-spyware to prevent key logging Change passwords regularly//Do not repeat the same password Use a different password for each system Avoid common/predictable patterns as they are easier to guess Use longer passwords as they are harder to guess Use strong passwords Use two-factor authentication so that hackers need both parts Use a dropdown list for password entry Use a biometric password Do not use passwords that directly links to the user Do not allow webpages/device to remember the password 4 For part (a), you need to describe encryption by mentioning it scrambles data, makes it unreadable, requires a key to decode, and changes plain text to ciphertext. For part (b), you must identify four methods to prevent hackers from getting passwords, such as using anti-spyware, changing passwords regularly, using strong/long passwords, or employing two-factor authentication.

Cambridge IGCSE ICT · 0417

IGCSE ICT (0417) Safety and security past paper questions

Revise IGCSE ICT (0417) — Safety and security with real Cambridge past-paper questions grouped by topic, each shown with its marking scheme. Working one topic at a time targets exactly the skill each question tests.

121 free questions from 2016–2021, each with its marking scheme. Open the full topical bank to filter by subtopic, paper, and year.