Work through the list without notes. If you cannot do a statement, follow its link, then come back. Guide = study guide; Practice = practice questions.
Understanding
- I can define PII and give examples. (Guide: “Personal data and privacy”; Practice Q1)
- I can explain how collected and aggregated data can risk privacy and safety. (Guide: “Personal data and privacy”; Practice Q7, question 10)
- I can explain what strong passwords and multifactor authentication do. (Guide: “Authentication: proving who you are”; Practice Q2, Q8)
- I can explain the difference between symmetric key and public key encryption, and what certificate authorities do. (Guide: “Encryption: keeping messages secret”; Practice Q3, Q9)
Skills
- I can identify phishing, keylogging, rogue access points, malicious links and untrustworthy downloads in scenarios. (Guide: Worked example 2 part B; Practice Q4, Q6)
- I can say whose key is used at each step of public key encryption. (Guide: Figure 1; Practice Q3)
- I can calculate the number of possible PINs and the time to try them all. (Guide: Worked example 1)
Reasoning
- I can match a protection to a specific threat. (Guide: attack table; Practice Q5, Q8)
- I can explain why a second factor helps even if a password is stolen. (Guide: Worked example 1 part (c); Practice Q8)
- I can analyse a scenario for benefits and privacy risks of data collection and suggest actions by the user and the organisation. (Guide: “Personal data and privacy”; Practice question 10)
All ticked? Try the Unit 5 diagnostic, then the Unit 5 review.