Answer
Flashcards · 0417 · Topic 8
Safety and security flashcards
20 cards on Topic 8, subtopics 8.1 to 8.3. Pick a subtopic or study them all.
Study mode needs JavaScript. Every card is listed below, so you can still cover the answers and test yourself.
Choose your cards
Session complete
Worth another look:
All 20 cards
For a quick read-through or printing. Cover the right-hand side to test yourself.
8.1 Physical safety
- Trailing cables: harm and prevention
- People trip and are injured, or equipment is pulled down. Prevent it with cable ducts or covers, tidy cable routes or wireless connections.
- Overloaded sockets: harm and prevention
- They can cause a fire. Limit the number of devices per socket, check cables and use surge protectors.
- Liquids and exposed wires near computers: harm and prevention
- Electric shock, electrocution or short circuits. Ban drinks and food near equipment, and have equipment tested regularly by qualified staff.
- Which fire extinguisher is used for an electrical fire?
- Carbon dioxide (CO₂) or dry powder, never water.
8.2 eSafety
- Why should personal data be kept private online?
- Details such as name, address, school, photos or bank details can be used for identity theft, fraud, or to find and harm a person.
- Give four eSafety rules for social media
- Block and report unwanted users; be aware of the danger of meeting an online contact face to face; do not distribute inappropriate images or use inappropriate language; respect the confidentiality of other people's personal data.
- How can you check a website is safe for personal details?
- Check that the address starts with https and shows a padlock, and only use trusted, reputable sites. The padlock shows the connection is encrypted, not that the site is honest.
- Why is data protection legislation needed?
- Organisations hold large amounts of personal data that could be misused, lost or disclosed. The law sets principles, e.g. data must be used only for its stated purpose, kept accurate, kept secure and not kept longer than necessary.
- Personal data vs sensitive data
- Personal data identifies a living person (name, address, date of birth, a photo in school uniform). Sensitive data, such as medical history, could cause more harm if disclosed. Both must be kept confidential.
- Two eSafety rules for online gaming
- Do not use your real name, and do not give out personal or financial data.
8.3 Security of data
- Phishing vs pharming
- Phishing: a fake email or message tricks the user into giving details, often via a link to a fake site. Pharming: malicious code redirects the user to a fake website even when the correct address is typed.
- What are smishing and vishing?
- Phishing carried out by SMS text message (smishing) and by voice call (vishing).
- What does a firewall do, and what does it not do?
- It monitors network traffic and blocks unauthorised or suspicious traffic in and out. It does not remove viruses; anti-malware software does that.
- Does encryption stop data being intercepted?
- No. It scrambles data so that intercepted data cannot be read without the key.
- Why does two-factor authentication improve security?
- A password alone is not enough: the attacker also needs a second item, such as a code sent to the user's phone.
- What are the three types of card fraud named in the 0417 syllabus?
- Shoulder surfing (watching someone enter a PIN), card cloning (copying a card's data with a skimmer to make a duplicate) and key logging (software that records keystrokes).
- What does a digital certificate contain?
- The owner's name, a serial number, an expiry date, the owner's public key and the digital signature of the certificate authority. It proves a website is genuine.
- What does SSL do?
- Secure socket layer sets up an encrypted link between the server and the client computer, so intercepted data cannot be read. Shown by https and a padlock.
- Where is encryption used to protect data?
- On hard discs, in email, in cloud storage and on HTTPS websites.
- How do you avoid infecting a computer from a downloaded file?
- Only download from trusted sources, scan the file with up-to-date anti-virus software before opening it, and do not open attachments from unknown senders.