Section A

Question 1

What is an internal threat

Answer 1

An internal threat refers to the risk of someone inside a company that could exploit a system to cause damage or steal data

Question 2

What is an external threat

Answer 2

An external threat refers to someone outside of a company that attempts to exploit system vulnerabilities such as hacking or social engineering

Question 3

What is Malware

Answer 3

Software that is designed to cause harm to your IT system

Question 4

What is spyware

Answer 4

This is a form of malware that gathers information after infecting a user and secretly sending it to third-party users

Question 5

What is ransomware

Answer 5

This prevents you from accessing your computer, it often encrypts the storage devices and demands a sum of money, in order to gain access back

Question 6

What are rootkits

Answer 6

They are used to get unauthorised remote administrator access, they spread by hiding software by appearing to be legitimate, but can steal data or hide other malware within the system

Question 7

What is commercial hacking

Answer 7

When Companies hack for the purpose of corporate espionage, finding out about their competitor plans, products and finances

Question 8

What is government hacking

Answer 8

This when companies or governments hire white hat hackers to detect system vulnerabilities so that they can prevent black hat hackers from getting in the system

Question 9

What is sabotage

Answer 9

Sabotage refers to the activity used to deliberately disrupt services this could include distributing malware and denial of service attacks

Question 10

What is social engineering

Answer 10

This refers to techniques that are used to deceive people to give their private and confidential information, this can be through the form of a phishing email.

Question 11

What is operational loss

Answer 11

This refers to a loss that damages the capability of an organisation, such as manufacturing output, service availability or service data

Question 12

What is financial loss

Answer 12

This refers to the loss where an organisation loss wealth, such as compensation, legal fees or increased costs due to the threat

Question 13

What is a system vulnerability

Answer 13

This refers to a weak point in the system which can be exploited

Question 14

What is the data protection act?

Answer 14

This act was introduced in 1998 to protect the privacy of individuals by ensuring that their confidential is processed in an ethical manner

Question 15

Who is responsible for investigating possible data protection violations ad what are the consequences

Answer 15

The information commissioners office is an independent body that is responsible for this, if an organization has been breaching any of these regulations they can be fined up to £500000

Question 16

What is the general data protection regulations

Answer 16

This was enforced on 25th May 2018 in the EU member states, this replaced the DPA but most of it is similar

Question 17

LIST 3 POINTS OF THE DATA PROTECTION ACT

Answer 17

• PERSONAL DATA SHOULD NOT BE KEPT FOR LONGER THAN IT’S NECESSARY PURPOSES
• PERSONAL DATA SHOULD NOT BE TRANSFERRED TO A COUNTRY OR TERRITORY OUTSIDE THE EU WITHOUT ADDEQUATE PROTECTION
• APPROPIATE TECHNICAL AND ORGANISATIONAL MEASURES SHOULD BE TAKEN TO PROTECT DATA

Question 18

WHAT IS THE COMPUTER MISUSE ACT

Answer 18

THIS LAW BROUGHT INTO FORCE TO PROTECT USERS AGASINT THEFT AND DAMAGE OF THE INFORMATION STORED ON THEIR IT SYSTEMS

Question 19

What is the telecommunications law(2000)?

Answer 19

This law allows businesses to monitor the activity on their network so that they can protect themselves from cyber threats.

Question 20

What were the 3 crimes that were covered by the computer misuse act?

Answer 20

Offence 1 - unauthorised access to computer material could result in 2 years of imprisonment
Offence 2 - unauthorised access with the intent to cause harm or damage, this can result in up to 5 years of imprisonment
Offence 3 - impairing the operation of a computer, this could include changing data, is punishable of 10 years imprisonment

Question 21

What rules do organisations need to comply with when monitoring employees on their network

Answer 21

• To be ensured that legislations of the company are being followed
• To ensure employees are fulfilling their duties
• To prevent or detect crime
• To secure and ensure the effective operation of the network