Page 1

Internet and Cyber Security

1. The following table shows five features of the internet and the World Wide Web.
(a) Tick () the appropriate box to indicate which feature refers to the internet and which
feature refers to the World Wide Web.

Feature Internet WWW

It is possible to send and receive emails.
Makes use of http protocols written in HTML
Uses URLs to specify the locations of websites and web
pages
Resources can be accessed by using web browsers
Makes use of TCP and IP [5]

(b) Melinda mainly uses the internet to watch films and play computer games.
Melinda sends emails from her webmail account (email account accessed through a website).

Explain whether Melinda is using the internet, or the World Wide Web (WWW), or both.

...................................................................................................................................................

...................................................................................................................................................
ZA

...................................................................................................................................................
M

...................................................................................................................................................

...................................................................................................................................................

............................................................................................................................................. [2]

(c) Give two difference between session cookies and persistent cookies.

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

............................................................................................................................................. [2]
 Page 2

(d) Describe three uses of cookies.

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

............................................................................................................................................. [3]

(e) Priya uses cookies in her website.

Five statements are given about cookies.

Tick (✓) to show if the statement is True or False.

True False
Statement
(✓) (✓)

Cookies can be used to store a customer’s credit card details

Cookies can be used to track the items a customer has viewed on a website
ZA

Cookies will corrupt the data on a customer’s computer

M

Cookies are downloaded onto a customer’s computer

Cookies can be deleted from a customer’s computer

[5]
2 Alice enters a URL into a web browser to access a webpage.

(a) State what URL represents.

U ........................................... R ........................................... L ........................................... [1]

(b) Explain how the web browser uses the URL to access the webpage.

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...............................................................................................................................................[4]
 Page 3

(c) An example of a Uniform Resource Locator (URL) is:

[Link]
Part 1 Part 2 Part 3

Identify the three parts that make up this URL.

Part 1 ........................................................................................................................................

Part 2 ........................................................................................................................................

Part 3 ........................................................................................................................................
[3]

3 RockICT is a music business that has a website to allow customers to view and buy the products
it sells.

The website consists of web pages.

(a) Describe what is meant by HTML structure and presentation for a web page.

...................................................................................................................................................

...................................................................................................................................................
ZA
...................................................................................................................................................

...................................................................................................................................................
M

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...............................................................................................................................................[4]

(b) Describe what is meant by https.

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

.......................................................................................................................................[2]
 Page 4

(c) The music company is concerned about the security of its website.

The company uses a proxy server as part of its security system.

Describe the role of a proxy server in the security system.

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................
[4]

(d) Priya is concerned about a denial of service attack (DoS) occurring on her webserver.
ZA
(i) Explain what is meant by a denial of service attack.

...........................................................................................................................................
M

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

..................................................................................................................................... [4]

(ii) Give one security device that can be used to help prevent a denial of service attack.

..................................................................................................................................... [1]
 Page 5

4(a) Tammy connects the computer to her home network. The computer has a MAC address
and an IP address.

A paragraph is given about MAC addresses and IP addresses.

Complete the paragraph using the list of terms given. Not all terms need to be used.

• compiled
• computer
• control
• dynamic
• identify
• packet
• principal
• protocol
• similar
• unique

A MAC address is a media access …………………………………………………….. address.

A network device has a ……………………………………………………… MAC address that

can help ………………………………………………. the device in the network. An IP address

is an Internet ………………………………………… address. An IP address can be static or

ZA
…………………………………………… .
[5]
M

(b) Tammy uses a browser when accessing the Internet.

Describe the role of the browser.

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

............................................................................................................................................. [4]
 Page 6

5 Eugene has a web server that stores his online shopping website.

Customers access the website using a browser.

(a) Describe how the webpages are requested and displayed on the customer’s computer.

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

............................................................................................................................................. [4]

(b) Warner says that he has a very good Internet Service Provider (ISP) that provides several services.
ZA
Five statements about ISPs are given.

Tick (3) to show if each statement is True or False.

M

True False
Statement
(3) (3)
Provides access to the Internet for customers

Can determine the maximum bandwidth available for customers

Monitors the volume of data downloaded by customers

Can provide an IP address for the customer

Stores the content for all web pages available on the Internet
[5]
 Page 7

(c) Describe what is meant by an Internet Protocol (IP) address.

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...............................................................................................................................................[4]

6 (a) Data is valuable. It needs to be kept secure and it can easily be damaged.

Give three different ways that data can be accidentally damaged.

ZA
1 ................................................................................................................................................

...................................................................................................................................................
M

2 ................................................................................................................................................

...................................................................................................................................................

3 ................................................................................................................................................

...................................................................................................................................................
[3]

(b) The Secure Socket Layer (SSL) protocol can be used to securely transmit data in online
banking.

State three other different applications that use SSL.

Application 1 .............................................................................................................................

Application 2 .............................................................................................................................

Application 3 .............................................................................................................................
[3]
 Page 8
7 Six internet terms and six definitions are listed.

Draw a line to connect each term to a correct definition.

Internet term Definition

A program that allows a user to view

Browser
webpages

Internet Service Provider The main protocol that governs the

(ISP) transmission of data using the Internet

Hyper Text Transfer Protocol The website address that is typed into the
(HTTP) address bar

Uniform Resource Locator An address given to each device on a network.

(URL) It is provided by the network

A unique address given to a device on a

MAC address
network. It is provided by the manufacturer
ZA

A company that provides a connection to

IP address
access the Internet
M

[5]

(b) The data stored by the library is archived at the end of each day. The archive is held on a
server in the library office.

The data is encrypted with an 8-bit key. As some of the data is confidential, the library wants
to make the encryption more secure.

(i) State how the library could make the encryption more secure.

...........................................................................................................................................

..................................................................................................................................... [1]

(ii) The term used to describe data before it is encrypted is plain text.

State the term used to describe encrypted data.

..................................................................................................................................... [1]
.
 Page 9

8 Choose six correct terms from the following list to complete the spaces in the paragraphs below:

• encryption • HTML tags/text • proxy server

• file name • IP address • SSL certificate
• firewall • protocol • web server name

A user enters a URL. The web browser breaks up the URL into three components:

1 ........................................................

2 ........................................................

3 ........................................................

The web server returns the selected web page.

The web browser reads the ............................................................ from the selected page and

shows the correctly formatted page on the user’s screen.

A ............................................................ is used between the user’s computer and the network to

examine the data traffic to make sure it meets certain criteria.

ZA
To speed up the access to the web pages next time, a ............................................................ is

used between the computer and web server; this device uses a cache to store the website home
M

page after it has been accessed for the first time.

[6]
 Page 10

9 (a) State three functions of a browser.

1 ................................................................................................................................................

...................................................................................................................................................

2 ................................................................................................................................................

...................................................................................................................................................

3 ................................................................................................................................................

...................................................................................................................................................
[3]

(b) The website Gerald visits uses https.

Explain what is meant by https.

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................
ZA

............................................................................................................................................. [3]
M

(c) Companies can use a range of security methods to keep their data secure.

Identify two security methods that a company can use to keep their data secure and explain
how each method can keep the data secure.

Security method 1 .....................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

Security method 2 .....................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................

...................................................................................................................................................
[6]
 Page 11

10 A company discovers malware on its network.

Explain two ways that the malware could have been introduced to the company’s network.

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

.................................................................................................................................................... [4]

11 Hans has a website selling comic books. Customers can create an account to buy the comic
books.

Customers enter a username and password to log in to their account.

ZA

(a) Customers may worry about keylogging software being used to gain unauthorised access to
their account.
M

(i) Describe how keylogging software can be used to gain unauthorised access to a
customer’s account.

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

..................................................................................................................................... [4]

(ii) Identify a feature that Hans can add to the website to limit the threat of keylogging
software.

..................................................................................................................................... [1]
 Page 12

12 Passwords are used to keep data safe.

Explain the differences between a text-based password and a biometric password.

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

..........................................................................................................................................................

......................................................................................................................................................[4]

13 Jermain uses the Secure Socket Layer (SSL) protocol for secure transmission when sending data
using the internet.

(a) Explain how the SSL protocol secures the data for transmission.

...................................................................................................................................................
ZA
...................................................................................................................................................

...................................................................................................................................................
M

............................................................................................................................................. [2]

(b) Identify an alternative protocol that could be used for secure transmission of data using the
internet.

............................................................................................................................................. [1]

(c) Give two ways that a user can identify if a website uses secure data transmission.

1 ................................................................................................................................................

...................................................................................................................................................

2 ................................................................................................................................................

...................................................................................................................................................
[2]
 Page 13

14 Three types of Internet security risk are virus, spyware and denial of service (DoS) attack.

(a) Six statements are given about Internet security risks.

Tick (3) to show whether the statement applies to virus, spyware or denial of service. Some
statements may apply to more than one Internet security risk.

Denial of
Statement Virus Spyware service
(3) (3) (3)
captures all data entered using a keyboard

can be installed onto a web server

prevents access to a website

is malicious code on a computer

is self-replicating

damages the files on a user’s hard drive

[6]

(b) Identify three other types of Internet security risks.

ZA
1 ................................................................................................................................................

2 ................................................................................................................................................
M

3 ................................................................................................................................................
[3]

(c) Some Internet security risks can maliciously damage data. Data can also be damaged
accidentally.

State three ways that data could be accidentally damaged.

1 ................................................................................................................................................

2 ................................................................................................................................................

3 ................................................................................................................................................
[3]
 Page 14

15 (a) Selma has some important personal information that she needs to email to her employer.

She wants to make sure that if the personal information is intercepted, it cannot be understood.

(i) State how Selma could email her personal data more securely.

...................................................................................................................................... [1]

(ii) Describe how your chosen solution works.

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................
ZA

...........................................................................................................................................

...................................................................................................................................... [5]
M

16 Six statements about firewalls are shown.

Tick (3) to show whether each statement is true or false.

Statement true false

(3) (3)
Firewalls can monitor incoming and
outgoing traffic.

Firewalls operate by checking traffic against

a set of rules.

Firewalls cannot block access to a certain

website.

Firewalls can be software and hardware.

Firewalls can act as intermediary servers.

Firewalls can block unauthorised traffic.

[6]
 Page 15

17 (a) A blockchain has seven blocks. Draw a diagram to show how they are all connected
to form a blockchain network.

(b) Describe what would happen if block 4 was hacked to change the sum of money
in the transaction.

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................
ZA
...........................................................................................................................................
M

...................................................................................................................................... [3]

(c) What are the main difference between digital currency and cryptocurrency?

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...................................................................................................................................... [4]
 Page 16

18 Some cybercriminals have decided to hack into a company's financial system.

Customers buy goods using digital currency.
(a) How does digital currency vary from traditional fiat currency?

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...................................................................................................................................... [2]

(b) Explain how blockchaining could protect the company and the customers from hackers.

...........................................................................................................................................

...........................................................................................................................................
ZA

...........................................................................................................................................
M

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...........................................................................................................................................

...................................................................................................................................... [4]
 Page 17
Answer Key
1 (a)

Feature Internet WWW

It is possible to send and receive emails. 
Makes use of http protocols written in HTML 
Uses URLs to specify the locations of websites and web
pages 

Resources can be accessed by using web browsers 

Makes use of TCP and IP  [5]

(b) 1 mark for identifying that she is using both.

1 mark per bullet point for justification

• using internet because sending data on the infrastructure

• using WWW because accessing a website (that is stored on a web
server operated by the webmail) that is part of the WWW

1 c Session cookie:
• temporary cookie
• ceases to exist once browser is closed or website session terminated
• doesn’t actually collect any information from user’s computer
Persistent cookie:
ZA

• stored on hard drive of user’s computer …

• … until expiry date reached or user deletes cookie
M

• remains in operation on user’s computer even when browser closed or website

session terminated
d • allows a website to remember a user’s email address and invoice details so these don’t
have to be typed in each time a user visits a website, which allows a faster log in
• serves as a memory, enabling a website to recognise users every time they visit
the website
• saves user's items in a virtual shopping basket
• tracks internet habits and user’s website history/favourites (bookmarks)/
recommendations made
• stores customer payment details (in secure format)
• stores user preferences
• allows progress in online games/quizzes to be stored
 Page 18
1(e) 1 mark per each correct row.

True False
Statement
(9) (9)
Cookies can be used to store a customer’s credit card details 9

Cookies can be used to track the items a customer has viewed

9
on a website

Cookies will corrupt the data on a customer’s computer 9

Cookies are downloaded onto a customer’s computer 9

Cookies can be deleted from a customer’s computer 9

2(a) Uniform Resource Locator

2(b) Four from:

• The web browser sends URL to DNS
• DNS stores an index of URL and matching IP address
• DNS searches for URL to obtain the IP address
• IP address sent to web browser, (if found)
• Web browser sends request to IP of webserver
• Webserver sends web page to web browser
ZA
• Web browser interprets HTML to display web page
• If URL not found DNS returns error
M

2(c) – Part 1 (access) protocol

– Part 2 domain (name)
– Part 3 filename

3(a) Any four from:

− Structure and presentation are defined using (mark-up) tags
− Structure and presentation dictate the appearance of the website
− Structure is used for layout
− Example of structure
− Presentation is used for formatting / style
− Example of formatting
− Separate file / CSS can be used for presentation content

3(b) Any two from:

− Hypertext Transfer Protocol Secure // it is the access protocol // It is a protocol
− It means the website uses SSL/TLS
− It means data sent (to and from the webserver) is encrypted
 Page 19

3(c) Any four from:

− Prevents direct access to the webserver // Sits between user and webserver
− If an attack is launched it hits the proxy server instead // can be used to help
prevent DDOS // help prevent hacking of webserver
− Used to direct invalid traffic away from the webserver
− Traffic is examined by the proxy server // Filters traffic
− If traffic is valid the data from the webserver will be obtained by the user
− If traffic is invalid the request to obtain data is declined
− Can block requests from certain IP addresses

3(d)(i) Four from:

− Designed to deny people access to a website
− A large number/numerous requests are sent (to a server)
− all at the same time
− The server is unable to respond/struggles to respond to all the requests
− The server fails/times out as a result

3(d)(ii) One from:

− Proxy server
− Firewall
4(a) One mark for each correct term in the correct place:
− Control
ZA
− Unique
− Identify
− Protocol
M

− Dynamic

4(b) Any four from:

− Allows user to view web pages
− Renders HTML
− Allows user to bookmark/favourite web pages
− Provides navigation features
− Allows (multiple) tabs
− Stores cookies
− Records history of pages visited
− Has a homepage
− Runs active script
− Allows files to be downloaded from website/internet
− Sends a request to the IP address/web server (to obtain the contents of a web page)
− Sends URL to DNS
− Manages HTTP/HTTPS protocol
 Page 20

5(a) Any four from:

− Browsers sends URL to DNS
− … using HTTP
− DNS finds matching IP addresses for URL
− … and sends IP address to web browser
− Web browser sends request to IP address/web server for web pages
− Web pages are sent from web server to browser
− Browser renders HTML to display web pages
− Any security certificates are exchanged/authenticated // SSL/HTTPS is used to secure the data
− … encrypting any data sent

(b) One mark for each correct row:

True False
Statement
() ()

Provides access to the Internet for customers 

Can determine the maximum bandwidth available for customers 

Monitors the volume of data downloaded by customers 

Can provide an IP address for the customer 

ZA
Stores the content for all web pages available on the Internet 
M

(c) Four from:

– IP address is used to identify a device (on the Internet / network)
– IP address is allocated by the network/ ISP
– Can be used in place of URL
– IP addresses can be IPv4 or IPv6
– IP address can be static «
– ... meaning it doesn’t change each time it is connected to the Internet
– IP address can be dynamic «.
– « meaning that it can change each time a device is connected to the Internet
– Any valid example (e.g. [Link] or xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx)

6(a) Any three from:

– Human error (e.g. deleting/overwriting data)
– Physical damage
– Power failure/surge
– Hardware failure
– Software crashing
 Page 21

6(b) Any three from:

– Online shopping // Online payment systems // Online booking
– Email
– Cloud based storage
– Intranet/extranet
– VPN
– VoIP // video conferencing
– Instant messaging (IM) // social networking // online gaming

7 1 mark for each correct line (to a maximum of 5)

A program that allows a user to view
Browser
webpages

Internet Service Provider The main protocol that governs the

(ISP) transmission of data using the Internet

Hypertext Transfer Protocol The website address that is typed into

(HTTP) the address bar
ZA
Uniform Resource Locator An address given to each device on a
(URL) network. It is provided by the network
M

A unique address given to a device on

MAC address a network. It is provided by the
manufacturer

A company that provides a connection

IP address
to access the Internet

7(b)(i) • Increase the length of the key // make key 12-bit, etc

7(b)(ii) • Cypher text

8 1 mark per correct word

1 protocol
2 web server name accept these three items in any order
3 file name

HTML tags/text
firewall
proxy server [6]
 Page 22
9(a) Three from:
• Display a web page
• Sends a request to the web server
• Receives data from web server
• Translates HTML files
• Processes client-side script, e.g. JavaScript
• Store favourites
• Store history
• Navigation forward and backward
• Check security
• Store / access cookies
• Find specific text within a web page
• Downloading file from the web
• Allows a homepage
• Allows multiple tabs / web pages to be opened
• Stores data in its cache

9(b) Three from:

• Hypertext Transfer Protocol Secure // It is a protocol «
• « that is a set of rules/standards
• Secure version of HTTP
• Secure website // secures data
• Uses TLS / SSL
• Uses encryption
ZA
M

9(c) Six from (maximum three marks per security method):

• Firewall «
• « Monitors the traffic
• « Blocks any traffic that doesn’t meet the criteria / rules

• (Strong) password // biometric «

• « Data cannot be accessed without the use of the password / bio data
• « Prevent brute force attacks

• Encryption «
• « Data will be scrambled
• « Key is required to decrypt the data
• « If data is stolen it will be meaningless

• Physical security methods «

• « The physical security will need to be overcome
• « This can help deter theft of the data

• Antispyware «
• « will remove any spyware from system
• « will prevent data being relayed to a third party
 Page 23

10 Four from:
• A hacker could have hacked the network «
• « and downloaded the malware onto the network

• Clicking a link/attachment/downloaded a file from an email/on a webpage «

• « the malware could have been embedded into the link/attachment/file

• Opening an infected software package «

• « this would trigger the malware to download onto the network

• Inserting an infected portable storage device «

• « when the drive is accessed the malware is downloaded to the network

• Firewall has been turned off «

• « so malware would not be detected/checked for when entering network

• Anti-malware has been turned off «

• « so malware is not detected/checked for when files are downloaded

11(a)(i) Any four from:

− Keylogger is downloaded without knowledge (by example)
− Keylogger records key presses
− Data is relayed back to third party
− Data is analysed // Patterns in data could reveal log-in details …
ZA
− … details can then be used to log into the account

11(a)(ii) Any one from:

M

− Use drop-down boxes for password

− Two-step verification (by example)
− Partial password requests
− Onscreen / virtual keyboard

12 Any four from, must include at least one

difference: Text based password
• (a minimum number of) characters that can be typed at a keyboard
• set / can be changed by the user
Biometric password
• a stored physical measurement e.g. fingerprint
• that is compared to a previously scanned human measurement
Difference
• text based passwords are easier to hack than biometric passwords
• biometric passwords are unique to that person/cannot be shared

13(a) − Enables an encrypted link (between the browser and the web server) //
It encrypts the data
− … based on the authentication of an (SSL) certificate // and will only send
it if the certificate is authentic
 Page 24

13(b) − Transport Layer Security // TLS

13(c) Any two from:

− URL begins with HTTPS
− Padlock symbol is locked
− Check the certificate is valid

14(a) One mark per each correct row.

Virus Spyware Denial of

Statement () () service
()

captures all data entered using a keyboard 

can be installed onto a web server  

prevents access to a website 

is malicious code on a computer  

is self-replicating 
ZA

damages the files on a user’s hard drive 

M

14(b) Any three from:

− Phishing
− Pharming
− Hacking // cracking

14(c) Any three from:

− Human error
− Power failure/surge
− Hardware failure
− Software failure
− Fire
− Flood

15(a)(i) Encryption

15(a)(ii) Any five from:

– Her personal details before encryption is the plain text
– The plain text/her personal details is encrypted using an encryption algorithm
– The plain text/her personal details is encrypted using a key
– The encrypted text is cypher/cipher text
– The key is transmitted separately (from the text)
– The key is used to decrypt the cypher text (after transmission)
 Page 25

16 Statements
True False
 
Firewalls can monitor incoming and outgoing traffic. 
Firewalls operate by checking traffic against a set of

rules.
Firewalls cannot block access to a certain website 
Firewalls can be software and hardware. 
Firewalls can act as intermediary servers. 
Firewalls can block unauthorised traffic. 

17 a

b If block 4 is hacked and any data is changed, then the hash value for the block will change;
this will result in the chain being broken since block 5 can no longer point to block 4.
ZA
c • cryptocurrency uses cryptography to track transactions
• cryptocurrency is decentralised unlike digital currencies which are centralised
M

• traditional digital currencies are regulated by central banks and governments

• unlike normal digital currencies, cryptocurrency transactions are publicly available and can
be tracked/money monitored
• cryptocurrency uses blockchaining

17 a digital currency exists purely in a digital format; there is no physical money

(fiat currency); digital currency involves electronic transfer of funds
b if a hacker accessed a block and changed anything (for example, an amount
of money) …
• … the hash value of the block would change
• this means that all blocks beyond the hacked block would now be invalid because
the chain would be broken
• use of 'proof-of-work' is necessary before a block can be added to the chain …
• … thus preventing a hacker quickly creating a new block to complete the chain