Pearson BTEC Digital Information Technology Component 3 exam questions

Build a practice paper from 267 exam-style questions, each with its mark scheme and example answers. Print it, or answer it on paper and then open the mark schemes. Or browse the questions by topic.

Practice paper

10 questions · 25 marks · this week's paper: choose topics above to build your own

Pick again

1State / Give two2 marksImpacts of modern technology on organisations Swap Remove

Greenmantle Garden Services is a company that maintains gardens for its customers. Its staff travel to customers' homes and use mobile phones to keep in touch with the office.

State two things that could affect the mobile phone signal where staff are working.

[2 marks]

Mark scheme

Award one mark for each correct thing, up to a maximum of two marks from:

Poor coverage/no signal in remote or rural areas
Hills/valleys or tall buildings blocking the signal
Bad weather/extreme weather
Network congestion at busy times/too many users
Faulty or damaged transmitter/mast
Power cut affecting the network/mast
Being indoors/underground/in a basement
Maintenance or upgrade work on the network

Do not accept: a flat battery, a lost or broken phone, no credit on the phone - these are device problems, not the network being unavailable

Accept any other appropriate response.

Example answers and how they were marked

Full marks2/2

Poor coverage in rural villages and a faulty transmitter mast

Why: Two correct things that affect the signal, each earning one mark (1)+(1)

Some marks1/2

Hills blocking the signal and the member of staff's phone battery being flat

Why: Hills blocking the signal credited (1); a flat battery is a device problem, not the network being unavailable, so is not credited

No marks0/2

Staff forgetting to charge their phones and leaving the phone switched off

Why: Both are device or user problems rather than the network being unavailable, so neither can be credited

2State / Give two2 marksInternal Threats Swap Remove

Lambley Aero Club offers flying lessons and aircraft hire. Staff use the club's online booking system to book aircraft for members. One way a member of staff could override a security control is by turning off the antivirus software.

Give two other ways a member of staff could override security controls on the booking system.

[2 marks]

Mark scheme

Award one mark for each correct way, up to a maximum of two marks from:

Logging in using another member of staff's login details or password/an administrator account
Sharing a password/login details with another member of staff
Removing the password protection from a device or file so anyone can open it
Changing the access permissions on a file or folder so that more people can open it
Using a USB device in a port that has been blocked/disabled
Installing software that the organisation has banned/not approved
Turning off/disabling the firewall
Turning off the filtering/blocking of websites

Do not accept: turning off the antivirus software – this is the example given in the question

Do not accept: forgetting a password or not logging out of a system – these do not override a security control

Allow: giving a password to another member of staff, or using a password another member of staff has given them, as both get past the login control

Accept any other appropriate response.

Example answers and how they were marked

Full marks2/2

Logging in using the manager's login details
Using a USB stick in a port that has been blocked

Why: Using another member of staff's login details (1) and using a blocked USB port (1) are both creditworthy ways of overriding a control.

Some marks1/2

Using the manager's login details to log in
Not logging out of the booking system when they finish

Why: Logging in with another member of staff's details is credited (1); not logging out does not override a security control and is on the Do not accept line.

No marks0/2

Turning off the antivirus software so a game could be installed
Forgetting their password and asking IT to reset it

Why: The first is the example given in the question, and forgetting a password does not override a security control, so neither is credited.

3State / Give two2 marksWhy Systems Are Attacked Swap Remove

Linton Vale Funeral Service is a company of funeral directors. A former employee is one type of person who may carry out a personal attack on the company's systems.

State two other types of person who may carry out a personal attack on a company's systems.

[2 marks]

Mark scheme

Award one mark for each correct type of person, up to a maximum of two marks from:

A current employee/member of staff who is unhappy/disgruntled
A customer/client with a complaint/grudge against the company
A supplier/contractor whose contract was ended
A person who was refused a job by the company
An ex-partner/relative/friend of an employee with a grudge
Someone with a personal dispute with a member of staff
A member of the public with a grudge against the company

Do not accept: former employee – this is the example given in the question

Do not accept: a rival company/competitor or someone stealing data to sell – these are industrial espionage and financial gain, not a personal attack

Accept any other appropriate response.

Example answers and how they were marked

Full marks2/2

A customer whose complaint the company ignored, and a member of staff who has been passed over for promotion.

Why: Customer with a complaint (1) and a current employee who is unhappy (1).

Some marks1/2

A customer whose complaint was ignored, and a rival funeral company that wants to win the same customers.

Why: Customer with a complaint (1); a rival company is industrial espionage, not a personal attack (0).

No marks0/2

A former employee who was dismissed, and a hacker who wants to steal customer data to sell it.

Why: Former employee repeats the example in the stem (0); selling stolen data is financial gain/data theft, not a personal attack (0).

4State / Give two2 marksData level protection Swap Remove

Elderbrook Falconry Centre gives flying displays and runs bird-of-prey experience days for the public. The centre stores booking and customer data on its network. It has recently installed a firewall on the network.

Give two ways a firewall can protect the centre's network.

[2 marks]

Mark scheme

Award one mark for each correct way a firewall can protect the network, up to a maximum of two marks from:

Monitors/filters incoming (and outgoing) traffic
Blocks unknown connections/IP addresses
Blocks specific ports
Checks traffic against an allowlist/denylist (whitelist/blacklist)
Alerts the user to unusual/suspicious activity
Stops unauthorised access/hackers

Award one mark only if both answers describe monitoring or filtering traffic (for example monitoring traffic and checking it against a denylist)

Do not accept: deleting or quarantining infected files as this is done by anti-virus software

Accept any other appropriate response.

Example answers and how they were marked

Full marks2/2

It monitors incoming and outgoing traffic. It blocks connections from unknown IP addresses.

Why: Two different actions named from the mark scheme: monitors/filters traffic (1) and blocks unknown connections/IP addresses (1).

Some marks1/2

It monitors incoming traffic. It checks traffic against a denylist.

Why: Both answers describe monitoring or filtering traffic, so the guidance limits this to one mark for monitoring/filtering traffic (1).

No marks0/2

It deletes viruses from files before they open.

Why: Deleting infected files is done by anti-virus software, not a firewall, so the Do not accept line rules this out (0).

5State / Give two2 marksFinding weaknesses and improving system security Swap Remove

Bluefin Kayak Tours is a company that runs guided kayak trips. A grey hat hacker has found a weakness in its online booking system.

State two characteristics of a grey hat hacker.

[2 marks]

Mark scheme

Award one mark for each correct characteristic of a grey hat hacker, up to a maximum of two marks from:

Outsider/not employed by the company
Does not exploit the weakness for personal gain
May report the weakness to the organisation
May release the exploit to the public
Finds a vulnerability without permission from the company

Do not accept: paid/invited by the company – this describes a white hat hacker

Accept any other appropriate response.

Example answers and how they were marked

Full marks2/2

An outsider. They do not exploit the weakness for personal gain.

Why: Gives two correct characteristics: outsider (1) and does not exploit for personal gain (1).

Some marks1/2

They are an outsider.

Why: Gives one correct characteristic (1); a second characteristic is missing.

No marks0/2

They are paid by the company to test the system.

Why: Describes a white hat hacker, not a grey hat hacker, so no mark.

6Explain one2 marksSelecting cloud platforms and services Swap Remove

Wroxham Beekeepers Association is a group that runs events for local beekeepers. It stores membership records and event plans in a cloud service. The association is deciding whether to use the free or paid version of the service.

Explain one reason why the association might choose the paid version of the cloud service.

[2 marks]

Mark scheme

Award one mark for a correct reason and one mark for a justification for that reason, up to a maximum of two marks.

It has more features/functionality (1) because the free version has limited features (1)
It has no adverts (1) so the interface is not cluttered or distracting for volunteers (1)
It provides technical support (1) so the association can get help if there is a problem (1)
It includes backups (1) so membership records can be restored if data is lost (1)
It receives regular updates (1) which can keep the service secure and working properly (1)
It provides more storage (1) so all membership records and event plans can be kept (1)

Allow mix and match if it makes sense

Do not accept: 'it is free'/'it costs nothing', as these describe the free version

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks2/2

It includes backups, so membership records can be restored if they are lost.

Why: Backups (1) and a justification for backups (1).

Some marks1/2

It has more features.

Why: Names extra features (1); there is no justification for why this makes the paid version worth choosing, so one mark.

No marks0/2

It is free, so the association does not have to pay.

Why: Describes the free version, not a reason to choose the paid version; no credit.

7Explain one3 marksFeatures of cloud computing Swap Remove

Penhaven Ice Rink is an ice rink that runs public skating sessions and lessons. Staff use an online application to take bookings and manage the lesson timetable.

Explain one reason why the company uses online applications.

[3 marks]

Mark scheme

Award one mark for a correct reason, one mark for a justification for that reason, and one mark for an expansion of the justification, up to a maximum of three marks.

The software updates automatically (1) as the provider brings out the new versions (1) so the company does not have to install the updates on each computer itself (1)
There is no need for in-house IT staff (1) because the provider is responsible for maintaining the software (1) so the company does not pay a technician to fix it (1)
It is cost effective (1) as the company pays a monthly subscription rather than buying the software (1) so the company does not pay a large amount before it starts using it (1)
The software is scalable (1) as the provider can add or remove user accounts when needed (1) so the company only pays for the users it has at the time (1)

Do not allow mix and match.

Allow: 'no manual updates needed' or 'the provider does the updates' for the automatic updates reason.

Allow: 'cost effective'/'cheaper' where it is justified with the monthly subscription or the lack of IT staff.

Do not accept: 'cheap' or 'cost effective' on their own; answers about cloud storage rather than online applications.

Accept any other appropriate wording/phrasing.

Example answers and how they were marked

Full marks3/3

The software updates automatically as the provider brings out new versions so the company does not have to install the updates on each computer itself

Why: Linked reason (1), justification (1) and expansion (1).

Some marks2/3

There is no need for in-house IT staff because the provider is responsible for maintaining the software

Why: Correct reason (1) with a justification (1), but no expansion of the justification.

No marks0/3

All the booking details are kept in the cloud so the provider makes backups of them

Why: This is about cloud storage, not online applications, so no marks.

8Explain one3 marksImpact of security breach Swap Remove

Farlow Glass Studio designs and makes stained glass windows for homes and churches. Its staff use a shared computer system to store designs and process customer orders. A hacker has broken into the company's computer system.

Explain one way the breach could reduce the company's productivity.

[3 marks]

Mark scheme

Award one mark for a correct way, one mark for a justification for that way and one mark for an expansion of the justification, up to a maximum of three marks.

Staff cannot access files or the computer system (1) while the breach is investigated and fixed (1) so no designs or orders can be worked on (1)
Staff have to reset their passwords (1) because the breach may have exposed them (1) which takes time away from their normal work (1)
Data has to be recovered from backups (1) so staff have to re-enter the orders that were lost (1) which delays the windows being finished (1)
Staff are asked to help investigate the breach (1) because they know how the system is normally used (1) which means they are not making any windows (1)
Staff cannot use email or the shared network (1) so they cannot share designs with colleagues (1) which means each job takes longer to complete (1)

The expansion must add to the justification, e.g. saying how work is delayed, not just repeat it

Allow mix and match if the whole response makes sense

Do not accept ‘the company will lose money’/any reference to financial loss

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks3/3

Staff will have to spend time changing their passwords because the breach may have exposed them, so they cannot work on orders during that time.

Why: Way (1), justification (1) and expansion (1) are linked, with the expansion saying how time is lost.

Some marks2/3

Data has to be recovered from backups so staff have to re-enter the orders that were lost.

Why: Way (1) and justification (1), but no expansion of the justification.

No marks0/3

The company will lose money so staff will be less productive.

Why: Financial loss is a different impact and the answer does not say how the breach reduces productivity.

9Describe3 marksFinding weaknesses and improving system security Swap Remove

Dunholme Playhouse is a theatre that sells tickets online. Its website stores customers' booking and payment details. The theatre has asked an ethical hacker to test the website.

Describe what is meant by ethical hacking, including white hat and grey hat hackers.

[3 marks]

Mark scheme

A description of ethical hacking, including white hat and grey hat hackers. To include three from

Ethical hacking is testing/breaking into a system to find weaknesses/vulnerabilities (1)
Without causing damage or loss to the system (1)
White hat hackers are paid/invited/authorised by the organisation (1)
Grey hat hackers are outsiders/not authorised by the organisation (1)
Grey hat hackers find a vulnerability/weakness but do not exploit it for personal gain (1)
Grey hat hackers may report the vulnerability to the organisation (1)
Grey hat hackers may release the vulnerability to the public (1)

Do not accept: hacking for personal gain or to steal data (this is black hat/unethical hacking).

Accept any other appropriate wording/phrasing.

Example answers and how they were marked

Full marks3/3

A white hat hacker is invited by the organisation. A grey hat hacker is an outsider who finds a weakness but does not exploit it for personal gain.

Why: White hat invited (1); grey hat outsider (1); grey hat finds a weakness without exploiting it (1).

Some marks2/3

A white hat hacker is paid by the organisation. A grey hat hacker is a hacker who reports weaknesses publicly.

Why: White hat paid (1); grey hat may release the vulnerability to the public (1). No grey hat outsider or no-personal-gain point.

No marks0/3

A white hat hacker is an outsider who hacks for personal gain, and a grey hat hacker is paid by the organisation to test its security.

Why: The roles are reversed: white hat hackers are authorised, and grey hat hackers are not paid by the organisation. Hacking for personal gain is on the Do not accept line, so no creditworthy point is given.

10Explain two4 marksImpacts of modern technology on individuals Swap Remove

Wroxham Hedgehog Rescue is a charity that looks after sick and injured hedgehogs. Its staff often work alone and can find the work stressful. The staff all use smartphones and online calendars.

Explain two ways modern technology can have a positive impact on the mental wellbeing of its staff.

[4 marks]

Mark scheme

Award one mark for each correct way and one mark for a justification of each way, up to a maximum of four marks.

Allows separation from a stressful environment (1) by using games/videos/music to take a break and relax (1)
Helps the individual feel in control of their own schedule (1) as an electronic diary/calendar shows them where they need to be (1)
Lets the individual adjust their schedule to meet the needs of their family (1) so they can fit work around childcare or appointments (1)
Reduces loneliness (1) as they can keep in touch with friends/family using messaging apps/video calls (1)
Builds self-confidence (1) as they can find reliable information for themselves instead of needing to ask others (1)
Provides reassurance (1) through messages/calls from others when they are unsure what to do (1)

Do not accept 'makes them happy' or 'uses social media' on its own, as no benefit to mental wellbeing is given

Allow mix and match if it makes sense

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks4/4

A member of staff can use games or music to separate themselves from a stressful environment so they can relax after a difficult day. They can also use an online calendar to feel in control of their schedule because it reminds them where they need to be.

Why: Linked way (1) and justification (1) for separation from a stressful environment, plus linked way (1) and justification (1) for feeling in control of their own schedule.

Some marks2/4

They can message friends and family using a messaging app so they do not feel lonely.

Why: Reduces loneliness (1) justified by keeping in touch with friends/family (1); only one way is given, so capped at two marks.

No marks0/4

Technology makes them happy because they can use social media.

Why: 'Makes them happy' is vague and 'uses social media' on its own gives no benefit to mental wellbeing, so neither earns a mark.

Pearson BTEC Digital Information Technology Component 3 Exam Questions

Build a paper

Practice paper

Questions by topic

A1 Modern Technologies

A2 Impact of modern technologies

B1 Threats to data

B2 Prevention and management of threats to data

More ways to revise Pearson BTEC Digital Information Technology Component 3