Data level protection exam questions

14 Pearson BTEC Digital Information Technology Component 3 exam-style questions on Data level protection (B2 Prevention and management of threats to data), 42 marks in all. Answer them on paper or print them, then open the mark schemes and example answers to see how each is marked.

1State / Give two2 marks

Elderbrook Falconry Centre gives flying displays and runs bird-of-prey experience days for the public. The centre stores booking and customer data on its network. It has recently installed a firewall on the network.

Give two ways a firewall can protect the centre's network.

[2 marks]

Mark scheme

Award one mark for each correct way a firewall can protect the network, up to a maximum of two marks from:

Monitors/filters incoming (and outgoing) traffic
Blocks unknown connections/IP addresses
Blocks specific ports
Checks traffic against an allowlist/denylist (whitelist/blacklist)
Alerts the user to unusual/suspicious activity
Stops unauthorised access/hackers

Award one mark only if both answers describe monitoring or filtering traffic (for example monitoring traffic and checking it against a denylist)

Do not accept: deleting or quarantining infected files as this is done by anti-virus software

Accept any other appropriate response.

Example answers and how they were marked

Full marks2/2

It monitors incoming and outgoing traffic. It blocks connections from unknown IP addresses.

Why: Two different actions named from the mark scheme: monitors/filters traffic (1) and blocks unknown connections/IP addresses (1).

Some marks1/2

It monitors incoming traffic. It checks traffic against a denylist.

Why: Both answers describe monitoring or filtering traffic, so the guidance limits this to one mark for monitoring/filtering traffic (1).

No marks0/2

It deletes viruses from files before they open.

Why: Deleting infected files is done by anti-virus software, not a firewall, so the Do not accept line rules this out (0).

2State / Give two2 marks

Millgarth Cinema is an independent cinema. Customers book tickets and log in to their accounts on the cinema's website.

Give two interface design features that could put the cinema's customer data at risk.

[2 marks]

Mark scheme

Award one mark for each correct interface design feature, up to a maximum of two marks from:

Autocomplete/remembering previous entries
'Stay logged in'/remember me/keep me signed in
Not obscuring data entry/the password shown on screen
Pre-filled fields/saved details in a form
Saving card details for next time

Do not accept: encryption as this is not an interface design feature

Accept any other appropriate response.

Example answers and how they were marked

Full marks2/2

Autocomplete. A 'stay logged in' option.

Why: Names two features on the mark scheme: autocomplete (1) and 'stay logged in' (1).

Some marks1/2

Autocomplete remembers what the customer has typed before. The website should look attractive.

Why: Autocomplete (1) is creditworthy. How attractive the website looks is not an interface design feature that puts data at risk, so no second mark.

No marks0/2

The cinema should encrypt the customer data so nobody can read it.

Why: Encryption is a security measure, not an interface design feature, so it is ruled out by the Do not accept line.

3State / Give two2 marks

Wrekin Bakery is a family bakery. Office staff use email and USB drives to receive orders from suppliers, and the bakery has anti-virus software installed.

State two things anti-virus software should scan.

[2 marks]

Mark scheme

Award one mark for each correct thing anti-virus software should scan, up to a maximum of two marks from:

Files/documents/programs
Incoming emails/email attachments
Removable storage/USB/flash drives
Downloads
Links in emails or on websites (when clicked)

Do not accept: incoming network traffic/connections as this is a firewall function

Accept any other appropriate response.

Example answers and how they were marked

Full marks2/2

Incoming emails. USB drives.

Why: Incoming emails (1) and removable storage/USB drives (1) are both on the mark scheme.

Some marks1/2

It scans files on the office computers. It removes any viruses it finds.

Why: Files (1) is a creditworthy scan target; removing viruses is what anti-virus does, not something it scans, so it earns nothing here.

No marks0/2

It blocks hackers from connecting to the bakery's network.

Why: Blocking connections is a firewall function, so the Do not accept line rules it out.

4Explain one2 marks

Sandlewick Motorhome Hire rents motorhomes to holidaymakers. Office staff use a computer at the front desk to take bookings and card payments. The company is reviewing how well this computer is protected.

Explain one way Sandlewick Motorhome Hire could harden this computer.

[2 marks]

Mark scheme

Award one mark for a correct way of hardening the computer and one mark for a justification for that way, up to a maximum of two marks.

Disabling the unused USB ports (1) so malware cannot be installed from a memory stick/nothing can be copied onto one (1)
Installing operating system updates/patches as they are released (1) which fixes known security weaknesses so that they cannot be exploited (1)
Removing software/services that staff do not use (1) which reduces the attack surface/leaves fewer ways in for malware (1)
Limiting staff to the files they need for their job/principle of least privilege (1) so staff cannot open or change payment details they do not need (1)
Resetting the default/BIOS password (1) so visitors cannot change the computer's settings (1)
Setting up a fingerprint scanner/biometrics to log on (1) so only that member of staff can unlock the computer (1)

Allow mix and match if it makes sense

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks2/2

The company could disable the USB ports on the computer so that nobody can plug in a memory stick and install malware or copy the customer details.

Why: Names a hardening way, disabling the USB ports (1), and justifies it because data cannot be copied or malware installed through them (1).

Some marks1/2

The company could install the latest software updates, which means the computer runs faster and does not crash.

Why: Installing updates is credited (1), but running faster is not a justification for protecting the data, so the second mark is not awarded.

No marks0/2

The company could add a 'stay logged in' tick box to the login screen so staff do not have to type their password in every time.

Why: No creditworthy point: 'stay logged in' is an interface design feature that leaves the user logged in, so anyone at the desk can see the data; it is not a device hardening method.

5Explain one2 marks

Elmsworth Stables gives riding lessons to the public. It keeps customers' booking and payment details on its office computers. The anti-virus software on these computers was installed two years ago and has not been updated since.

Explain one reason why the stables should update its anti-virus software.

[2 marks]

Mark scheme

Award one mark for a correct reason and one mark for a justification for that reason, up to a maximum of two marks.

It downloads the latest virus definitions/database of known malware (1) so it can recognise and detect malware that has been written since the software was installed (1)
The software can only detect malware that is in its database (1) so an out-of-date version will miss new threats and infected files will not be removed/quarantined (1)
It can warn staff about the latest threats (1) so they know which links/attachments not to open (1)
It can be set to update automatically (1) so staff do not forget and leave the software out of date (1)

Do not accept: answers about blocking hackers or filtering internet traffic, as this is what a firewall does, not anti-virus software

Allow mix and match if it makes sense

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks2/2

It downloads the latest virus definitions each time it updates, so it can detect malware that was written after the software was installed.

Why: Gives the reason, downloading the latest virus definitions (1), and justifies it because newer malware is then recognised (1).

Some marks1/2

The anti-virus software should be updated so it has the latest virus definitions, which makes it quicker to run scans.

Why: The latest virus definitions is credited (1), but running scans more quickly is not a justification for updating the software, so the second mark is not awarded.

No marks0/2

It should be up to date so it can block hackers from getting in through the internet connection.

Why: No creditworthy point: this confuses anti-virus software with a firewall, which is a different type of protection.

6Explain one2 marks

Silverbank Driving School teaches people to drive. Its instructors use laptops in the cars to book lessons and record test results. Device hardening means making a device more secure.

Explain one reason why device hardening is important for these laptops.

[2 marks]

Mark scheme

Award one mark for a correct reason and one mark for a justification for that reason, up to a maximum of two marks.

It reduces the number of weaknesses/attack surface (1) because unused software, services and ports are removed or closed (1)
It stops malware being installed from a portable device (1) because unused USB ports are disabled (1)
It reduces the risk of hacking/unauthorised access (1) because operating system patches are installed as they are issued to fix known vulnerabilities (1)
It prevents unauthorised changes to the laptop's settings (1) because default/BIOS passwords are reset/changed (1)
It protects the laptop from malicious software (1) because a firewall and anti-virus software are installed and kept updated (1)

Do not accept: answers about insuring the laptops or other non-technical measures, as these do not harden the device

Allow mix and match if it makes sense

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks2/2

The unused USB ports can be disabled so an infected memory stick cannot be plugged in to install malware on the laptop.

Why: Gives a hardening method as the reason (1) and justifies it because portable devices cannot then be used to install malware (1).

Some marks1/2

It reduces the risk of hacking.

Why: Gives a correct reason (1) but no justification for that reason, so the second mark is not awarded.

No marks0/2

Device hardening means the laptops can be insured, so the school gets its money back if one is stolen.

Why: No creditworthy point: insurance is not a way of hardening a device and does not protect the data on it.

7Explain one3 marks

Harlowden Bookbinders repairs and binds old books for customers. It stores customer orders, photographs and invoices on its office computers. The company makes a backup every night but has never tested recovering the data.

Explain why it is important that the company has a procedure for backing up and recovering its data.

[3 marks]

Mark scheme

Award one mark for a correct point, one mark for a justification for that point and one mark for an expansion of the justification, up to a maximum of three marks.

Data can be restored if it is lost or damaged (1) because a copy is kept separately from the original (1) so the company can carry on processing orders after a failure (1)
Backups can be scheduled to run automatically (1) so a recent copy is made without staff remembering (1) which reduces how much work is lost if the system fails (1)
A recovery procedure can be tested (1) to check the backup can actually be restored (1) so the company knows its data will be usable in an emergency (1)
Copies can be stored off site/in the cloud (1) so they are not lost if there is a fire or theft at the workshop (1) meaning customer orders and invoices are still available (1)
Regular backups keep earlier versions (1) so data can be recovered from before a file was corrupted (1) which lets the company return to a working copy (1)

Do not allow mix and match

Do not accept: answers about stopping malware or unauthorised access, as backups do not prevent these

Accept any other appropriate wording/phrasing.

Example answers and how they were marked

Full marks3/3

Data can be restored if it is lost or damaged because a copy is kept separately from the original so the company can carry on processing orders after a failure.

Why: Point (1), justification (1) and expansion of the justification (1).

Some marks2/3

Backups can be scheduled to run automatically so a recent copy is made without staff remembering.

Why: Point (1) and justification (1); no expansion of the justification.

No marks0/3

Backing up will stop viruses from infecting the computers.

Why: Confuses backing up with anti-virus software, so no creditworthy point is given.

8Explain one3 marks

Harpenlow Outdoor Centre runs residential activity courses for school groups. Staff record medical details and consent forms for every child on the centre's network. The centre has a procedure for backing up and recovering its data.

Explain one reason why the centre should regularly test its procedure for recovering data.

[3 marks]

Mark scheme

Award one mark for a correct reason, one mark for a justification for that reason and one mark for an expansion of the justification, up to a maximum of three marks.

To check the backups can actually be restored (1) before a real system failure happens (1) so the children's medical details are not lost when staff need them (1)
To find problems with the backups (1) such as corrupted or incomplete files (1) so these can be fixed before the data is needed (1)
To check staff know what to do (1) so that no time is wasted working it out during a failure (1) which means the centre gets back to work quickly (1)
To make sure all the data is included in the backups (1) as newer records may have been missed (1) so every child's consent form can be recovered (1)

Allow mix and match if the whole response makes sense

Accept any other appropriate wording/phrasing.

Example answers and how they were marked

Full marks3/3

It shows whether the backups can actually be restored before a real failure happens so the children's medical details are not lost when staff need them.

Why: Reason (1), justification (1) and expansion of the justification (1).

Some marks2/3

It finds problems with the backup such as files that are corrupted or missing so these can be fixed before the data is needed.

Why: Reason (1) and justification (1); no expansion of the justification, so the third mark is not earned.

No marks0/3

It means the backups take up less space on the server so the system runs faster.

Why: Gives a reason about storage and performance rather than about recovering data, so no creditworthy point.

9Describe3 marks

Norbury Theatre Company puts on plays and sells tickets to customers. The company sends recordings of its performances as video files over the internet to partner venues.

Describe how encryption will protect the performance files while they are sent to partner venues.

[3 marks]

Mark scheme

A description of how encryption protects transmitted data. To include three from

The plaintext is scrambled/jumbled into ciphertext (1)
Using an encryption algorithm/key (1)
The ciphertext is sent over the internet (1)
Anyone who intercepts the files cannot read/understand them (1)
The partner venue needs the decryption key/password/code (1)
To decrypt the ciphertext back into readable plaintext (1)

Accept any other appropriate wording/phrasing.

Example answers and how they were marked

Full marks3/3

The performance files are scrambled into ciphertext using an encryption key. If someone intercepts them, they cannot read them. The partner venue uses the decryption key to turn them back into plaintext.

Why: Scrambled into ciphertext (1), uses an encryption key (1), intercepted files cannot be read (1) and decryption key/decrypt back to plaintext (1), capped at the 3 marks available.

Some marks2/3

The files are scrambled into ciphertext so that anyone who intercepts them cannot understand them.

Why: Scrambled into ciphertext (1) and intercepted files cannot be understood (1). No point about an algorithm/key or about decryption.

No marks0/3

Encryption puts a padlock symbol on the theatre's website so customers know it is safe to buy tickets.

Why: Only refers to a padlock symbol on a website. There is no point about ciphertext, an encryption key, interception or decryption, so no mark scheme point is met.

10Describe3 marks

Hinstock Riding School runs riding lessons and takes bookings from customers. Staff take bookings on a tablet and send the customer details over the internet to the school's insurance company.

Describe how the school can use encryption to send data securely to the insurance company.

[3 marks]

Mark scheme

A description of how encryption is used to send data securely. To include three from

The data is scrambled/coded/jumbled (into ciphertext) (1)
Using an encryption algorithm and a key (1)
The data is encrypted before it is sent over the internet (1)
The insurance company needs the matching decryption key/password/code (1)
To decrypt the ciphertext back into readable data (1)
Anyone who intercepts the data on the way cannot read/understand it (1)

Do not accept: a firewall stops the data being read while it is sent

Accept any other appropriate wording/phrasing.

Example answers and how they were marked

Full marks3/3

The customer details are scrambled into ciphertext using an encryption algorithm and a key. This is done before the details are sent over the internet. The insurance company uses the decryption key to decrypt the ciphertext back into readable data.

Why: Ciphertext (1), encryption algorithm and key (1) and encrypted before it is sent (1): three distinct points, the maximum for the question.

Some marks2/3

The customer details are scrambled into ciphertext using an encryption key.

Why: Scrambled into ciphertext (1) and an encryption key (1). Nothing about when it is encrypted, the decryption key or interception.

No marks0/3

The school can send the data through a firewall so that hackers cannot read it.

Why: A firewall filters network traffic and does not encrypt data. This matches the Do not accept line, so no mark scheme point is met.

11Explain two4 marks

Grafton Karting Centre is a motorsport venue where customers race go-karts. The centre uses laptop computers at its reception desk to take bookings and store customers' details. Device hardening means making a device more secure.

Explain two ways device hardening could protect the data on the centre's laptops.

[4 marks]

Mark scheme

Award one mark for each correct way and one mark for a justification of each way, up to a maximum of four marks.

Disable unused ports such as USB (1) so data cannot be copied onto a memory stick / malware cannot be installed from a portable device (1)
Limit user access / apply the principle of least privilege (1) so staff can only open the booking data they need for their job / cannot change customer records (1)
Use biometrics (1) so only a named member of staff can unlock the laptop (1)
Keep the operating system up to date by installing patches (1) which fixes known security issues so the laptop is less open to attack (1)
Remove/disable unused software or services (1) which reduces the attack surface of the laptop (1)
Reset default/BIOS passwords (1) so staff cannot change the laptop's system settings (1)
Encrypt the saved data (1) so the files cannot be read if the laptop is lost or stolen (1)

Do not accept: backing up the data, as this does not harden the device

Allow mix and match if the response makes sense

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks4/4

Disabling the USB ports that are not needed so a member of staff cannot copy the customer details onto a memory stick. Applying the principle of least privilege so receptionists can only open the booking system and cannot change customer records.

Why: Two creditworthy ways, each with its own justification: disabling unused ports (1) plus why (1) and limiting user access (1) plus why (1).

Some marks2/4

Keeping the operating system up to date so known security problems in the software are fixed. They could also back up the laptops every night.

Why: The update point earns its identification (1) and justification (1). Backing up is not device hardening, so it earns nothing.

No marks0/4

They should back up the data every night so the laptops are hardened and viruses cannot get in.

Why: Only describes backing up, which is not a device hardening method and is named in the Do not accept line, so no marks.

12Explain two4 marks

Oakhurst Riding School gives horse riding lessons to children and adults. All of the school's lesson bookings and customer details are stored on its office computer. The school does not currently back up this data.

Explain two reasons why the school should back up its data.

[4 marks]

Mark scheme

Award one mark for each correct reason and one mark for a justification of each reason, up to a maximum of four marks.

Data can be restored after a system failure (1) so the school does not lose its bookings and customer details (1)
Files that staff delete by accident can be recovered (1) so the work does not have to be done again (1)
Data can be recovered after a malware/ransomware attack (1) so the school does not have to pay to get its files back/does not lose its records (1)
A copy of the data is kept somewhere else, such as in the cloud (1) so it is not lost if the office computer is stolen or damaged (1)
The backup can be scheduled to run automatically (1) so the copies are always up to date (1)

Do not accept: stopping hackers or viruses, as a backup cannot do this

Allow mix and match if the response makes sense

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks4/4

If the office computer breaks, the school can restore the bookings so it does not lose any lessons or customer details. A copy of the data can also be kept in the cloud so it is still safe if the computer is stolen or damaged.

Why: Restoring after a system failure (1) plus consequence (1); off-site/cloud copy (1) plus consequence (1).

Some marks2/4

The data can be recovered if it is deleted by accident so staff do not have to type it all in again. They should also keep the backup on the same computer so it is easy to find.

Why: Deleted-by-accident recovery (1) plus justification (1); keeping the backup on the same computer is not a valid reason and scores nothing.

No marks0/4

Backing up stops hackers getting into the office computer, so the school's bookings are safe.

Why: Says backup stops hackers, which the mark scheme's Do not accept line rules out; no creditworthy reason.

13Explain two4 marks

Garrowby Transport Museum displays old buses and trains. It stores photographs of its vehicles on a laptop and a memory stick that staff take to other museums.

Explain two ways encrypting stored data could protect the museum's photographs.

[4 marks]

Mark scheme

Award one mark for each correct way and one mark for a justification of each way, up to a maximum of four marks.

The files are scrambled into ciphertext (1) so anyone who opens them cannot read them without the decryption key (1)
A decryption key/password is needed to decrypt the data (1) so the museum can control who is able to read the photographs (1)
Individual files can be encrypted (1) so only the photographs that need protecting are locked, and staff can still use the other files (1)
The whole drive of the laptop can be encrypted (1) so every file on it is protected, including any new photographs saved to it (1)
The memory stick can be encrypted (1) so the photographs are still protected if the stick is lost or stolen on a trip (1)

Do not accept: encrypting data while it is being sent over the internet, such as a VPN, as this protects transmitted data, not stored data

Allow mix and match if the response makes sense

Accept any other appropriate wording/phrasing

Example answers and how they were marked

Full marks4/4

The whole drive can be encrypted so if the laptop is stolen every file on it is protected, including any new photographs. Individual files can be encrypted so only the photographs that need protecting are locked and staff can still use the other files.

Why: Two creditworthy ways, each with its own justification: whole drive encryption (1) plus why (1) and individual file encryption (1) plus why (1).

Some marks2/4

The files are scrambled so nobody can read them without the decryption key. They should also keep a backup of the photographs on a memory stick.

Why: The scrambling point earns its identification (1) and justification (1). A backup is not encryption of stored data and scores nothing.

No marks0/4

The data is encrypted while it is sent over the internet, so hackers cannot read it as it travels to the other museum.

Why: Describes encryption of transmitted data, not stored data; this is named in the Do not accept line, so no marks.

14Evaluate6 marks

Larkhill Riding School takes lesson bookings and payments through its website. Staff email lesson reports and rider details to parents and to an insurance partner.

Evaluate the use of encryption to protect the data the school transmits.

Your evaluation should include:

the benefits and drawbacks of using encryption for this data
a supported conclusion.

[6 marks]

Mark scheme

Responses will be credited according to the learner’s demonstration of knowledge and understanding of the material, using the indicative content and level descriptors below.

The indicative content that follows is not prescriptive. Responses may cover some or all indicative content, but learners should be rewarded for other responses.

Evaluation may consider

Benefits

Plaintext is scrambled into ciphertext using an algorithm and key – so intercepted card payment details cannot be read.
A decryption key is needed to unscramble the data – so only the intended parent or insurance partner can read it.
Lesson reports and rider details are protected while travelling over the internet – so personal data is not revealed if it is intercepted.
Bookings and payments made on public wi-fi are protected – so customers can pay online with confidence and keep trusting the school.

Drawbacks

Parents and the insurance partner need compatible software and a key – encrypted emails can be hard to open and delay reports.
Certificates and key management cost money and staff time – and staff may need training to use them.
A lost or insecurely sent key means the data cannot be read – or could be decrypted by the wrong person.
Encryption only protects data in transit – it does not stop malware on a device or a hacker who already has access to the school's systems.

Levels

Level 0 (0 marks): No rewardable material
Level 1 (1–2 marks): Demonstrates isolated elements of knowledge and understanding; there will be major gaps or omissions; Few of the points made will be relevant to the context in the question; Limited evaluation which contains generic assertions leading to a conclusion which is partially supported
Level 2 (3–4 marks): Demonstrates some accurate knowledge and understanding; with only minor gaps or omissions; Some of the points made will be relevant to the context in the question, but the link will not always be clear; Displays a partially developed evaluation which considers some different competing points, although not always in detail, leading to a conclusion which is partially supported
Level 3 (5–6 marks): Demonstrates mostly accurate and thorough/detailed knowledge and understanding; Most of the points made will be relevant to the context in the question, and there will be clear links; Displays a well-developed and logical evaluation which clearly considers a range of different aspects and competing points, leading to a conclusion that is fully supported

Example answers and how they were marked

Full marks6/6

Encrypting the transmitted data would scramble Larkhill's booking and payment details into ciphertext using an algorithm and key, so anyone who intercepted them could not read them. This matters for card payments made on the website and for the lesson reports and rider details emailed to parents and the insurance partner, because only someone with the decryption key could read the data. However, parents may not have the software to open encrypted emails, and managing keys and certificates costs money and staff time; if a key is lost, the records cannot be read at all. Encryption also does nothing about malware on a parent's device. Overall, the school should encrypt the payment pages of its website and send reports through a secure portal, with keys sent separately and staff trained. This protects sensitive data, and the drawbacks can be managed.

Why: Level 3: mostly accurate and detailed knowledge (algorithm, ciphertext, decryption key); most points are relevant to Larkhill's bookings, payments and reports with clear links; a well-developed evaluation weighing benefits against drawbacks (parents opening emails, key management, malware); the conclusion is fully supported.

Some marks4/6

Encrypting the data means it is scrambled so anyone who intercepts it cannot read the payment details or the reports sent to parents. This is good because the school sends rider details to an insurance partner, and those are personal. But it can be expensive to set up and manage the keys, and parents may not be able to open encrypted emails. If the key is lost then the insurance partner cannot read the reports either. Overall, I think the school should encrypt the payments on its website, because that is where the card details are, but it does not really need to encrypt everything.

Why: Level 2: some accurate knowledge with minor gaps; some points are relevant to the school (payments, reports to the insurance partner) but the links are not always clear; a partially developed evaluation considering competing points, leading to a conclusion that is only partially supported. Top of Level 2.

Some marks1/6

Encryption is good because it stops hackers from getting onto the website and it deletes viruses from the school's emails. The riding school should use it because it is safe. It is easy to use and everyone knows how to do it.

Why: Level 1: isolated elements of knowledge; the answer confuses encryption with a firewall and anti-virus software (encryption does not delete viruses), so few points are relevant to transmitted data; generic assertions about safety with an unsupported conclusion.

Revise Data level protection first

Keep practising Data level protection

More exam questions on B2 Prevention and management of threats to data