Treating someone unfairly because of who they are, such as their disability or race
What is the name for the agreed set of recommendations for making web content more accessible to users with disabilities?
WCAG
What is meant by 'assistive technology'?
Specialist hardware or software that helps a user with a disability to access services
Which principle of WCAG requires that users must be able to receive information from the interface?
Perceivable
What is meant by 'accepted standards'?
An agreed way of doing things that is often best practice but is not enforceable by law
Which WCAG principle requires that the information and the way an interface works are clear to users?
Understandable
Which UK law makes it illegal to discriminate against people when providing access to information and services?
Equality Act 2010
What is the main purpose of the Web Content Accessibility Guidelines?
To give guidance on making web content accessible to disabled users
A company does not give a blind employee the accessibility tools needed to use its internal system. What could the company face?
Prosecution for discrimination under the Equality Act 2010
Which WCAG principle is met by making all of a website's features available from a keyboard?
Operable
A booking form has a short written description attached to each image so a screen reader can read it aloud. What is this description called?
Alt text
A customer finds it difficult to leave home. How does shopping online mainly benefit them?
They can order products at any time and have them delivered
A nurse who breaks the guidelines of their profession could have their licence to practise taken away. What does this show about professional guidelines?
They can be enforced when a licence to practise is involved
Which is a benefit to society of people having access to information and services?
Communities in different countries can work together on global issues
A bakery uses the internet to compare the prices charged by rival bakeries and to find a cheaper supplier of flour. What is the main benefit to the business?
It can set prices that attract more customers and cut its costs
People who share an interest in a hobby can discuss it online with others anywhere in the world, at any time of day. What benefit to society does this show?
Networking online brings communities together and lowers social barriers
A company wants its online booking form to be easier to read for users with low vision. Which change would help most?
Using a strong contrast between the text and the background
A customer cannot type but can speak clearly. Which feature would let them enter their details on an online booking form?
Voice data entry so they can speak their answers
A company pays for a lift to be installed so that an employee who uses a wheelchair can get to the office. What is this an example of?
A workspace adaptation
An organisation ignores the professional guidelines for its industry, although it has not broken any law. What is the main risk it faces?
Its reputation could be damaged
Which of these is an example of an organisation discriminating against some of its users?
Offering information only in a format that some users cannot access
Which term describes the principle that all internet traffic should be treated equally, so that no user, website or service is given faster or slower access than another?
Net neutrality
What is meant by 'throttling'?
An ISP deliberately slowing access to particular websites or services
What is the name for an arrangement where an ISP lets customers use a particular service without it counting towards their monthly data allowance?
Zero-rating
What is meant by an 'internet service provider'?
A company that connects customers to the internet and controls how content is delivered to them
What is meant by 'blocking'?
An ISP stopping its customers from accessing particular websites or services
Which term describes the limit on how much a customer can download in a period before the speed is reduced or extra charges apply?
Data cap
Why is an ISP able to treat some internet traffic differently from other traffic?
It sits between customers and the services they access
Which of these does NOT break net neutrality?
A website charging users a fee for its content
How does net neutrality help a small company that sells its products online?
Its website is not slowed down to favour a larger rival
On internet.org, Facebook is zero-rated but rival social networks are not. What is the effect on those rivals?
Customers pay data charges that Facebook users avoid
An ISP slows downloads from a site it believes supports illegal file sharing. Why does this break net neutrality?
The ISP is prioritising traffic based on its own preferences
Under net neutrality, mobile data users should have the same access to content as home broadband users. What does this show?
Net neutrality applies to all devices and connection types
A customer's tablet downloads data more slowly than their desktop PC on the same home broadband connection. Why does this not break net neutrality?
The slower speed is caused by the device and not by the ISP
Which statement describes how breaking net neutrality can affect an organisation that sells online?
It may have to pay an ISP to reach customers quickly
An ISP slows down a rival streaming service for its customers while its own streaming service runs at full speed. Why might the ISP do this?
To make its own service more attractive to customers
What is the name for the document that sets out how an organisation's IT systems may be used and the penalties for breaking its rules?
Acceptable use policy
What is meant by 'scope' in an acceptable use policy?
The people and groups that the policy applies to
Which term describes the equipment, documents and knowledge that an acceptable use policy is designed to protect?
Assets
What is meant by 'monitoring' in an acceptable use policy?
Checking and recording how users behave when they use an organisation's IT systems
What is the name for the penalties an organisation can apply when a user breaks the rules in an acceptable use policy?
Sanctions
What is meant by 'agreement' in an acceptable use policy?
A user agreeing that they will follow the rules in the policy
How does a user usually confirm that they agree to a digital acceptable use policy?
By ticking a box and having the date recorded
What is the main purpose of an acceptable use policy?
To state how an organisation's IT systems can be used
A school has an acceptable use policy. Which group does it apply to?
Students, staff and visitors who use the school network
Which of these would be listed as an asset in an acceptable use policy?
The laptops, emails and documents the organisation provides
Which behaviour would be classed as acceptable under a company's acceptable use policy?
Reporting a suspicious email to the IT team
An employee posts confidential company documents on a public social media page. How would an acceptable use policy classify this?
Unacceptable, because confidential data has been shared
A company wants to check how its staff are using their computers. Which action is a form of monitoring?
Reviewing access logs to see which files have been opened
A member of staff has kept using a work laptop to run their own business. Which action would be a sanction under the acceptable use policy?
Withdrawing the employee's access to the company network
A new employee signs a paper copy of the acceptable use policy. A senior manager then countersigns it. Why is this countersignature needed?
To verify that the employee's signature is genuine
Why does an organisation include warnings about phishing emails in its acceptable use policy?
To reduce the chance of staff letting malware onto the network
A company's acceptable use policy states that only IT-approved staff may install software on work computers. Why is this rule included?
To make sure that only licensed software is installed
Why does an acceptable use policy state the sanctions it can apply?
To warn users what could happen if rules are broken
Which of these would be covered by a company's acceptable use policy?
The company network, the apps staff use and lent laptops
What is meant by a business-focused social network?
A site that people use to make professional contacts and search for jobs
What is the name for the advertising purpose where a business tries to find people who could be interested in buying its products?
Lead generation
What is meant by the blurring of social and business boundaries?
Work and personal life become less separate because the same digital systems are used for both
What is meant by pay-per-click advertising?
The business pays the platform each time a user clicks on its advert
What is the name for the advertising purpose of getting as many people as possible to see an advert?
Reach
Which advertising purpose encourages users to visit a business's website?
Traffic
What is meant by brand awareness as an advertising purpose?
Making people aware of a business and its products
A company wants its social media adverts to be seen only by users aged 18 to 24 who live in Manchester. Which advert setting controls this?
The audience the advertiser chooses to target
A company doubles the amount it spends on a social media advertising campaign. What is the most likely effect?
The advert is displayed to users more often
A company pays a video blogger to promote its products in a post. What are social media platforms likely to require of the blogger?
To state that the post is a paid promotion
Why might a company search for a job applicant on social media before an interview?
To gain more insight into the people they hire
Why may a company look at the personal social media accounts of its employees?
Because posts could damage the company's reputation
Priya reads and replies to work emails at home every evening. What is the main impact on Priya?
She works outside her working hours without extra pay
A customer posts a complaint on a company's social media page. Why is this a risk for the company?
Other customers can see it and trust the company less
A company sends messages to its staff through a work social network during the evening. What is a benefit of this for the company?
Urgent messages reach staff quickly
A company that fits kitchens posts photos and videos of its finished work on social media. Why does this help it win new customers?
Customers can see the quality of the company's work
A bakery asks its social media followers to vote on which new cake it should sell. Why is this useful to the bakery?
It finds out which products customers want
A company checks the analytics for its social media adverts. What can the analytics tell it?
Which adverts get the most likes and shares
A company posts a video on social media showing a new product it has designed. What is a drawback of doing this?
Other companies can copy the idea
A company sets its adverts to be shown only to users aged 25 to 34 in Leeds. Thousands of users see the adverts but few of them match those details. What is the most likely reason?
The platform's algorithm decides who sees the adverts
What is the name for the principle that personal data must not be kept for longer than it is needed?
Storage limitation
What is meant by 'data minimisation'?
Only the personal data that is needed for the stated purpose is collected and held
Which principle requires an organisation to be clear, open and honest with people about how their personal data will be used?
Lawful, fair and transparent processing
What is meant by 'the right to be forgotten'?
A person can ask an organisation to delete all of their personal data and the organisation must comply
Which principle requires an organisation to take responsibility for how it handles personal data and to be able to show that it complies with the other principles?
Accountability
What is meant by 'purpose limitation'?
Personal data is processed only for the specific purposes that were stated to the individual when it was collected
Which Act of Parliament sets out the main rules for how personal data must be handled in the UK?
The Data Protection Act 2018
In data protection law, what is a data subject?
The person that the personal data is about
What is meant by consent in data protection?
The person gives permission for an organisation to use their personal data
A company collects and uses customers' personal data without a valid legal reason and does not tell them how it will be used. Which principle is it failing to apply?
Personal data should be processed lawfully, fairly and openly
A company collects customers' email addresses to send delivery updates, then uses the same addresses to advertise a prize draw. Which principle is being broken?
Personal data should only be used for its original stated purpose
A job application form asks candidates for their marital status and religion, which are not needed for the job. Which data protection principle does this break?
Personal data should be limited to what is needed for the purpose
A gym's records show an out of date address for a member, but the gym has not corrected it. Which principle is the gym failing to apply?
Personal data should be accurate and kept up to date
A dental practice still holds the records of patients who moved away eight years ago and has no reason to keep them. Which principle is being broken?
Personal data should not be kept for longer than necessary
A customer wants to know what personal data a company holds about her. Which data subject right is she using?
The right to see and receive a copy of her data
A hotel sends a booking confirmation to all of its guests at once, so every guest can see the other guests' addresses. Which principle has the hotel failed to apply?
Personal data should be kept secure and protected from others
A UK retailer moves its customers' personal data to a server in a country that does not protect personal data to the same standard. Which principle has it broken?
Personal data should not be transferred to countries with less protection
A company that seriously breaks data protection law can be given a large fine. What is the maximum fine based on?
A percentage of the company's annual turnover
Customers' personal data is stolen from a company in a cyber attack. Why is this a serious problem for the customers?
Their personal data could be used to commit fraud in their name
What is the difference between purpose limitation and data minimisation?
Purpose limitation is about why data is used and data minimisation is about how much is collected
A customer asks an online shop to stop using her personal data to send her marketing emails, but she wants to keep her account. Which right is she using?
The right to object to how her data is used
Which EU legislation requires websites to gain a user's permission before storing information on their device?
EPrivacy Directive
Which term describes a visitor agreeing that a website may store and access information on their device?
Cookie consent
What is a first party cookie?
A cookie created and used by the website the user is visiting
What does the right to be forgotten allow an individual to do?
Ask an organisation to erase the personal data it holds about them
A customer objects to a company using their personal data for marketing and asks for it to be deleted. What must the company do?
Delete the customer's personal data
Which statement describes a cookie?
A text file that allows a website to store data about a user
A shopper returns to a website two days later and is still logged in with their basket unchanged. What has allowed this to happen?
A first party cookie created by the website
What is the main purpose of a third party cookie?
To track a user's browsing so adverts can be targeted
A website asks visitors to accept cookies using a banner. Why does the website do this?
Users must give consent before cookies are stored on their device
What is meant by transactional data?
Information about the sales a company makes
An online clothing retailer analyses the transactional data from its customer orders. Which decision can this data help it make?
Which products to reorder because they sell well
A politician asks a search engine to remove links to news articles about mistakes they made in the past. Which drawback of the right to be forgotten does this show?
It can be used to hide information from the public
Maya is applying for jobs and asks a website to remove an old video of her that could damage her reputation. What benefit does the right to be forgotten give her?
The video can be removed so it does not affect her job applications
A customer asks a company to delete the personal data it holds about them. The company has also given a copy of that data to another organisation. What should the company do?
Tell the other organisation to delete its copy as well
Which of these is a drawback to a user of cookies being stored on their device?
They take up storage space and slow the device down
A website owner uses analytics cookies to see how visitors move around the site. Why is this useful?
It shows which pages are popular so the site can be improved
A cafe looks at the times recorded in its transactional data and finds that most sales happen on weekday mornings. Which decision does this information support?
Arrange for more staff on weekday mornings
A company holds detailed transaction records for all of its customers. Which of these is a drawback to the company?
The records must be kept secure to protect customer privacy
What is meant by 'trademark'?
A sign or symbol, such as a logo or brand name, that identifies an individual company
What is meant by 'fair dealing'?
Limited use of a protected work for private study, education or criticism
What is the name for a licence that allows a protected work to be used free of charge, on set conditions, as long as the original author is acknowledged?
Creative Commons licence
What is meant by 'attribution'?
A short statement that acknowledges the original creator when their work is used
What is the name for a person who uses a trademark illegally to produce similar goods?
A counterfeiter
Which protection applies automatically to an original piece of creative work?
Copyright
A company has invented a new type of folding bike frame. Which protection stops other companies copying the invention?
A patent
A company logo is marked with the letters TM. What does this show about the logo?
It is an unregistered trademark
How long does a registered trademark last before it must be re-applied for?
10 years
A marketing team wants to use a photograph from a website in the company newsletter. What should it do first?
Ask the copyright holder for permission to use it
A designer uses an image that has been released under a Creative Commons licence. What must the designer do?
Attribute the original creator of the image
A company buys one licence for a program and installs it on thirty computers. Which statement is correct?
This breaches the licence terms and copyright
Why are patents important for encouraging companies to carry out research?
They let the inventor profit from the invention
A writer has an idea for a book about life on Mars. Which statement about copyright is correct?
Copyright protects the book the writer produces, not the idea
An inventor's patent for a folding bike frame runs out after 20 years. What can other companies do?
Use the invention without the inventor's permission
A company copies a rival's brand name and logo and uses them on its own products. What is the likely result?
Legal action can be taken and a fine can be given
A publishing company pays a writer under contract to write a book. Who owns the copyright in the book?
The publishing company, as it was produced under contract
An organisation's policy says only IT-approved, licensed software may be installed on its computers. Why does this policy help the organisation stay within the law?
It stops unlicensed software being used, which avoids legal action
A cafe plays music from a CD for its customers. Why could this breach copyright even though the cafe owns the CD?
Playing music in public needs the copyright holder's agreement
Which of these is a drawback of protecting an invention with a patent?
It can stop other companies improving the invention
Which term describes gaining access to a computer system or its data without permission?
Unauthorised access
What is meant by 'unauthorised modification of materials'?
Changing data or software without permission
What is the name for software that is designed to cause harm to a computer system or its data?
Malware
What is meant by 'intentional spreading of malware'?
Deliberately sending harmful software to infect other systems
Which law makes it an offence to access a computer system without permission?
Computer Misuse Act 1990
What is meant by 'password cracking'?
Using software to guess a password without permission
Which of these is an example of unauthorised access to computer material?
Using someone else's username and password to log in
An attacker gains access to a company's customer records and uses the details to commit identity theft. Which offence is this?
Unauthorised access with intent to commit further offences
Which of these is an example of unauthorised modification of computer material?
Changing settings so that antivirus cannot detect spyware
A programmer writes a virus that will delete files, but never sends it to anyone. Which offence have they committed?
Creation of malware
A student copies a virus onto a memory stick and gives it to classmates, knowing it will infect their computers. Which offence is this?
Intentional spreading of malware
An employee finds a colleague's account is already logged in and uses it to read files they are not allowed to see. Why is this unauthorised access?
They were not allowed to view those files
An attacker uses password cracking software to break into a system but fails to get in. Why have they still committed a criminal offence?
Attempting to access a system without permission is a crime
Criminals began to exploit computer systems as they became more common in business and society. Why was the Computer Misuse Act 1990 introduced?
To prevent unauthorised access to computer systems
A student sends a file to a friend without knowing it contains a virus, and the friend's laptop becomes infected. Why is this not intentional spreading of malware?
The student did not know the file contained a virus