f":"/gcse/computer-science/edexcel/questions","basePath":"/gcse/computer-science/edexcel/network-security/questions","formulaUrl":null,"initialIndex":12,"initialQuestionWindow":[{"id":"6e0dd956-da62-482d-b841-22890c3169bf","revisionId":"870df192-7241-41c4-aff6-fd92f54611ae","questionNumber":null,"questionType":"LA","specification":"An operator of an automated shipping container terminal is upgrading its remote crane control system. To safeguard against malicious disruption, the operator commissions a security firm to conduct penetration testing on the network.","difficulty":3,"difficultyBand":"easy","totalMarks":2,"sourceTitle":null,"calculatorUse":null,"parts":[{"id":"aee1b4e2-f809-42a0-82bc-727604685ff3","label":null,"content":"Explain the purpose of penetration testing in this scenario, describing how it is conducted to achieve this purpose.","markscheme":"- Explains that penetration testing involves simulating a realistic, authorized cyberattack on the network by ethical hackers B1\n- Explains that the purpose is to actively discover, exploit, and report security vulnerabilities so they can be patched before a real attacker can exploit them B1","marks":2,"order":0,"markingRubric":null,"explanation":null,"options":[]}],"options":[],"explanation":null,"firstAttemptFullMarks":null},{"id":"75e50f39-7075-4492-9f76-bc6fe1a0916e","revisionId":"ab0338fd-ecc4-43aa-a258-20230fbd37d8","questionNumber":null,"questionType":"LA","specification":"To protect a remote marine research station's telemetry network from unauthorized access or data tampering, system administrators must proactively identify potential exploits. Having unpatched legacy operating systems on the main telemetry gateway is one common vulnerability.","difficulty":3,"difficultyBand":"easy","totalMarks":2,"sourceTitle":null,"calculatorUse":null,"parts":[{"id":"bda920d0-dbe3-4fe8-a919-db57f3bc7491","label":null,"content":"State **two other** vulnerabilities, related to network configuration or human factors, that could compromise the security of this network.","markscheme":"- Identifies one valid network or human-factor vulnerability, such as weak/default credentials, unencrypted data transmission, or poorly configured user privileges B1\n- Identifies a second distinct valid vulnerability, such as open/unmonitored firewall ports, lack of security awareness training among staff, or lack of active anti-malware/firewall protection B1","marks":2,"order":0,"markingRubric":null,"explanation":null,"options":[]}],"options":[],"explanation":null,"firstAttemptFullMarks":null},{"id":"7e6560fb-1221-4cb7-9768-fc4b691ba802","revisionId":"02da30b9-e950-4cef-abff-1018698633fd","questionNumber":null,"questionType":"LA","specification":"The municipal transit authority of a smart city operates a fleet of autonomous electric ferries, which coordinate routing and passenger manifest data over a regional wireless mesh network. To safeguard the fleet's control systems and prevent malicious hijacking, the authority commissions a certified security specialist to perform penetration testing on the mesh network.","difficulty":3,"difficultyBand":"easy","totalMarks":2,"sourceTitle":null,"calculatorUse":null,"parts":[{"id":"513d08ee-ec98-493e-a78c-76feb7035a7e","label":null,"content":"Explain what is meant by 'penetration testing' in the context of this autonomous transit network.","markscheme":"- Explains that it involves performing a simulated, authorized cyberattack (or ethical hacking) on the transit network's digital systems. M1\n- States that the purpose is to actively discover, exploit, and report security vulnerabilities so they can be patched before a real malicious actor can exploit them. A1","marks":2,"order":0,"markingRubric":null,"explanation":null,"options":[]}],"options":[],"explanation":null,"firstAttemptFullMarks":null}],"subjectCode":"gcse_computer_science","summaries":[{"id":"00254646-1893-44fb-a329-75c93c8f7447","difficultyBand":"easy","calculatorUse":null},{"id":"00ba0ade-dfc3-4ee3-9996-

Network security

Question 9

Network security Questions

Network security

Question 9

Network security Questions