f":"/gcse/computer-science/edexcel/questions","basePath":"/gcse/computer-science/edexcel/network-security/questions","formulaUrl":null,"initialIndex":20,"initialQuestionWindow":[{"id":"a8cabf90-084d-4dba-8fb3-4d34d12b8754","revisionId":"42029f47-eb8a-4b74-8ef6-71df95fd401e","questionNumber":null,"questionType":"LA","specification":"A local medical clinic wants to ensure its digital network and patient databases are secure from unauthorized access. The clinic hires an external cybersecurity analyst to conduct penetration testing on their system.","difficulty":3,"difficultyBand":"easy","totalMarks":2,"sourceTitle":null,"calculatorUse":null,"parts":[{"id":"4eb6c263-ed7b-4d3b-8012-c4a908129f6b","label":null,"content":"Describe what is meant by the term 'penetration testing' in this context.","markscheme":"- Describes penetration testing as a simulated, mock, or authorized cyberattack on the network/system, conducted with permission (ethical hacking) B1\n- Explains that the purpose/goal is to discover, document, or probe security weaknesses/vulnerabilities so they can be patched or resolved B1","marks":2,"order":0,"markingRubric":null,"explanation":null,"options":[]}],"options":[],"explanation":null,"firstAttemptFullMarks":null},{"id":"d0cd7922-09fe-4ec0-8101-85dcf240e7a6","revisionId":"7dc787c5-c62a-4716-9fc8-857798814b96","questionNumber":null,"questionType":"LA","specification":"","difficulty":4,"difficultyBand":"easy","totalMarks":2,"sourceTitle":null,"calculatorUse":null,"parts":[{"id":"e94846b9-5f91-44d3-870d-2294ca5f5edd","label":null,"content":"Explain one way an organization's computer network is vulnerable to cyberattacks if system administrators fail to apply software security patches regularly.","markscheme":"- Identifies that unpatched software leaves known security vulnerabilities or bugs open and unresolved B1\n- Explains that cybercriminals can exploit these known weaknesses (e.g. using publicly available exploit kits) to gain unauthorized access or compromise the network B1","marks":2,"order":0,"markingRubric":null,"explanation":null,"options":[]}],"options":[],"explanation":null,"firstAttemptFullMarks":null},{"id":"e0a819fa-3992-4814-9dfb-65c10750d184","revisionId":"c11518ca-9f26-4784-a986-ac284a426aa4","questionNumber":null,"questionType":"LA","specification":"","difficulty":3,"difficultyBand":"easy","totalMarks":2,"sourceTitle":null,"calculatorUse":null,"parts":[{"id":"026742b1-ece0-4560-bdfa-329f9e2cc6c4","label":null,"content":"Describe white-box penetration testing.","markscheme":"- States that the tester has full, prior knowledge of the target system (such as its internal structure, IP addresses, network maps, or source code) B1\n- Explains the purpose or context of this approach (such as simulating an insider attack, or identifying specific flaws in the source code) B1","marks":2,"order":0,"markingRubric":null,"explanation":null,"options":[]}],"options":[],"explanation":null,"firstAttemptFullMarks":null}],"subjectCode":"gcse_computer_science","summaries":[{"id":"00254646-1893-44fb-a329-75c93c8f7447","difficultyBand":"easy","calculatorUse":null},{"id":"00ba0ade-dfc3-4ee3-9996-d6da7870199d","difficultyBand":"easy","calculatorUse":null},{"id":"111cd4fd-ad1e-4b50-ba18-629a3614b53c","difficultyBand":"easy","calculatorUse":null},{"id":"145e41ac-af8b-4529-80f1-2fec8e948521","difficultyBand":"easy","calculatorUse":null},{"id":"15971b11-1ab3-4b66-a250-fcb73eaba517","difficultyBand":"easy","calculatorUse":null},{"id":"1a219eca-1920-4bf7-a9d3-2b00225274b1","difficultyBand":"easy","calculatorUse":null},{"id":"2cb34cd8-0693-4a58-a959-c7a338f0d61f","difficultyBand":"medium","calculatorUse":null},{"id":"38769ac0-9a73-47bb-8fac-bfd387e7eb36","difficultyBand":"easy","calculatorUse":null},{"id":"58f3ffa9-b136-4ab1-b40d-258ac3cc8ffa","difficultyBand":"medium","calculatorUse":null},{"id":"623c343d-d07d-4caa-a00b-4538c20990c5","difficultyBand":"medium","calculatorUse":null},{"id":"6e0dd956-da62-482d-b841-22890c3169bf","difficultyBand

Network security

Question 14

Network security Questions

Network security

Question 14

Network security Questions