Question 3 – Identifying and preventing vulnerabilities - Questions

Threat / Scenario

Physical security

Software patching / updates

Staff training / User education

Multi-factor authentication (MFA)

An intruder enters an unlocked server room and physically removes backup storage media.

An employee falls victim to a social engineering scheme and discloses their network credentials over the phone.

An automated worm exploits an unpatched security bug in the database management system.

An external attacker uses compromised login details harvested from a public data leak to log into a corporate VPN.

Identifying and preventing vulnerabilities Questions

Practise OCR GCSE Computer Science Identifying and preventing vulnerabilities with exam-style questions for GCSE Computer Science. 15 questions, matched to the OCR GCSE Computer Science (J277) specification and written in Component 01 and Component 02 style. Every question includes a full worked solution and mark scheme, so you can see where marks are awarded rather than just whether you got the answer right.

Tick (✓) one box on each row to identify the most appropriate security method to prevent or mitigate each threat.

Threat / Scenario	Physical security	Software patching / updates	Staff training / User education	Multi-factor authentication (MFA)
An intruder enters an unlocked server room and physically removes backup storage media.
An employee falls victim to a social engineering scheme and discloses their network credentials over the phone.
An automated worm exploits an unpatched security bug in the database management system.
An external attacker uses compromised login details harvested from a public data leak to log into a corporate VPN.