Tick (✓) one box on each row to identify the most appropriate security method to prevent or mitigate each threat.
| Threat / Scenario | Physical security | Software patching / updates | Staff training / User education | Multi-factor authentication (MFA) |
|---|---|---|---|---|
| An intruder enters an unlocked server room and physically removes backup storage media. | ||||
| An employee falls victim to a social engineering scheme and discloses their network credentials over the phone. | ||||
| An automated worm exploits an unpatched security bug in the database management system. | ||||
| An external attacker uses compromised login details harvested from a public data leak to log into a corporate VPN. |
15 exam-style questions on OCR GCSE Computer Science Identifying and preventing vulnerabilities. Each one has a worked solution and a mark scheme showing where the marks go.