Anti-malware, firewalls, encryption, access control, backups, penetration testing. Overlaps with network security but focuses on data protection.
—
Best score
—
Last attempt
Best attempt progress
0
XP earned
Watch first — Craig 'n' Dave
Craig 'n' Dave · Edexcel 1CP2Protecting Digital Systems
Key facts
Data protection measures — fill in the table
Measure
Description
Backups
Encryption
Access control
Anti-malware
Patching
Legal and ethical context — fill in the table
Term
Description
Data Protection / GDPR
Computer Misuse Act
Copyright
Audit trails
Anti-malware — how it works (Jun 2024 Q5(d))
1. Load the virus signature database
2. Scan the target file, comparing against known signatures
3. Decide if a virus signature is detected
4. If detected: quarantine/isolate/fix/delete the file
5. If not detected: no further action required
This was a 6-mark flowchart question in Jun 2024 — know the decision logic.
Exam questions — 4 questions · 11 marks · from real 1CP2 past papers
1 markBackup purpose1CP2 Jun 2022 Q4(a) style
Why is it important for an organisation to keep regular backups of its data?
A To speed up the network by storing data on multiple servers
B To allow data to be restored after loss from hardware failure, ransomware, or accidental deletion
C To encrypt data so attackers cannot read it
D To comply with copyright law
2 marksAudit trail1CP2 Jun 2024 Q4(c) style
Explain how an audit trail improves security in an organisation. (2 marks)
Hint: Two linked marks: what an audit trail does (records changes/access) AND why that improves security (accountability/traceability).
+20 XP
2 marksConsent and data1CP2 Jun 2022 Q4(b) style
When collecting personal data from users, describe two things an organisation must inform users about, under data protection law. (2 marks)
Hint: Two distinct things. These come from GDPR requirements — focus on what users need to KNOW before giving consent.
+20 XP
4 marksDiscuss encryption1CP2 style
Explain how encryption protects data both in transit and at rest. Why is encryption not sufficient on its own to protect an organisation's data? (4 marks)
Hint: Cover: what encryption does + in transit example + at rest example + why it's not sufficient alone (give two other measures still needed).