Three parts, building up: the actual words used in social engineering questions first (these trip people up as much as the computing does), then how malware types actually connect to their consequences and fixes, then a real 6-mark exam question that pulls all of it together.