Under the Computer Misuse Act, which of the following is considered 'unauthorised access'?

Viewing someone else's files without their permission

What does the 'fair dealing' exception allow you to do?

Use protected works without permission for specific purposes

Which of these is a likely impact of data theft on individuals?

Compromised personal information

Which of the following activities is NOT illegal under the Computer Misuse Act?

Using a computer for personal tasks at work

What is the penalty for serious breaches of the Data Protection Act?

Significant fines and possible legal action

What is a potential consequence of data manipulation for individuals?

Loss of trust in data integrity

Which of the following is a requirement for data controllers under the Data Protection Act?

To register with the Information Commissioner's Office

Why is it important to regularly update software?

To patch security vulnerabilities

Which of the following is considered an offence under the Computer Misuse Act?

Unauthorised access to computer material

What does the term 'hacking' refer to in the context of the Computer Misuse Act?

Unauthorised access to or modification of computer material

What is the role of access control in data security?

To restrict data access to authorized users

What is a 'Denial of Service' (DoS) attack?

A cyber-attack that makes a machine or network resource unav

What is the purpose of logical security measures?

To protect systems and data from unauthorized digital access

Which authority oversees the enforcement of the FOIA in the UK?

The Information Commissioner's Office (ICO)

What is the primary purpose of the Health and Safety at Work Act 1974?

To ensure employee wellbeing in the workplace

What should be done with cables and wires to prevent trips and falls in an IT workspace?

Keep them organised and away from walkways

When can a design be registered under the Copyright, Designs and Patents Act 1988?

When it is original and has individual character

Data modification can lead to which of the following in a healthcare setting?

Misdiagnosis due to altered patient records

What is required to prosecute someone under the Computer Misuse Act?

Proof of unauthorised access or intent

What is the purpose of conducting a risk assessment in an IT environment?

To identify and control potential hazards

How does encryption protect data?

By converting it into an unreadable format without a key

What does a firewall do in the context of network security?

Monitors and filters incoming and outgoing network traffic

What is the primary goal of a Denial of Service (DoS) attack?

To disrupt service availability

Which of the following is NOT a valid reason for processing personal data under the Data Protec

Personal interest of the data processor

What is the primary purpose of the Computer Misuse Act 1990?

To criminalise unauthorised access to computer systems

The Computer Misuse Act was amended to include which of the following?

Making, supplying or obtaining information with the intent t

How long does copyright protection last for a book written by an author?

70 years from the author's death

Which of these is a correct practice to maintain good posture while using a computer?

Feet flat on the floor and back straight

What does a firewall do?

It filters incoming and outgoing network traffic

What is the main purpose of the Freedom of Information Act (FOIA)?

To provide public access to information held by public autho

How can identity theft impact individuals?

Unauthorised financial transactions

studbud

R050 - Topic 4 Cyber Security & Legislation

85 termsStudBud Administration15 plays

Imported from external platform

Flashcards85 cardsFPractice quizPHost liveL

Questions 85

Answers

1
Under the Computer Misuse Act, which of the following is considered 'unauthorised access'?
Using a computer in a public library
Accessing your own bank account online
Viewing someone else's files without their permission
A parent monitoring their child's internet usage
2
What does the 'fair dealing' exception allow you to do?
Sell copies of copyrighted works
Claim ownership of someone else's work
Use protected works without permission for specific purposes
Copy any work without permission
3
Which of these is a likely impact of data theft on individuals?
Faster internet connection
Improved social media experience
Enhanced privacy
Compromised personal information
4
What is the maximum time a public authority has to respond to a FOIA request?
40 working days
14 working days
30 working days
20 working days
5
Which of the following activities is NOT illegal under the Computer Misuse Act?
Spreading viruses intentionally
Using a computer for personal tasks at work
Accessing a family member's email without permission
Launching a denial-of-service attack
6
Which of the following personal data is considered 'sensitive' under the Data Protection Act?
Telephone number
Health information
Name
Email address
7
Which is an example of secure data destruction?
Using strong passwords
Shredding paper documents
Setting up a firewall
Installing updates
8
What is the penalty for serious breaches of the Data Protection Act?
Significant fines and possible legal action
A formal warning
A written apology
Compulsory data protection training
9
What is the name of the principle that assumes all government information should be available t
Freedom principle
Transparency principle
Public domain principle
Open government principle
10
Which principle of the Data Protection Act states that data should be used only for the specifi
Accuracy
Storage limitation
Data minimisation
Purpose limitation
11
What is a potential consequence of data manipulation for individuals?
Improved data accessibility
Increased security
Enhanced data storage
Loss of trust in data integrity
12
How long does patent protection typically last?
Lifetime of the inventor
10 years from the filing date
20 years from the filing date
30 years from the filing date
13
Which of the following is a requirement for data controllers under the Data Protection Act?
To advertise data collection practices
To use personal data for any purpose
To provide unlimited access to data
To register with the Information Commissioner's Office
14
Why is it important to regularly update software?
To patch security vulnerabilities
To improve the physical appearance
To make the device slower
To keep up with the latest trends
15
Which of the following is considered an offence under the Computer Misuse Act?
Creating a personal backup of purchased digital media
Unauthorised access to computer material
Installing software updates on your own computer
Using someone else's Wi-Fi with permission
16
Which cyber-security attack impact can lead to financial loss for businesses?
Data theft
Data manipulation
Identity theft
Data destruction
17
What is the maximum penalty for unauthorised access to computer systems with intent to commit a
Up to 2 years imprisonment
Community service
A fine of up to £5,000
Up to 5 years imprisonment
18
What does the term 'hacking' refer to in the context of the Computer Misuse Act?
Unauthorised access to or modification of computer material
Repairing and maintaining computer systems
The act of creating computer programs
Legally modifying your own computer hardware
19
What is the role of access control in data security?
To monitor data usage
To encrypt data
To allow anyone to access data
To restrict data access to authorized users
20
Which of the following is considered a strong password?
Sunshine_89
12345678
password123
R4nd0m!zeD&P@ss
21
Which of the following is NOT a logical security measure?
CCTV surveillance
Intrusion detection systems
Encryption
User authentication
22
Under the Health and Safety Act, who is responsible for providing fire safety training in the w
The local fire brigade
Each individual employee
The building landlord
The employer
23
What is the term for the person or organisation that determines the purposes and means of proce
Data controller
Data custodian
Data protector
Data processor
24
What is a 'Denial of Service' (DoS) attack?
An error message displayed when a service is not available
A cyber-attack that makes a machine or network resource unav
An attack that steals service passwords
A legal action taken to stop a service from being used
25
What is the purpose of logical security measures?
To protect systems and data from unauthorized digital access
To ensure the safe physical destruction of data
To physically restrict access to digital systems
To monitor the premises for intruders
26
Which authority oversees the enforcement of the FOIA in the UK?
The UK Cyber Security Council
The Office for Standards in Education (Ofsted)
The Information Commissioner's Office (ICO)
The Data Protection Authority
27
What is the primary purpose of the Health and Safety at Work Act 1974?
To ensure employee wellbeing in the workplace
To control internet usage in businesses
To regulate software development practices
To monitor the use of computer systems
28
Who can make a request under the Freedom of Information Act?
Only UK citizens
Only members of Parliament
Any individual or organisation
Only journalists and researchers
29
What should be done with cables and wires to prevent trips and falls in an IT workspace?
Keep them organised and away from walkways
Hang them from the ceiling
Paint them bright colours to make them visible
Cover them with rugs or carpets
30
When can a design be registered under the Copyright, Designs and Patents Act 1988?
As soon as it is drawn on paper
When it is an idea or concept
After it has been sold commercially
When it is original and has individual character
31
What is the consequence of committing an offence under the Computer Misuse Act?
Mandatory computer literacy classes
A formal warning
Temporary internet ban
Criminal prosecution
32
Data modification can lead to which of the following in a healthcare setting?
Misdiagnosis due to altered patient records
Increased data storage capacity
Accurate patient diagnosis
Faster medical services
33
What is required to prosecute someone under the Computer Misuse Act?
Witnesses to the act of accessing the computer
Proof of unauthorised access or intent
A confession from the accused
Proof of damage to the computer
34
What is the purpose of conducting a risk assessment in an IT environment?
To select the best software for business needs
To determine the budget for IT projects
To evaluate the performance of IT staff
To identify and control potential hazards
35
What constitutes 'authorised access' under the Computer Misuse Act?
Guessing someone's password and using their account
Accessing confidential files when not permitted to do so
Accessing any public website
Using a coworker's computer while they are on break
36
How does encryption protect data?
By locking the computer case
By converting it into an unreadable format without a key
By physically destroying it
By scanning for viruses
37
In which year was the Freedom of Information Act enacted in the UK?
2005
2010
1998
2000
38
What does a firewall do in the context of network security?
Connects multiple devices to the internet
Monitors and filters incoming and outgoing network traffic
Speeds up the network connection
Stores data for network users
39
What is the primary goal of a Denial of Service (DoS) attack?
To manipulate data
To modify data
To steal sensitive data
To disrupt service availability
40
Which of the following is NOT a valid reason for processing personal data under the Data Protec
The individual's explicit consent for marketing purposes
Compliance with a legal obligation
Protection of the public interest
Personal interest of the data processor
41
What is the primary purpose of the Computer Misuse Act 1990?
To criminalise unauthorised access to computer systems
To promote the safe disposal of electronic waste
To regulate the use of personal data
To legalise certain forms of hacking
42
Which type of work is NOT covered by patents?
Technical processes
Inventions
Literary works
New pharmaceutical products
43
The Computer Misuse Act was amended to include which of the following?
Regulations on the sale of computer components
The use of ad-blocking software
The right to encrypt personal data
Making, supplying or obtaining information with the intent t
44
What term describes the unauthorised access and copying of personal data?
Data modification
Data manipulation
Identity theft
Data theft
45
How long does copyright protection last for a book written by an author?
Lifetime of the author only
50 years from the author's death
70 years from the author's death
20 years from the first publication
46
Which of these is a correct practice to maintain good posture while using a computer?
Shoulders hunched over the keyboard
Leaning forward towards the screen
Knees higher than hips
Feet flat on the floor and back straight
47
Which of the following is protected under the Copyright, Designs and Patents Act 1988?
Facts and information
Ideas and concepts
Original works of authorship
Physical objects only
48
What does a firewall do?
It destroys sensitive data securely
It filters incoming and outgoing network traffic
It physically locks the server room
It detects and removes viruses
49
What is the term for illegally obtaining and using another person's private identification info
Data manipulation
Identity theft
Data modification
Data theft
50
What is the main purpose of the Freedom of Information Act (FOIA)?
To protect personal privacy
To prevent the sharing of sensitive information
To regulate online data exchanges
To provide public access to information held by public autho
51
How can identity theft impact individuals?
Business reputation damage
Loss of personal data
Website downtime
Unauthorised financial transactions
52
What is required for an invention to be patentable?
It must be commercially successful
It must be a scientific theory
It must be a well-known product
It must be new, inventive and have industrial application
53
What is the duration of protection for registered designs?
50 years from registration
Lifetime of the designer
25 years from registration
10 years from registration
54
Which of the following best describes the alteration of data to make it inaccurate without perm
Denial of service (DoS)
Data modification
Data theft
Data destruction
55
What is the purpose of the Computer Misuse Act 1990?
To protect intellectual property online
To criminalise unauthorised access to computer systems
To ensure the safety of online transactions
To regulate the use of personal data
56
Which of the following is NOT a fair dealing exception?
Performance in public
Non-commercial research and private study
Teaching in an educational establishment
Criticism, review, and news reporting
57
Which of these is a secure way to dispose of old computers?
Performing a factory reset
Donating them without wiping data
Selling them as they are
Throwing them in general waste
58
Which of the following is NOT a type of information exempt from the FOIA?
Information covered by legal professional privilege
Personal data that breaches the Data Protection Act
Information affecting national security
Information intended for future publication
59
What can an individual do if their FOIA request is refused?
They can make the same request after 30 days
They can appeal to the Information Commissioner's Office
They must accept the decision
They can take the matter to court immediately
60
Which of these is an example of two-factor authentication (2FA)?
A password and a fingerprint scan
A password and a username
Two different passwords
A password and a security question
61
What impact can result in the complete loss of data?
Data manipulation
Data theft
Identity theft
Data destruction
62
What is it called when an attack prevents legitimate users from accessing a service?
Data destruction
Data modification
Denial of service (DoS)
Data manipulation
63
What is a benefit of using strong, unique passwords?
They make the system run faster
They reduce the risk of unauthorized access
They are easier to remember
They require less frequent updates
64
What is the main purpose of the Data Protection Act?
To prevent people from using the internet
To protect the government's data only
To monitor all emails for security purposes
To ensure personal data is used fairly and lawfully
65
Which of the following is a common method used to commit identity theft?
Antivirus software
Phishing
Data encryption
Firewall
66
Which impact involves changing information with the intent to deceive?
Identity theft
Data destruction
Data manipulation
Data theft
67
Which legislation regulates the use of personal data in the UK?
Computer Misuse Act 1990
Data Protection Act 2018
General Data Protection Regulation (GDPR)
Digital Economy Act 2017
68
What is the recommended minimum distance to sit away from a computer monitor to reduce eye stra
10 centimetres
2 metres
50 centimetres
At least an arm's length
69
What is a common consequence of data manipulation in the financial sector?
Decreased investment risks
Fraudulent transactions
Accurate financial reporting
Lower banking fees
70
What is the main purpose of the Copyright, Designs and Patents Act 1988?
To regulate the use of personal data
To provide guidelines for health and safety in workplaces
To protect the rights of creators over their creations
To prevent plagiarism in academic work
71
Which of the following is a physical security measure to protect data?
Two-factor authentication
Firewalls
Biometric scanners
Antivirus software
72
What is the primary function of anti-virus software?
To manage the computer's battery life
To update the operating system
To prevent, detect, and remove malware
To clean the computer
73
Which of the following is NOT a type of malware?
Spyware
Trojan horse
Virus
Freeware
74
Which of the following best describes 'ergonomics' in the context of IT?
The study of computer programming languages
Designing a workplace to fit the user's needs
The technique for efficient typing
The process of installing computer networks
75
What does DSE stand for in the context of IT health and safety?
Display Screen Equipment
Data Storage Efficiency
Digital System Encryption
Dynamic Software Engineering
76
Which of the following is a potential risk of prolonged use of computers without proper ergonom
Higher electricity bills
Increased internet bandwidth consumption
Repetitive Strain Injury (RSI)
Faster depreciation of computer hardware
77
Which of the following best describes 'encryption'?
A method of compressing files to save space
Converting information or data into a code to prevent unauth
Deleting data so that it cannot be recovered
Scrambling television signals so non-subscribers cannot view
78
What can be a direct impact of data destruction on a business?
Improved data management
Increased sales
Operational disruption
Enhanced customer trust
79
Which of the following is an employer's responsibility under the Health and Safety Act?
Monitoring employees' personal social media accounts
Providing adequate training for safe equipment use
Offering free gym memberships to employees
Ensuring all employees have IT qualifications
80
What does 'phishing' refer to in the context of cyber-security?
The act of sending emails pretending to be from reputable co
A type of computer virus
The process of improving network security
A technique for recovering lost data
81
Under the Data Protection Act, individuals have the right to access personal data held about th
Subject Access Request
Personal Data Review
Privacy Access Petition
Individual Data Claim
82
How might a public authority refuse a request under the FOIA?
By issuing a refusal notice explaining the exemption
By claiming the information does not exist
By charging a fee higher than the applicant is willing to pa
By not responding to the request
83
Under the FOIA, what is the term used to describe information that a public authority is oblige
Public record
Mandatory disclosure
Publication scheme
Open data
84
What must organisations do to comply with the data security principle of the Data Protection Ac
Delete all data after a year of collection
Store all data in a centralised database
Ensure that personal data is kept secure from unauthorised a
Share data with third-party organisations regularly
85
What does the 'right to be forgotten' under the Data Protection Act entail?
Individuals can request the deletion of personal data when i
Individuals can erase their data from public records
Organisations must forget customer names after transactions
Data must be erased after a set period automatically

R050 - Topic 4 Cyber Security & Legislation Flashcards | StudBud