What is the main purpose of the Freedom of Information Act (FOIA)?

To provide public access to information held by public autho

What is required to prosecute someone under the Computer Misuse Act?

Proof of unauthorised access or intent

What is the purpose of conducting a risk assessment in an IT environment?

To identify and control potential hazards

Which of the following activities is NOT illegal under the Computer Misuse Act?

Using a computer for personal tasks at work

Under the Computer Misuse Act, which of the following is considered 'unauthorised access'?

Viewing someone else's files without their permission

What does the 'fair dealing' exception allow you to do?

Use protected works without permission for specific purposes

What is the primary goal of a Denial of Service (DoS) attack?

To disrupt service availability

Which of these is a likely impact of data theft on individuals?

Compromised personal information

What is the primary purpose of the Computer Misuse Act 1990?

To criminalise unauthorised access to computer systems

How can identity theft impact individuals?

Unauthorised financial transactions

Which of these is a correct practice to maintain good posture while using a computer?

Feet flat on the floor and back straight

Which of the following best describes 'encryption'?

Converting information or data into a code to prevent unauth

What must organisations do to comply with the data security principle of the Data Protection Ac

Ensure that personal data is kept secure from unauthorised a

Which of the following best describes 'ergonomics' in the context of IT?

Designing a workplace to fit the user's needs

How long does copyright protection last for a book written by an author?

70 years from the author's death

Which of the following is a requirement for data controllers under the Data Protection Act?

To register with the Information Commissioner's Office

What is a potential consequence of data manipulation for individuals?

Loss of trust in data integrity

How might a public authority refuse a request under the FOIA?

By issuing a refusal notice explaining the exemption

What does a firewall do in the context of network security?

Monitors and filters incoming and outgoing network traffic

What does the term 'hacking' refer to in the context of the Computer Misuse Act?

Unauthorised access to or modification of computer material

What is the role of access control in data security?

To restrict data access to authorized users

The Computer Misuse Act was amended to include which of the following?

Making, supplying or obtaining information with the intent t

Why is it important to regularly update software?

To patch security vulnerabilities

What is a benefit of using strong, unique passwords?

They reduce the risk of unauthorized access

What is the purpose of logical security measures?

To protect systems and data from unauthorized digital access

studbud

R050 - Topic 4 Cyber Security & Legislation

85 termsStudBud Administration15 plays

Imported from external platform

Flashcards85 cardsFPractice quizPHost liveL

Questions 85

Answers

1
Which of the following best describes the alteration of data to make it inaccurate without perm
Data destruction
Data theft
Data modification
Denial of service (DoS)
2
Under the FOIA, what is the term used to describe information that a public authority is oblige
Public record
Mandatory disclosure
Publication scheme
Open data
3
What is the main purpose of the Freedom of Information Act (FOIA)?
To provide public access to information held by public autho
To regulate online data exchanges
To prevent the sharing of sensitive information
To protect personal privacy
4
Which of these is a secure way to dispose of old computers?
Performing a factory reset
Selling them as they are
Throwing them in general waste
Donating them without wiping data
5
Under the Data Protection Act, individuals have the right to access personal data held about th
Privacy Access Petition
Individual Data Claim
Subject Access Request
Personal Data Review
6
What is required to prosecute someone under the Computer Misuse Act?
A confession from the accused
Witnesses to the act of accessing the computer
Proof of damage to the computer
Proof of unauthorised access or intent
7
Which principle of the Data Protection Act states that data should be used only for the specifi
Data minimisation
Purpose limitation
Storage limitation
Accuracy
8
What is the purpose of conducting a risk assessment in an IT environment?
To identify and control potential hazards
To select the best software for business needs
To evaluate the performance of IT staff
To determine the budget for IT projects
9
What is the recommended minimum distance to sit away from a computer monitor to reduce eye stra
10 centimetres
50 centimetres
2 metres
At least an arm's length
10
Which of the following activities is NOT illegal under the Computer Misuse Act?
Accessing a family member's email without permission
Using a computer for personal tasks at work
Launching a denial-of-service attack
Spreading viruses intentionally
11
How long does patent protection typically last?
Lifetime of the inventor
10 years from the filing date
30 years from the filing date
20 years from the filing date
12
Which of the following is protected under the Copyright, Designs and Patents Act 1988?
Ideas and concepts
Original works of authorship
Facts and information
Physical objects only
13
Which cyber-security attack impact can lead to financial loss for businesses?
Identity theft
Data theft
Data destruction
Data manipulation
14
Under the Computer Misuse Act, which of the following is considered 'unauthorised access'?
Accessing your own bank account online
Using a computer in a public library
A parent monitoring their child's internet usage
Viewing someone else's files without their permission
15
What does the 'fair dealing' exception allow you to do?
Copy any work without permission
Claim ownership of someone else's work
Sell copies of copyrighted works
Use protected works without permission for specific purposes
16
What is the name of the principle that assumes all government information should be available t
Public domain principle
Open government principle
Transparency principle
Freedom principle
17
What is the primary goal of a Denial of Service (DoS) attack?
To modify data
To disrupt service availability
To steal sensitive data
To manipulate data
18
Which of these is a likely impact of data theft on individuals?
Enhanced privacy
Faster internet connection
Improved social media experience
Compromised personal information
19
What is the primary purpose of the Computer Misuse Act 1990?
To promote the safe disposal of electronic waste
To legalise certain forms of hacking
To regulate the use of personal data
To criminalise unauthorised access to computer systems
20
How can identity theft impact individuals?
Website downtime
Loss of personal data
Unauthorised financial transactions
Business reputation damage
21
Which of these is a correct practice to maintain good posture while using a computer?
Shoulders hunched over the keyboard
Knees higher than hips
Leaning forward towards the screen
Feet flat on the floor and back straight
22
Which of the following best describes 'encryption'?
Converting information or data into a code to prevent unauth
Scrambling television signals so non-subscribers cannot view
A method of compressing files to save space
Deleting data so that it cannot be recovered
23
What must organisations do to comply with the data security principle of the Data Protection Ac
Share data with third-party organisations regularly
Delete all data after a year of collection
Store all data in a centralised database
Ensure that personal data is kept secure from unauthorised a
24
What term describes the unauthorised access and copying of personal data?
Data manipulation
Data theft
Data modification
Identity theft
25
Which type of work is NOT covered by patents?
New pharmaceutical products
Technical processes
Literary works
Inventions
26
Which of the following best describes 'ergonomics' in the context of IT?
The process of installing computer networks
Designing a workplace to fit the user's needs
The study of computer programming languages
The technique for efficient typing
27
Which of the following is NOT a fair dealing exception?
Non-commercial research and private study
Performance in public
Criticism, review, and news reporting
Teaching in an educational establishment
28
How long does copyright protection last for a book written by an author?
70 years from the author's death
20 years from the first publication
50 years from the author's death
Lifetime of the author only
29
Which of the following is NOT a logical security measure?
Intrusion detection systems
User authentication
CCTV surveillance
Encryption
30
Which of the following is a requirement for data controllers under the Data Protection Act?
To register with the Information Commissioner's Office
To use personal data for any purpose
To advertise data collection practices
To provide unlimited access to data
31
Which is an example of secure data destruction?
Shredding paper documents
Installing updates
Using strong passwords
Setting up a firewall
32
Which of the following is NOT a type of malware?
Trojan horse
Spyware
Virus
Freeware
33
What does DSE stand for in the context of IT health and safety?
Digital System Encryption
Data Storage Efficiency
Display Screen Equipment
Dynamic Software Engineering
34
What is a common consequence of data manipulation in the financial sector?
Lower banking fees
Fraudulent transactions
Accurate financial reporting
Decreased investment risks
35
What is a potential consequence of data manipulation for individuals?
Increased security
Enhanced data storage
Loss of trust in data integrity
Improved data accessibility
36
Who can make a request under the Freedom of Information Act?
Only members of Parliament
Any individual or organisation
Only UK citizens
Only journalists and researchers
37
What constitutes 'authorised access' under the Computer Misuse Act?
Using a coworker's computer while they are on break
Guessing someone's password and using their account
Accessing any public website
Accessing confidential files when not permitted to do so
38
How might a public authority refuse a request under the FOIA?
By issuing a refusal notice explaining the exemption
By not responding to the request
By claiming the information does not exist
By charging a fee higher than the applicant is willing to pa
39
What does a firewall do in the context of network security?
Speeds up the network connection
Stores data for network users
Monitors and filters incoming and outgoing network traffic
Connects multiple devices to the internet
40
What is the maximum time a public authority has to respond to a FOIA request?
40 working days
30 working days
20 working days
14 working days
41
Which legislation regulates the use of personal data in the UK?
General Data Protection Regulation (GDPR)
Data Protection Act 2018
Digital Economy Act 2017
Computer Misuse Act 1990
42
What does the term 'hacking' refer to in the context of the Computer Misuse Act?
Legally modifying your own computer hardware
The act of creating computer programs
Unauthorised access to or modification of computer material
Repairing and maintaining computer systems
43
What is the role of access control in data security?
To monitor data usage
To restrict data access to authorized users
To encrypt data
To allow anyone to access data
44
What is the term for the person or organisation that determines the purposes and means of proce
Data custodian
Data protector
Data processor
Data controller
45
The Computer Misuse Act was amended to include which of the following?
The use of ad-blocking software
Making, supplying or obtaining information with the intent t
Regulations on the sale of computer components
The right to encrypt personal data
46
Which of the following is considered a strong password?
12345678
Sunshine_89
R4nd0m!zeD&P@ss
password123
47
Why is it important to regularly update software?
To patch security vulnerabilities
To make the device slower
To improve the physical appearance
To keep up with the latest trends
48
What is a benefit of using strong, unique passwords?
They make the system run faster
They require less frequent updates
They are easier to remember
They reduce the risk of unauthorized access
49
What is the consequence of committing an offence under the Computer Misuse Act?
A formal warning
Criminal prosecution
Mandatory computer literacy classes
Temporary internet ban
50
What is the purpose of logical security measures?
To physically restrict access to digital systems
To monitor the premises for intruders
To ensure the safe physical destruction of data
To protect systems and data from unauthorized digital access
51
Under the Health and Safety Act, who is responsible for providing fire safety training in the w
Each individual employee
The employer
The building landlord
The local fire brigade
52
What is the main purpose of the Data Protection Act?
To monitor all emails for security purposes
To ensure personal data is used fairly and lawfully
To prevent people from using the internet
To protect the government's data only
53
Which of the following is a potential risk of prolonged use of computers without proper ergonom
Repetitive Strain Injury (RSI)
Increased internet bandwidth consumption
Faster depreciation of computer hardware
Higher electricity bills
54
When can a design be registered under the Copyright, Designs and Patents Act 1988?
As soon as it is drawn on paper
After it has been sold commercially
When it is original and has individual character
When it is an idea or concept
55
In which year was the Freedom of Information Act enacted in the UK?
2000
2005
2010
1998
56
What impact can result in the complete loss of data?
Identity theft
Data manipulation
Data destruction
Data theft
57
Which of the following personal data is considered 'sensitive' under the Data Protection Act?
Telephone number
Email address
Health information
Name
58
Which of the following is NOT a valid reason for processing personal data under the Data Protec
Protection of the public interest
Compliance with a legal obligation
Personal interest of the data processor
The individual's explicit consent for marketing purposes
59
What does a firewall do?
It destroys sensitive data securely
It filters incoming and outgoing network traffic
It detects and removes viruses
It physically locks the server room
60
Which of the following is NOT a type of information exempt from the FOIA?
Information intended for future publication
Personal data that breaches the Data Protection Act
Information covered by legal professional privilege
Information affecting national security
61
What is required for an invention to be patentable?
It must be a scientific theory
It must be a well-known product
It must be new, inventive and have industrial application
It must be commercially successful
62
Which of these is an example of two-factor authentication (2FA)?
A password and a fingerprint scan
A password and a username
A password and a security question
Two different passwords
63
What can be a direct impact of data destruction on a business?
Operational disruption
Improved data management
Increased sales
Enhanced customer trust
64
Which of the following is considered an offence under the Computer Misuse Act?
Unauthorised access to computer material
Using someone else's Wi-Fi with permission
Creating a personal backup of purchased digital media
Installing software updates on your own computer
65
What is the maximum penalty for unauthorised access to computer systems with intent to commit a
A fine of up to £5,000
Up to 2 years imprisonment
Community service
Up to 5 years imprisonment
66
What is the main purpose of the Copyright, Designs and Patents Act 1988?
To protect the rights of creators over their creations
To provide guidelines for health and safety in workplaces
To prevent plagiarism in academic work
To regulate the use of personal data
67
Which authority oversees the enforcement of the FOIA in the UK?
The Office for Standards in Education (Ofsted)
The UK Cyber Security Council
The Data Protection Authority
The Information Commissioner's Office (ICO)
68
What does the 'right to be forgotten' under the Data Protection Act entail?
Individuals can request the deletion of personal data when i
Organisations must forget customer names after transactions
Individuals can erase their data from public records
Data must be erased after a set period automatically
69
Which of the following is an employer's responsibility under the Health and Safety Act?
Ensuring all employees have IT qualifications
Providing adequate training for safe equipment use
Offering free gym memberships to employees
Monitoring employees' personal social media accounts
70
What is a 'Denial of Service' (DoS) attack?
A legal action taken to stop a service from being used
A cyber-attack that makes a machine or network resource unav
An attack that steals service passwords
An error message displayed when a service is not available
71
What should be done with cables and wires to prevent trips and falls in an IT workspace?
Keep them organised and away from walkways
Paint them bright colours to make them visible
Cover them with rugs or carpets
Hang them from the ceiling
72
What is the primary function of anti-virus software?
To update the operating system
To prevent, detect, and remove malware
To clean the computer
To manage the computer's battery life
73
What is the purpose of the Computer Misuse Act 1990?
To ensure the safety of online transactions
To criminalise unauthorised access to computer systems
To regulate the use of personal data
To protect intellectual property online
74
What can an individual do if their FOIA request is refused?
They can make the same request after 30 days
They must accept the decision
They can take the matter to court immediately
They can appeal to the Information Commissioner's Office
75
What is the term for illegally obtaining and using another person's private identification info
Identity theft
Data modification
Data theft
Data manipulation
76
How does encryption protect data?
By physically destroying it
By locking the computer case
By scanning for viruses
By converting it into an unreadable format without a key
77
What is the penalty for serious breaches of the Data Protection Act?
Significant fines and possible legal action
A written apology
A formal warning
Compulsory data protection training
78
Which of the following is a common method used to commit identity theft?
Antivirus software
Firewall
Data encryption
Phishing
79
What is it called when an attack prevents legitimate users from accessing a service?
Denial of service (DoS)
Data destruction
Data manipulation
Data modification
80
Data modification can lead to which of the following in a healthcare setting?
Faster medical services
Increased data storage capacity
Accurate patient diagnosis
Misdiagnosis due to altered patient records
81
What does 'phishing' refer to in the context of cyber-security?
A technique for recovering lost data
The process of improving network security
A type of computer virus
The act of sending emails pretending to be from reputable co
82
What is the primary purpose of the Health and Safety at Work Act 1974?
To monitor the use of computer systems
To control internet usage in businesses
To regulate software development practices
To ensure employee wellbeing in the workplace
83
Which impact involves changing information with the intent to deceive?
Data theft
Identity theft
Data destruction
Data manipulation
84
Which of the following is a physical security measure to protect data?
Two-factor authentication
Firewalls
Antivirus software
Biometric scanners
85
What is the duration of protection for registered designs?
Lifetime of the designer
10 years from registration
50 years from registration
25 years from registration

R050 - Topic 4 Cyber Security & Legislation Flashcards | StudBud