What is the purpose of the Computer Misuse Act 1990?

To criminalise unauthorised access to computer systems

Which of the following is a requirement for data controllers under the Data Protection Act?

To register with the Information Commissioner's Office

What does 'phishing' refer to in the context of cyber-security?

The act of sending emails pretending to be from reputable co

What is required to prosecute someone under the Computer Misuse Act?

Proof of unauthorised access or intent

What is a potential consequence of data manipulation for individuals?

Loss of trust in data integrity

How does encryption protect data?

By converting it into an unreadable format without a key

Which of the following is NOT a type of information exempt from the FOIA?

Personal data that breaches the Data Protection Act

Data modification can lead to which of the following in a healthcare setting?

Misdiagnosis due to altered patient records

Which of the following is an employer's responsibility under the Health and Safety Act?

Providing adequate training for safe equipment use

What does the 'right to be forgotten' under the Data Protection Act entail?

Individuals can request the deletion of personal data when i

What does the term 'hacking' refer to in the context of the Computer Misuse Act?

Unauthorised access to or modification of computer material

Which of these is an example of two-factor authentication (2FA)?

A password and a fingerprint scan

Which authority oversees the enforcement of the FOIA in the UK?

The Information Commissioner's Office (ICO)

What can an individual do if their FOIA request is refused?

They can appeal to the Information Commissioner's Office

Which of these is a correct practice to maintain good posture while using a computer?

Feet flat on the floor and back straight

Which of the following is considered an offence under the Computer Misuse Act?

Unauthorised access to computer material

Which of the following best describes 'ergonomics' in the context of IT?

Designing a workplace to fit the user's needs

What should be done with cables and wires to prevent trips and falls in an IT workspace?

Keep them organised and away from walkways

How can identity theft impact individuals?

Unauthorised financial transactions

What does a firewall do?

It filters incoming and outgoing network traffic

When can a design be registered under the Copyright, Designs and Patents Act 1988?

When it is original and has individual character

What is required for an invention to be patentable?

It must be new, inventive and have industrial application

What does the 'fair dealing' exception allow you to do?

Use protected works without permission for specific purposes

Which of these is a likely impact of data theft on individuals?

Compromised personal information

What is the primary goal of a Denial of Service (DoS) attack?

To disrupt service availability

How long does copyright protection last for a book written by an author?

70 years from the author's death

What is a 'Denial of Service' (DoS) attack?

A cyber-attack that makes a machine or network resource unav

studbud

R050 - Topic 4 Cyber Security & Legislation

85 termsStudBud Administration15 plays

Imported from external platform

Flashcards85 cardsFPractice quizPHost liveL

Questions 85

Answers

1
Which of these is a secure way to dispose of old computers?
Selling them as they are
Performing a factory reset
Throwing them in general waste
Donating them without wiping data
2
What is the maximum penalty for unauthorised access to computer systems with intent to commit a
A fine of up to £5,000
Up to 2 years imprisonment
Community service
Up to 5 years imprisonment
3
Which of the following best describes the alteration of data to make it inaccurate without perm
Data destruction
Data modification
Data theft
Denial of service (DoS)
4
What is the purpose of the Computer Misuse Act 1990?
To ensure the safety of online transactions
To regulate the use of personal data
To criminalise unauthorised access to computer systems
To protect intellectual property online
5
In which year was the Freedom of Information Act enacted in the UK?
2000
1998
2010
2005
6
What term describes the unauthorised access and copying of personal data?
Data theft
Data modification
Identity theft
Data manipulation
7
Which of the following is NOT a fair dealing exception?
Criticism, review, and news reporting
Non-commercial research and private study
Teaching in an educational establishment
Performance in public
8
Which of the following is a requirement for data controllers under the Data Protection Act?
To register with the Information Commissioner's Office
To advertise data collection practices
To use personal data for any purpose
To provide unlimited access to data
9
What is the name of the principle that assumes all government information should be available t
Public domain principle
Transparency principle
Freedom principle
Open government principle
10
What is a common consequence of data manipulation in the financial sector?
Decreased investment risks
Fraudulent transactions
Accurate financial reporting
Lower banking fees
11
What impact can result in the complete loss of data?
Data theft
Identity theft
Data manipulation
Data destruction
12
What does 'phishing' refer to in the context of cyber-security?
The process of improving network security
The act of sending emails pretending to be from reputable co
A type of computer virus
A technique for recovering lost data
13
What is required to prosecute someone under the Computer Misuse Act?
A confession from the accused
Proof of unauthorised access or intent
Witnesses to the act of accessing the computer
Proof of damage to the computer
14
What is the term for illegally obtaining and using another person's private identification info
Data theft
Identity theft
Data modification
Data manipulation
15
What is a potential consequence of data manipulation for individuals?
Increased security
Enhanced data storage
Improved data accessibility
Loss of trust in data integrity
16
What is it called when an attack prevents legitimate users from accessing a service?
Data destruction
Data modification
Denial of service (DoS)
Data manipulation
17
Which of the following is a potential risk of prolonged use of computers without proper ergonom
Higher electricity bills
Faster depreciation of computer hardware
Increased internet bandwidth consumption
Repetitive Strain Injury (RSI)
18
Which of the following is a physical security measure to protect data?
Two-factor authentication
Antivirus software
Biometric scanners
Firewalls
19
How does encryption protect data?
By physically destroying it
By locking the computer case
By converting it into an unreadable format without a key
By scanning for viruses
20
Which of the following is NOT a type of information exempt from the FOIA?
Information intended for future publication
Information covered by legal professional privilege
Information affecting national security
Personal data that breaches the Data Protection Act
21
Which impact involves changing information with the intent to deceive?
Data theft
Data destruction
Data manipulation
Identity theft
22
Which of the following is considered a strong password?
Sunshine_89
R4nd0m!zeD&P@ss
password123
12345678
23
How long does patent protection typically last?
30 years from the filing date
10 years from the filing date
Lifetime of the inventor
20 years from the filing date
24
Data modification can lead to which of the following in a healthcare setting?
Increased data storage capacity
Accurate patient diagnosis
Misdiagnosis due to altered patient records
Faster medical services
25
Which of the following personal data is considered 'sensitive' under the Data Protection Act?
Health information
Telephone number
Email address
Name
26
Which of the following is an employer's responsibility under the Health and Safety Act?
Monitoring employees' personal social media accounts
Offering free gym memberships to employees
Ensuring all employees have IT qualifications
Providing adequate training for safe equipment use
27
What does the 'right to be forgotten' under the Data Protection Act entail?
Data must be erased after a set period automatically
Individuals can erase their data from public records
Individuals can request the deletion of personal data when i
Organisations must forget customer names after transactions
28
What is the consequence of committing an offence under the Computer Misuse Act?
A formal warning
Temporary internet ban
Mandatory computer literacy classes
Criminal prosecution
29
Which legislation regulates the use of personal data in the UK?
Computer Misuse Act 1990
General Data Protection Regulation (GDPR)
Digital Economy Act 2017
Data Protection Act 2018
30
What does the term 'hacking' refer to in the context of the Computer Misuse Act?
The act of creating computer programs
Legally modifying your own computer hardware
Repairing and maintaining computer systems
Unauthorised access to or modification of computer material
31
Which of these is an example of two-factor authentication (2FA)?
A password and a fingerprint scan
A password and a security question
Two different passwords
A password and a username
32
Which authority oversees the enforcement of the FOIA in the UK?
The Data Protection Authority
The UK Cyber Security Council
The Office for Standards in Education (Ofsted)
The Information Commissioner's Office (ICO)
33
What can an individual do if their FOIA request is refused?
They can appeal to the Information Commissioner's Office
They must accept the decision
They can take the matter to court immediately
They can make the same request after 30 days
34
What does DSE stand for in the context of IT health and safety?
Dynamic Software Engineering
Data Storage Efficiency
Digital System Encryption
Display Screen Equipment
35
What can be a direct impact of data destruction on a business?
Enhanced customer trust
Operational disruption
Improved data management
Increased sales
36
Which of these is a correct practice to maintain good posture while using a computer?
Feet flat on the floor and back straight
Knees higher than hips
Shoulders hunched over the keyboard
Leaning forward towards the screen
37
Which of the following is considered an offence under the Computer Misuse Act?
Using someone else's Wi-Fi with permission
Creating a personal backup of purchased digital media
Unauthorised access to computer material
Installing software updates on your own computer
38
Which of the following best describes 'ergonomics' in the context of IT?
Designing a workplace to fit the user's needs
The technique for efficient typing
The process of installing computer networks
The study of computer programming languages
39
What should be done with cables and wires to prevent trips and falls in an IT workspace?
Cover them with rugs or carpets
Hang them from the ceiling
Paint them bright colours to make them visible
Keep them organised and away from walkways
40
Under the Health and Safety Act, who is responsible for providing fire safety training in the w
The employer
The local fire brigade
Each individual employee
The building landlord
41
Which is an example of secure data destruction?
Shredding paper documents
Installing updates
Using strong passwords
Setting up a firewall
42
How can identity theft impact individuals?
Loss of personal data
Business reputation damage
Website downtime
Unauthorised financial transactions
43
What does a firewall do?
It detects and removes viruses
It filters incoming and outgoing network traffic
It destroys sensitive data securely
It physically locks the server room
44
What is the recommended minimum distance to sit away from a computer monitor to reduce eye stra
2 metres
50 centimetres
At least an arm's length
10 centimetres
45
When can a design be registered under the Copyright, Designs and Patents Act 1988?
When it is original and has individual character
After it has been sold commercially
As soon as it is drawn on paper
When it is an idea or concept
46
What is required for an invention to be patentable?
It must be a scientific theory
It must be commercially successful
It must be new, inventive and have industrial application
It must be a well-known product
47
What does the 'fair dealing' exception allow you to do?
Copy any work without permission
Claim ownership of someone else's work
Use protected works without permission for specific purposes
Sell copies of copyrighted works
48
Which of these is a likely impact of data theft on individuals?
Improved social media experience
Enhanced privacy
Compromised personal information
Faster internet connection
49
What is the primary goal of a Denial of Service (DoS) attack?
To modify data
To steal sensitive data
To manipulate data
To disrupt service availability
50
How long does copyright protection last for a book written by an author?
50 years from the author's death
70 years from the author's death
20 years from the first publication
Lifetime of the author only
51
What is a 'Denial of Service' (DoS) attack?
A cyber-attack that makes a machine or network resource unav
An error message displayed when a service is not available
An attack that steals service passwords
A legal action taken to stop a service from being used
52
What is the penalty for serious breaches of the Data Protection Act?
Significant fines and possible legal action
A formal warning
Compulsory data protection training
A written apology
53
Which of the following activities is NOT illegal under the Computer Misuse Act?
Using a computer for personal tasks at work
Launching a denial-of-service attack
Accessing a family member's email without permission
Spreading viruses intentionally
54
Which of the following is NOT a valid reason for processing personal data under the Data Protec
Personal interest of the data processor
The individual's explicit consent for marketing purposes
Protection of the public interest
Compliance with a legal obligation
55
Which of the following is a common method used to commit identity theft?
Phishing
Data encryption
Antivirus software
Firewall
56
The Computer Misuse Act was amended to include which of the following?
The right to encrypt personal data
Regulations on the sale of computer components
The use of ad-blocking software
Making, supplying or obtaining information with the intent t
57
What is the primary purpose of the Health and Safety at Work Act 1974?
To monitor the use of computer systems
To ensure employee wellbeing in the workplace
To control internet usage in businesses
To regulate software development practices
58
What does a firewall do in the context of network security?
Speeds up the network connection
Connects multiple devices to the internet
Monitors and filters incoming and outgoing network traffic
Stores data for network users
59
Which principle of the Data Protection Act states that data should be used only for the specifi
Storage limitation
Accuracy
Data minimisation
Purpose limitation
60
How might a public authority refuse a request under the FOIA?
By charging a fee higher than the applicant is willing to pa
By claiming the information does not exist
By not responding to the request
By issuing a refusal notice explaining the exemption
61
What is the main purpose of the Data Protection Act?
To protect the government's data only
To ensure personal data is used fairly and lawfully
To monitor all emails for security purposes
To prevent people from using the internet
62
Under the Data Protection Act, individuals have the right to access personal data held about th
Individual Data Claim
Personal Data Review
Privacy Access Petition
Subject Access Request
63
Which cyber-security attack impact can lead to financial loss for businesses?
Data theft
Data manipulation
Identity theft
Data destruction
64
What is the duration of protection for registered designs?
10 years from registration
50 years from registration
Lifetime of the designer
25 years from registration
65
What is a benefit of using strong, unique passwords?
They make the system run faster
They reduce the risk of unauthorized access
They require less frequent updates
They are easier to remember
66
What is the term for the person or organisation that determines the purposes and means of proce
Data controller
Data custodian
Data protector
Data processor
67
Which of the following is protected under the Copyright, Designs and Patents Act 1988?
Physical objects only
Facts and information
Ideas and concepts
Original works of authorship
68
What is the primary function of anti-virus software?
To prevent, detect, and remove malware
To clean the computer
To manage the computer's battery life
To update the operating system
69
Which of the following is NOT a logical security measure?
CCTV surveillance
Intrusion detection systems
Encryption
User authentication
70
What is the purpose of logical security measures?
To ensure the safe physical destruction of data
To physically restrict access to digital systems
To protect systems and data from unauthorized digital access
To monitor the premises for intruders
71
What is the purpose of conducting a risk assessment in an IT environment?
To determine the budget for IT projects
To select the best software for business needs
To evaluate the performance of IT staff
To identify and control potential hazards
72
What constitutes 'authorised access' under the Computer Misuse Act?
Guessing someone's password and using their account
Accessing any public website
Using a coworker's computer while they are on break
Accessing confidential files when not permitted to do so
73
What is the main purpose of the Freedom of Information Act (FOIA)?
To protect personal privacy
To provide public access to information held by public autho
To regulate online data exchanges
To prevent the sharing of sensitive information
74
What is the maximum time a public authority has to respond to a FOIA request?
30 working days
20 working days
14 working days
40 working days
75
Which of the following is NOT a type of malware?
Spyware
Trojan horse
Freeware
Virus
76
Under the Computer Misuse Act, which of the following is considered 'unauthorised access'?
Accessing your own bank account online
Using a computer in a public library
A parent monitoring their child's internet usage
Viewing someone else's files without their permission
77
Why is it important to regularly update software?
To improve the physical appearance
To keep up with the latest trends
To patch security vulnerabilities
To make the device slower
78
What must organisations do to comply with the data security principle of the Data Protection Ac
Ensure that personal data is kept secure from unauthorised a
Delete all data after a year of collection
Share data with third-party organisations regularly
Store all data in a centralised database
79
Which of the following best describes 'encryption'?
Scrambling television signals so non-subscribers cannot view
A method of compressing files to save space
Converting information or data into a code to prevent unauth
Deleting data so that it cannot be recovered
80
What is the main purpose of the Copyright, Designs and Patents Act 1988?
To provide guidelines for health and safety in workplaces
To regulate the use of personal data
To prevent plagiarism in academic work
To protect the rights of creators over their creations
81
Which type of work is NOT covered by patents?
Literary works
Inventions
Technical processes
New pharmaceutical products
82
What is the role of access control in data security?
To allow anyone to access data
To encrypt data
To monitor data usage
To restrict data access to authorized users
83
Under the FOIA, what is the term used to describe information that a public authority is oblige
Public record
Publication scheme
Mandatory disclosure
Open data
84
What is the primary purpose of the Computer Misuse Act 1990?
To promote the safe disposal of electronic waste
To criminalise unauthorised access to computer systems
To regulate the use of personal data
To legalise certain forms of hacking
85
Who can make a request under the Freedom of Information Act?
Only members of Parliament
Only UK citizens
Only journalists and researchers
Any individual or organisation

R050 - Topic 4 Cyber Security & Legislation Flashcards | StudBud