Risks, Threats & Mitigation Strategies

CAPE IT · UNIT 2 · MODULE 3 · OBJ. 3, 5 & 6
Step 1 of 7
EXPLORE IN 3D

Defending a network in 3D

Switch the firewall and antivirus on and off and watch the attacks.

REVISION · PAST-PAPER PRACTICE

Test yourself

Multiple-choice items in Paper 1 style and structured questions in Paper 2 style, adapted from CAPE Information Technology Unit 2 past papers. Your score and answers are saved on this device. When you have finished, submit them to your teacher at the end of this section.

MCQ best –Structured –

Paper 1 practice · 10 multiple-choice items

Choose one answer for each item, then check. Aim for 80% or better.

Adapted from CAPE U2 P1 2019 Item 35; 2020 Item 37; 2022 Item 40; 2024 Item 39
1. Mr Baptiste’s PC kept running during a power cut; he only noticed the outage when the TV would not turn on. The PC was MOST likely plugged into
Answer: B. An uninterruptible power supply has a battery that keeps equipment running when mains power fails.
Adapted from CAPE U2 P1 2019 Item 38
2. A security feature that automatically records every operation performed by every user is
Answer: C. An audit trail (log) records who did what and when, for accountability and investigation.
Adapted from CAPE U2 P1 2019 Item 39; 2024 Item 37
3. Which method is MOST suitable for securing data while it is transmitted over the Internet?
Answer: D. Encryption scrambles data in transit so intercepted data cannot be read.
Adapted from CAPE U2 P1 2019 Item 40
4. Installing CCTV cameras as part of a physical security programme mainly protects against
Answer: A. CCTV deters and records physical intrusion and theft.
Adapted from CAPE U2 P1 2019 Item 41; 2020 Item 22
5. Which set of measures prevents unauthorised people from PHYSICALLY entering a server room?
Answer: B. All three are physical access controls. Passwords, usernames and firewalls are logical controls.
Adapted from CAPE U2 P1 2019 Item 42; 2020 Item 39; 2022 Item 37
6. To back up a report created today, it is BEST to perform a partial backup of
Answer: C. An incremental/partial backup copies only what changed since the last backup, here today’s work.
Adapted from CAPE U2 P1 2019 Item 44; 2020 Item 45; 2024 Item 32
7. Which threat to IT systems is MOST likely to result DIRECTLY from a hurricane?
Answer: D. Hurricanes bring flooding that can destroy equipment and data. Fires and riots are not direct results.
Adapted from CAPE U2 P1 2019 Item 34; 2020 Item 35; 2024 Item 41
8. Which term refers to environmentally sustainable computing?
Answer: A. Green computing reduces energy use and e-waste and recycles equipment responsibly.
Adapted from CAPE U2 P1 2020 Item 40
9. A server running an unpatched operating system was hacked; a fix had been available for months. This exposure is BEST described as a
Answer: B. A vulnerability is a weakness that a threat can exploit, here the missing security patch.
Adapted from CAPE U2 P1 2020 Item 30; 2022 Item 32
10. A graphic designer who spends long hours at an old CRT monitor complains of headaches and dry eyes. She is MOST at risk of
Answer: C. Eye strain, headaches and blurred vision from screens are computer vision syndrome.

Paper 2 practice · structured questions (26 marks)

Write a full answer to each part, then show the mark scheme and tick every point you earned. Marks for a part are capped at its maximum. Mark schemes are EduTech’s own; CXC does not publish them.

Based on CAPE U2 P2 May/June 2023, Question 6(a) and 2024, Question 5(c)

Question 1 [11 marks]

Several Caribbean countries have been hit by hurricanes and earthquakes. Crest Insurance is reviewing how it protects its data and systems.

(a) Describe THREE action points that should be included in Crest Insurance’s disaster recovery plan for its data. [6]

MARK SCHEME (a) · max 6

(b) List THREE strategies to counter vandalism and TWO strategies to counter system failure. [5]

MARK SCHEME (b) · max 5
Based on CAPE U2 P2 May/June 2021, Question 6(a)–(b); 2024, Question 6(b); 2022, Question 5(c)

Question 2 [15 marks]

A design firm has laptops stolen, frequent software glitches, staff complaining of aches, and old computers to dispose of.

(a) Outline TWO ways the firm can minimise hardware theft. [4]

MARK SCHEME (a) · max 4

(b) Outline TWO differences between a software glitch and a bug. [4]

MARK SCHEME (b) · max 4

(c) List THREE health and safety risks for staff who work long hours at computers. [3]

MARK SCHEME (c) · max 3

(d) Outline TWO reasons why disposing of old computers may be a challenge. [4]

MARK SCHEME (d) · max 4

Submit to your teacher

Send your multiple-choice choices and written answers to your teacher for marking. Your teacher will also see whether you opened the mark scheme or checked your answers before submitting. You can submit again if you improve your answers.

Items are adapted from CAPE® Information Technology Unit 2 Papers 01 and 02 (2019–2026) for practice. © Caribbean Examinations Council for the original papers.