CSEC INFORMATION TECHNOLOGY · THEORY · LESSON A13

Countermeasures: Physical and Software Measures and Personal Security Practices

Backup and recovery, hardware firewalls, intrusion detection systems and biometrics; passwords and authentication, encryption, firewalls and antivirus; and the personal habits that keep an individual safe online.

Sections 1 to 33.3≈ 50 min🎮 3 games
Before you start

By the end of this lesson you can…

Step 1 · Watch

Explainer video

4 narrated scenes. Press play, listen and read along — the points appear as they are explained. Use ‹ Prev / Next › or the scene bar to jump to any scene.

LESSON A13 · EXPLAINER

Countermeasures: Physical and Software Measures and Personal Security Practices

Most successful attacks need a mistake from a person: a weak password or a clicked link. Good countermeasures combine technology, locks and sensible habits.

Narration uses your device’s built-in voice. No sound? Switch to “Captions only” — the captions advance on their own.

Explore in 3D

Encryption in 3D

Encrypt a message and see what happens when the receiver uses the wrong key.

Step 2 · Read

Key notes

Copy these into your notebook in your own words — that is how they stick.

Backup and recovery

Copies stored safely + a plan to restore.

Hardware firewall

Filters traffic between network and Internet.

IDS

Monitors and alerts to intrusions.

Biometrics

Fingerprint, face, iris: something you are.

Strong password

Long, mixed, unique, not guessable.

Two-factor authentication

Two different proofs of identity.

Encryption

Scrambles data; needs a key to read.

Antivirus + updates

Remove malware; patch vulnerabilities.

EXAM TIPS & COMMON MISTAKES

  • Classify countermeasures as physical OR software: the syllabus uses those groups.
  • For each countermeasure say WHAT it does and WHICH threat it stops.
  • A backup protects against loss, not against a hacker reading your data: encryption does that.
  • Personal practices: name the habit and the attack it prevents.
Play & practise

Games

3 quick games on this lesson. Earn XP and badges as you play — your best score for each game is saved. Games are for practice and do not change your exam readiness. More games in the Information Technology Arcade.

Step 3 · Practise

Paper 1 practice — multiple choice

8 items modelled on real CSEC Paper 1 questions. Choose one answer for each, then check. Aim for 80% or better. Work each item on paper first.

Syllabus 3.3

1. Regular copies of data kept in a separate location are called

Answer: B. Backups allow recovery after loss.
Syllabus 3.3

2. A system that monitors a network and alerts staff to suspicious activity is a(n)

Answer: C. IDS = intrusion detection system.
Syllabus 3.3

3. Which of these is the STRONGEST password?

Answer: D. Long, mixed and unpredictable.
Syllabus 3.3

4. Using a password and a code sent to your phone is called

Answer: A. Two different proofs of identity.
Syllabus 3.3

5. Scrambling data so only someone with a key can read it is

Answer: B. Encryption protects confidentiality.
Syllabus 3.3

6. Fingerprint scanning is a type of

Answer: C. It uses a physical characteristic.
Syllabus 3.3

7. Before entering card details on a website you should check that the address begins with

Answer: D. HTTPS indicates an encrypted connection.
Syllabus 3.3

8. Which is the SAFEST action on receiving an unexpected email asking for your bank password?

Answer: A. Banks do not ask for passwords by email.
Step 4 · Apply

Paper 2 practice — structured questions

Write full answers, then reveal the mark scheme and tick the points you earned (15 marks in total). Show all your working — method marks count. Your answers are saved on this device.

Paper 2 style · Countermeasures

Question 1 [15 marks]

A small clinic stores patient records on a computer connected to the Internet. It has been warned about malware and data theft.

(a) (a) State two physical countermeasures the clinic could use and say what each protects against. [4]

MARK SCHEME — (a) (max 4)

(b) (b) Describe two software countermeasures. [4]

MARK SCHEME — (b) (max 4)

(c) (c) Describe the features of an effective password. [3]

MARK SCHEME — (c) (max 3)

(d) (d) Explain what two-factor authentication is. [2]

MARK SCHEME — (d) (max 2)

(e) (e) Suggest two personal practices a receptionist should follow when using email. [2]

MARK SCHEME — (e) (max 2)

Your progress

Lesson readiness

0%
READY
Not started
Video watched (20%)0%
Multiple choice (40%)0%
Structured (40%)0%

Sources

Where this topic appears in CSEC papers

Find these in your own past-paper booklets for extra timed practice. Items above are written in the style of these papers; any adapted from a specific question say so.