Search Header Logo
G9: 5:The internet and its uses

G9: 5:The internet and its uses

Assessment

Presentation

•

Computers

•

8th Grade

•

Practice Problem

•

Easy

Created by

Soleha Majeed

Used 7+ times

FREE Resource

349 Slides • 151 Questions

1

media

2

media

3

​Trojan Horse Example

​A user downloads what appears to be a free game, utility or antivirus program. The program looks legitimate but contains malicious code. When the user runs it, the malicious code can carry out unauthorised actions. Trojan horses can arrive through email attachments, downloads or infected websites.

4

media

5

media

6

media

7

media

8

media

9

media

10

media

11

media

12

media

13

media

14

media

15

media

16

media

17

media

18

media

19

media

20

media

21

media

22

media

23

media

24

media

25

media

26

media

27

media

28

media

29

media

30

media

31

media

32

Chp 5:The internet and its uses

33

media
media

​

34

  • Your device connects to the Internet

  • Your browser contacts a web server

  • The server sends information back

  • Your browser interprets the information

  • The webpage appears on your screen

media

35

Are the Internet and the World Wide Web the same thing?

media

36

No!

The WWW is one service that uses the Internet.

media

37

Multiple Choice

Which statement is correct?

1

The Internet and WWW are exactly the same thing.

2

The WWW is a part/service that uses the Internet.

3

The Internet is a website.

4

The WWW is a type of computer.

38

What is the Internet?

The Internet is a worldwide collection of interconnected networks and devices.

The word Internet comes from:

INTERconnected NETwork

It connects:

  • Computers

  • Smartphones

  • Servers

  • Tablets

  • Routers

  • Other network devices

39

The Internet is a global network of interconnected networks.

Real-life example

Think of the Internet like a worldwide road network.

  • Roads connect cities.

  • Different roads connect to other roads.

  • Vehicles travel between different locations.

Similarly:

  • Networks connect to other networks.

  • Devices communicate across these networks.

  • Data travels between devices.

Simple definition

40

The Internet is not a single computer and not a single physical object.

It is a huge system made up of many interconnected networks.

Internet is not tangible (that is, something we can touch)

You can touch the physical equipment used to connect to the Internet, but the Internet itself is the overall interconnected system.

In short:

41

Multiple Choice

What is the best definition of the Internet?

1

A collection of web pages

2

A software application

3

A worldwide collection of interconnected networks

4

A web browser

42

The Internet supports many different services.

Examples

📧 Email

Send and receive messages.

💬 Online communication

Text, audio and video communication.

🎮 Online gaming

Play with people around the world.

What does the Internet allow us to do?

media

43

More Examples

☁️ Cloud services

Store and access files online.

💳 Online banking

Access banking services.

🛒 Online shopping

Buy products and services.

🌐 World Wide Web

Access websites and web pages.

What does the Internet allow us to do?

media

44

Important!

The WWW is not the only thing that uses the Internet.

A student can use the Internet to send an email without necessarily using the
WWW.

Online games also use the Internet.

Video calls use the Internet.

Therefore:

Internet → supports many services

WWW → one of those services

45

Multiple Choice

Which of the following is NOT necessarily the World Wide Web itself?

1

A website

2

A web page

3

An online video call

4

A collection of linked web pages

46

What is the World Wide Web?

The World Wide Web is a collection of information and resources that can be accessed using the Internet.

It includes:

  • Web pages

  • Websites

  • Images

  • Videos

  • Audio

  • Hyperlinks

  • Other multimedia content

media

47

What is the World Wide Web?

Users normally access the WWW using a:

🌐 Web Browser

Examples:

  • Google Chrome

  • Microsoft Edge

  • Mozilla Firefox

  • Safari

media

48

What is the World Wide Web?

Simple definition

The WWW is a service on the Internet that allows users to access linked information and multimedia through web browsers.


Real-life example

When you open: www.wikipedia.org

you are using the World Wide Web.

The connection to Wikipedia uses the Internet.

49

WWW vs Internet

media

Internet = infrastructure/network

WWW = information/service accessed through that network

Don't think of the WWW as physically separate from the Internet. Instead, the WWW operates using Internet infrastructure.

50

Multiple Choice

Which statement best describes the World Wide Web?

1

It is the same as the Internet.

2

It is a collection/service of linked web resources accessed through the Internet.

3

It is a type of router.

4

It is a physical cable.

51

Internet vs World Wide Web

Internet

World Wide Web

Worldwide interconnected networks

Collection of web pages/resources

Infrastructure/network

Service using the Internet

Supports many services

Mainly provides access to websites/web resources

Uses protocols such as TCP/IP

Uses web protocols such as HTTP/HTTPS

Supports email, gaming, messaging, etc.

Accessed using web browsers

Much broader

Part/service of the Internet

52

Internet vs World Wide Web

Easy way to remember

Internet = the network

WWW = websites/web resources using the network

Analogy

🏙️ Internet = entire transportation system

🛣️ WWW = one service operating on that system

53

Fill in the Blanks

"The WWW is a ​

that uses the Internet."

54

The Browser: Your Gateway to the Web

What is a Web Browser?

A web browser is software used to access and display web pages.

Examples:

🌐 Chrome
🌐 Edge
🌐 Firefox
🌐 Safari

media

55

The Browser: Your Gateway to the Web

What does a browser do?

  1. User enters a URL.

  2. Browser sends a request.

  3. Web server responds.

  4. Browser receives web resources.

  5. Browser interprets HTML and other resources.

  6. Browser displays the webpage.

media

56

The Browser: Your Gateway to the Web

Example

You type:

https://www.bbc.com

The browser helps retrieve and display the webpage.

media

57

Multiple Choice

Is the browser and search engine the same thing?

1
No, a browser and a search engine are not the same thing.
2
Browsers only display search results, not search engines.
3
Yes, a browser and a search engine are the same thing.

58

The Browser: Your Gateway to the Web

Browser ≠ Search engine


Chrome = browser

Google = search engine


Google Search can be used inside a browser.

media

59

Multiple Choice

Which statement is true?

1

The Internet is a service provided by the WWW.

2

The WWW and Internet are identical.

3

The Internet only contains websites.

4

The WWW uses the Internet to access web resources.

60

In your registers:

1st put the main heading "Unit 5: The internet and its uses"

Sub heading: "the internet and the World Wide Web (WWW)"

Write answers to the questions below:
1. What is the Internet?

2. What is the WWW?

3. Give TWO differences between them.

4. What is a web browser?

61

Multiple Choice

What is the main purpose of a web browser?

1

To manufacture websites

2

To access and display web resources

3

. To connect electrical cables

4

To replace the Internet

62

How does a webpage reach your screen?

Suppose you type:

www.netflix.com

Step 1

Your browser processes the address.

⬇️

Step 2

Your device communicates across the Internet.

⬇️

Step 3

A request reaches the appropriate web server.

⬇️

Step 4

The server sends webpage resources back.

⬇️

Step 5

Your browser processes the resources.

⬇️

Step 6

The webpage appears on your screen.

63

How does a webpage reach your screen?

Real-life analogy

📱 You: "Please send me the menu."

🏪 Restaurant server: "Here is the menu."

🌐 Browser: requests webpage

🖥️ Web server: sends webpage data

​The important conceptual chain is: Browser → Internet → Web server → Internet → Browser

64

Multiple Choice

Where is a website's webpage content generally stored before it is sent to users?

1

Only inside the user's keyboard

2

On a web server

3

On a web server

4

Inside the monitor

65

"If I tell you 'go to a specific house' but don't give you an address, can you find it?"

66

Probably not.

Similarly, a browser needs an address to locate a web resource.

67

What is a URL?

URL = Uniform Resource Locator

A URL is the address used to locate a resource on the Web.

Think of it like a digital address.

Real-life analogy

A house has:

Country → City → Street → House number

A web resource has:

Protocol → Website/domain → Path → File/resource

Example

https://www.example.com/students/results.html

A URL tells the browser where and how to access a resource.

68

Multiple Choice

What does URL stand for?

1
Universal Resource Link
2
Uniform Resource Locator
3
Uniform Resource List
4
Unique Resource Locator

69

Anatomy of a URL

​The URL contains different parts:

https://
→ Protocol

www
→ Host/subdomain component

example
→ Domain name

.com
→ Domain type / top-level domain

/school/
→ Path

results.html
→ File/resource name

70

Anatomy of a URL

General format

protocol://website address/path/file name

71

Anatomy of a URL

General format

protocol://website address/path/file name

  • www is not always present.

  • A path is not always present.

  • A file name is not always explicitly visible.

72

Multiple Choice

1

Protocol

2

Domain type/top-level domain

3

File name

4

Path

73

The Protocol in a URL

What is a protocol?

A protocol is a set of rules that devices follow when communicating.

Think of it as a set of communication rules.

For web addresses, you may see:

http://

or

https://

Example

http://example.com

https://example.com
The protocol tells the browser
how communication should take place.

74

The Protocol in a URL

Real-life analogy

Imagine two people communicating.

They need to agree on:

  • What language to use

  • How to start the conversation

  • How to respond

  • How to end the conversation

A computer network also needs agreed rules.

Those rules are called protocols.

75

The Protocol in a URL

A protocol isn't a physical object.

It is a set of rules/standards.

76

Multiple Choice

What is a protocol?

1

A physical network cable

2

A set of rules for communication

3

A type of website

4

A web browser

77

The Protocol in a URL

Real-life analogy

Imagine two people communicating.

They need to agree on:

  • What language to use

  • How to start the conversation

  • How to respond

  • How to end the conversation

A computer network also needs agreed rules.

Those rules are called protocols.

78

HTTP

HTTP = Hypertext Transfer Protocol

HTTP is a set of rules used for transferring web resources between clients and web servers.

Simple example

You enter:

http://example.com

Your browser can send a request to the web server.

The server sends the requested web resources back.

HTTP is used for communication between:

Web browser ↔ Web server

79

HTTP

HTTP = Hypertext Transfer Protocol

HTTP is a set of rules used for transferring web resources between clients and web servers.

Simple example

You enter:

http://example.com

Your browser can send a request to the web server.

The server sends the requested web resources back.

HTTP is used for communication between:

Web browser ↔ Web server

80

HTTP

👩‍💻 Browser:

"Please send me this webpage."

🖥️ Server:

"Here is the requested information."

HTTP defines rules for this communication.

Do not tell students that HTTP itself is "the Internet." It is a protocol used for web communication over networks.

81

Multiple Choice

What does HTTP stand for?

1
Hypertext Transfer Protocol
2
Hyperlink Transfer Protocol
3
Hypertext Transmission Protocol
4
High Transfer Text Protocol

82

HTTP and HTML: Don't confuse them!

Students often confuse these two:

HTML

HyperText Markup Language

Used to structure web pages.

Example:

Headings, paragraphs, images, links, tables.

HTTP

HyperText Transfer Protocol

Used for communication/transfer of web resources.

Easy way to remember

HTML = creates/structures webpage content

HTTP = transfers web resources

83

HTTP and HTML: Don't confuse them!

No.

HTML is a markup language.

HTTP is a protocol.

media

84

Multiple Choice

Which statement correctly distinguishes HTML and HTTP?

1

HTML is a protocol and HTTP is a language.

2

HTML structures web content while HTTP defines rules for transferring web resources.

3

Both are programming languages.

4

Both are web browsers.

85

HTTPS

HTTPS = Secure Web Communication

HTTPS = Hypertext Transfer Protocol Secure

HTTPS is HTTP with security provided using modern cryptographic protocols, primarily TLS (Transport Layer Security).

Why is HTTPS important?

It helps protect information sent between your browser and the website.

Examples of sensitive information:

🔐 Passwords
💳 Payment information
📧 Personal information
👤 Login details

media
media

86

HTTPS

Example

Online banking:

https://bank-example.com

HTTPS helps protect communication between:

Your browser 🔒 Website

media
media

87

HTTPS

Note:

HTTPS makes a website "completely safe." It protects the connection, but it does not guarantee that the website itself is trustworthy.

media
media

88

Multiple Choice

What is the main purpose of HTTPS?

1

To make websites colourful

2

To provide more secure communication between a browser and web server

3

To replace HTML

4

To increase the size of webpages

89

HTTP vs HTTPS

HTTP

HTTPS

Hypertext Transfer Protocol

Hypertext Transfer Protocol Secure

Web communication

Secure web communication

Does not provide TLS encryption

Uses TLS to protect communication

Less suitable for sensitive information

Preferred for sensitive information

Starts with http://

Starts with https://

90

HTTP vs HTTPS

Example

HTTP

http://example.com

HTTPS

https://example.com

Look for:

🔒 HTTPS

when entering sensitive information.

media

91

HTTP vs HTTPS

The key concept is:

HTTPS helps protect data while it travels between the browser and server.

media

92

Multiple Choice

Which URL indicates secure url?

1
A URL that starts with 'ftp://'
2
A URL that starts with 'http://'
3
A URL that starts with 'file://'
4
A URL that starts with 'https://'

93

Real-Life Example: Online Shopping

Imagine you're buying headphones online.

You enter:

  • Name

  • Address

  • Phone number

  • Card/payment information

What would you prefer?

❌ http://shop-example.com

or

✅ https://shop-example.com

94

Real-Life Example: Online Shopping

Why?

HTTPS helps protect information as it travels between:

Your device → Internet → Website

But remember!

HTTPS does not automatically mean the website is legitimate.

media

95

Real-Life Example: Online Shopping

You should still:

  • Check the website address carefully.

  • Avoid suspicious links.

  • Check that the domain is correct.

  • Be careful with unknown websites.

media

96

Real-Life Example: Online Shopping

Ask:

"If a fake website uses HTTPS, does that automatically make it trustworthy?"

No.

HTTPS protects the connection; it doesn't prove that the website owner is honest.

media

97

Multiple Choice

Why is HTTPS especially useful when shopping online?

1

It makes products cheaper.

2

It protects communication containing sensitive information.

3

It makes the browser faster

4

It removes advertisements.

98

Real-Life Example: Online Banking

Imagine you log into your bank account.

You enter:

Username: student123

Password: ********

You may then view:

💰 Account balance
💳 Transactions
🏦 Bank details

media

99

Real-Life Example: Online Banking

Why should secure communication be used?

Because sensitive information is being exchanged.

HTTPS helps protect the communication between:

Browser 🔒 Bank's web server

media

100

Multiple Choice

Which situation most strongly requires secure web communication?

1

Reading a public weather page

2

Looking at a public school timetable

3

Logging into an online banking account

4

Reading a public news article

101

Putting Everything Together

https://www.youtube.com/watch?v=12345

What does each part mean?

https:// → Protocol

www → Host/subdomain component

youtube → Domain name

.com → Domain type

/watch/ → Path

?v=12345 → Additional information used to identify/request the resource

102

Putting Everything Together

What happens next?

You

⬇️

Web Browser

⬇️

Internet

⬇️

Web Server

⬇️

Internet

⬇️

Web Browser

⬇️

Webpage/video appears

103

Multiple Choice

In:

https://www.bbc.co.uk/news

Which part represents the country code?

1

https

2

bbc

3

.co

4

.uk

104

Internet, WWW, Browser, URL: Who Does What?

🌍 Internet

Connects networks and devices.

🌐 WWW

Provides access to web resources.

🖥️ Web Browser

Software used to access and display webpages.

📍 URL

Address used to locate a web resource.

📜 HTTP/HTTPS

Protocols used for web communication.

🖥️ Web Server

Computer/system that stores and provides web resources.

A browser uses a URL to request web resources from a web server over the Internet using web protocols such as HTTP or HTTPS.

105

Multiple Choice

Which sequence is most appropriate?

1

URL → Browser → Web server → Internet

2

Browser uses URL → communicates over Internet → web server responds

3

Internet uses browser → creates URL → server

4

HTML → keyboard → Internet → URL

106

Common Misconceptions ❌

107

Multiple Choice

"Internet = WWW"

1

True

2

False

108

❌ Don't make these mistakes!

1. "Internet = WWW"

❌ Incorrect





✅ WWW is a service that uses the Internet.

media

109

Multiple Choice

"Chrome is the Internet"

1

True

2

False

110

❌ Don't make these mistakes!

"Chrome is the Internet"

❌ Incorrect




✅ Chrome is a web browser.

media

111

Multiple Choice

"Google is a browser"

1

True

2

False

112

❌ Don't make these mistakes!

"Google is a browser"

❌ Incorrect

✅ Google is primarily a search engine.

media

113

Multiple Choice

"HTML is a protocol"

1

True

2

False

114

❌ Don't make these mistakes!

"HTML is a protocol"

❌ Incorrect



✅ HTML is a markup language.

media

115

Multiple Choice

"HTTP means secure"

1

True

2

False

116

❌ Don't make these mistakes!

"HTTP means secure"

❌ Incorrect


✅ HTTPS provides secure web communication using TLS.

media

117

Multiple Choice

"HTTPS means the website is definitely trustworthy"

1

True

2

False

118

❌ Don't make these mistakes!

"HTTPS means the website is definitely trustworthy"

❌ Incorrect



✅ HTTPS protects the connection but does not guarantee the site's legitimacy.

media

119

Multiple Choice

Which statement is FALSE?

1

Chrome is a web browser.

2

HTML is a markup language.

3

HTTPS provides secure communication.

4

The WWW and Internet are exactly the same thing.

120

Exam Practice: Identify the Component

Consider:

https://www.school.edu.pk/ict/index.html

Identify:

1. Protocol: __________

2. Host/subdomain: __________

3. Domain name: __________

4. Domain type: __________

5. Country code: __________

6. Path: __________

7. File name: __________

121

Exam Practice: Identify the Component

Scenario

Ali wants to buy a new laptop online.

He finds two links:

Website A

http://shop-example.com

Website B

https://shop-example.com

He needs to enter his:

  • Name

  • Address

  • Phone number

  • Payment information

Questions

1. Which connection would be preferable?

2. Why?

3. What does the "S" in HTTPS indicate?

122

Questions to be done in registers

Q7. What does HTTP stand for?
Answer:

Q8. What does HTTPS stand for?
Answer:

Q9. What is the main difference between HTTP and HTTPS?
Answer:

Q10. Why is HTTPS important when using online banking?
Answer:

123

Questions to be done in registers

Q7. What does HTTP stand for?
Answer: Hypertext Transfer Protocol.

Q8. What does HTTPS stand for?
Answer: Hypertext Transfer Protocol Secure.

Q9. What is the main difference between HTTP and HTTPS?
Answer: HTTPS provides more secure communication by using TLS to protect data transmitted between a browser and a web server.

Q10. Why is HTTPS important when using online banking?
Answer: HTTPS helps protect sensitive information such as usernames, passwords and financial information while it is being transmitted.

124

Categorize

Options (13)

<body>

<table>

<img>

<h1>

<header>

<footer>

<ol>

href

border

bgcolour

class

align

font style

Organize these options into the right categories

Html tags
HTML Attributes

125

What happens when you open a website?
media
media

126

How Does Your Computer Find a Website?

Imagine you type:

www.example.com

into your browser.

Your computer cannot simply say:

"I know where example.com is!"

127

How Does Your Computer Find a Website?

It needs to find the IP address of the website's server.

For example:

www.example.com

⬇️

IP address

192.0.2.10

The system that helps find this IP address is called:

DNS

Domain Name System / Domain Name Server

128

Real-life analogy 🏠

You know your friend's name:

Ahmed

But to visit Ahmed's house, you need his:

Address

Similarly:

Domain name = easy-to-remember name

IP address = network address

129

"If I give you an IP address like 142.250.183.14, would you remember it?"

130

"Would you rather type google.com?"

This establishes why DNS exists.

131

Multiple Choice

Why is DNS needed when accessing a website?

1

To create HTML

2

To convert a domain name into an IP address

3

To display images

4

To store cookies

132

What is DNS?

DNS = Domain Name System

DNS is a system used to find the IP address associated with a domain name.

Why do we need it?

Humans prefer names such as:

www.youtube.com

Computers communicate using:

IP addresses

133

What is DNS?

So DNS helps connect the two:

Domain name

www.youtube.com

⬇️ DNS

IP address

[IP address]

Key idea

DNS translates/maps domain names to IP addresses.

134

What is DNS?

DNS does not "turn a website into an IP address."

It finds the IP address associated with the domain name.

Students should understand that the website server has an IP address, and DNS helps the browser discover it.

135

Multiple Choice

What does DNS mainly do? in simple words

1
DNS mainly translates domain names into IP addresses.
2
DNS stores website content on servers.
3
DNS manages email delivery for domains.
4
DNS provides security for online transactions.

136

Domain Name vs IP Address

Domain Name

A human-friendly name.

Example:

www.example.com

Easy for people to remember.

IP Address

A numerical address used to identify a device/server on a network.

Example:

203.0.113.25

137

Domain Name vs IP Address

Think of it like this:

📱 Contact name: "Mom"

📞 Phone number: actual number used to contact her


Similarly:

🌐 Domain: example.com

🔢 IP address: numerical network address



Important

Users normally do not need to memorise IP addresses.

DNS does this work for them.

138

Multiple Choice

Which is easier for humans to remember?

1

142.250.183.14

3

A MAC address

4

A binary IP address

139

What Happens When You Type a URL?

You type:

www.school.com

What happens?

Step 1

🧑‍💻 You enter the URL.

⬇️

Step 2

🌐 The browser needs the website's IP address.

⬇️

Step 3

🔎 The browser/device uses DNS to find the IP address.

⬇️

140

What Happens When You Type a URL?

⬇️

Step 4

🖥️ The IP address is returned.

⬇️

Step 5

📡 Your computer communicates with the web server.

⬇️

Step 6

📄 The webpage is sent back.

⬇️

Step 7

🌐 The browser displays the webpage.

141

Multiple Choice

What happens after the browser obtains the correct IP address?

1

The computer contacts the appropriate web server.

2

The computer deletes the URL.

3

DNS creates HTML.

4

The browser shuts down.

142

DNS

Domain name

www.example.com

⬇️

🔎 DNS

⬇️

IP address

203.0.113.25

⬇️

🖥️ Web server

Remember:

DNS = Internet's address lookup system

143

Multiple Choice

Which analogy best describes DNS?

1

A calculator

2

An address lookup service

3

A keyboard

4

A web browser

144

DNS Servers Have a Database

DNS servers contain information that allows domain names to be associated with IP addresses.

For example:

Domain name

IP address

www.example.com

203.0.113.25

www.school.com

198.51.100.12

www.shop.com

192.0.2.15

When a DNS server knows the answer, it can return the corresponding IP address.

145

DNS Servers Have a Database

What if it doesn't know?

It can ask another DNS server.


Key point

DNS is not necessarily just one server.

It is a system involving many DNS servers.


media

146

404 ERROR

media

147

DNS Servers Have a Database

This corrects another common misconception.

Students may imagine:


"There is one giant DNS computer somewhere."


Explain that DNS is a distributed system involving many servers.

148

Multiple Choice

What can a DNS server do if it does not have the required domain/IP information?

1

Ask another DNS server

2

Turn off the Internet

3

Delete the website

4

Create a new browser

149

What is a DNS cache?

A DNS cache is your device's temporary memory that stores website names and their matching IP addresses so pages load faster on future visits. [1, 2]

150

What is a DNS cache?

How It Works

  • First Visit: When you type a website address like google.com, your device asks a Domain Name System (DNS) server to find its numerical IP address. This process checks multiple external servers.

  • Saving the Answer: Your device saves (or "caches") this matching pair in a quick-lookup list.


  • Next Visit: The next time you go to that site, your device skips asking the external servers and uses the saved address instantly

151

What is a DNS cache?

Why It Matters

  • Speed: Web pages open much faster because your device avoids a long search.

  • Efficiency: It reduces traffic and workload on global internet servers.

  • Expiration (TTL): Saved items have a timer called Time to Live (TTL). When it expires, your device deletes the entry so it can get updated information if the website changes its addres

152

What is a DNS cache?

This can:

⚡ Reduce lookup time
📉 Reduce unnecessary DNS queries
🌐 Make access more efficient

153

What is a DNS cache?

Explain the concept using a student example.

"If you ask me the same question tomorrow and I remember the answer, I don't need to look it up again."


That's similar to caching.


Do not imply that cached DNS information stays forever. DNS records have expiration times.

154

Multiple Choice

Why is DNS caching useful?

1

It can reduce the need to perform another DNS lookup.

2

It permanently stores every webpage.

3

It encrypts all Internet traffic.

4

It replaces the web browser.

155

The Complete DNS Process

Example

User enters:

www.school.com

1️⃣ Browser asks DNS

"What IP address belongs to www.school.com?"

⬇️

2️⃣ DNS Server 1 checks its information/cache

If it doesn't know:

⬇️

3️⃣ DNS Server 1 asks another DNS server

⬇️

4️⃣ DNS Server 2 finds the IP address

Example:

203.0.113.25

⬇️

5️⃣ IP address is returned

⬇️

6️⃣ Computer contacts the web server

⬇️

7️⃣ Webpage is downloaded

⬇️

8️⃣ Browser interprets the HTML

⬇️

9️⃣ Webpage appears on screen

156

Multiple Choice

Which step happens FIRST?

1

Webpage is displayed

2

HTML is interpreted

3

User enters the URL

4

Web server sends HTML

157

DNS Process: Exam Version : AFL (in your registers)

Put these steps in the correct order:

A. Webpage is downloaded.

B. User enters URL.

C. DNS finds the IP address.

D. Computer contacts the web server.

E. Browser displays webpage.

158

DNS Process: Exam Version

Exam tip ⭐

If asked:

"Describe how DNS is used to locate a webpage."

Include these keywords:

URL → DNS → IP address → web server → webpage

159

Multiple Choice

Which sequence is correct?

1

URL → DNS → IP address → web server → webpage

2

URL → webpage → DNS → IP address

3

IP address → URL → browser → DNS

4

. Browser → webpage → DNS → URL

160

What Does the Web Server Do?

Once the computer knows the IP address:

Computer

⬇️

Communicates with

⬇️

Web Server

The web server provides the requested resources.

These may include:

  • HTML

  • Images

  • CSS

  • JavaScript

  • Videos

  • Other files

The browser receives the resources and displays the webpage.

161

What Does the Web Server Do?

Simple flow

DNS finds the server

↓

Web server provides the resources

↓

Browser displays them

DNS does NOT send the webpage.

DNS helps locate the server.

The web server sends the requested web resources.

162

Multiple Choice

What is the main role of the web server in this process?

1

To translate the domain name

2

To provide requested web resources

3

To act as the user's keyboard

4

To create the DNS system

163

Now: How Does a Website Remember You?

Imagine you visit an online shopping website.

You add:

🛒 Shoes
🛒 Backpack
🛒 Headphones

You close the website.

Later, you return.

The website may still remember information about your visit.

How?

🍪 COOKIES

164

Multiple Choice

What is one purpose of cookies?

1

To store information that helps a website remember certain user information/preferences

2

To physically connect computers

3

To replace DNS

4

To create IP addresses

165

What Is a Cookie?🍪

A cookie is a small piece of data stored by a website in a user's browser/device.

The web server can send the cookie to the browser.

The browser stores it and may send it back to the website in later requests.

A cookie can contain information such as:

  • User preferences

  • Language

  • Currency

  • Session information

  • Website activity

  • Identifiers

166

What Is a Cookie?🍪

Simple idea:

A cookie allows a website to remember information about a user's interaction with it.
"Imagine a shop gives you a small card saying, 'This customer prefers English and PKR.' When you return, the shop can recognise those preferences."

Clarify that a cookie is data, not a virus or a complete program.

167

Multiple Choice

What is a cookie?

1

A type of computer virus

2

A small piece of data stored by a website in a browser/device

3

. A type of IP address

4

A web browser

168

How Is Information Stored in a Cookie?

A cookie can be thought of as a small look-up table containing:

Key → Data

Examples

Key

Data

surname

Jones

language

English

currency

PKR

music

Rock

169

How Is Information Stored in a Cookie?

The key tells us what the information represents.

The data is the value associated with that key.

Example

language → English

currency → PKR

Notes

This comes directly from the textbook concept of key-data pairs.

"If the key is language, what could the data be?"

170

Multiple Choice

In a cookie, what does the key represent?

1

. The value being stored

2

The type/name of the information being stored

3

The website's IP address only

4

The browser software

171

What Can Cookies Do?

Cookies can be used to:

🧠 Remember

User preferences

🛒 Maintain

Shopping baskets

🔐 Maintain sessions

Help recognise an active session

🎯 Personalise

Website content

👀 Track

Browsing activity

🌍 Remember

Language and currency preferences

🎮 Save

Progress in online games and quizzes

172

How Is Information Stored in a Cookie?

Cookies have many legitimate uses.

They aren't simply "bad."

Some uses improve convenience, while others may raise privacy concerns.

173

Multiple Choice

Which is NOT a typical use of cookies?

1

Remembering language preferences

2

Maintaining shopping baskets

3

Converting domain names into IP addresses

4

Personalising webpages

174

Real-Life Example: Language & Currency 🌍

Imagine you visit an international shopping website.

On your first visit you select:

🌐 Language: English

💰 Currency: PKR

The website may store these preferences.

On a later visit:

The website can recognise:

Language → English

Currency → PKR

So you don't have to select them again.

175

Real-Life Example: Language & Currency 🌍

Benefit:

✅ More convenient
✅ Saves time
✅ Personalised experience

Teacher Notes

Ask students:

"What happens when you visit a website that automatically remembers your language?"

Then ask:

"Would you consider that useful?"

This introduces the benefit of cookies.

176

Multiple Choice

Which cookie use is demonstrated here?

1

Finding an IP address

2

Remembering user preferences

3

Encrypting a webpage

4

Creating HTML

177

Real-Life Example: Online Shopping 🛒

You visit an online store.

You add:

🎧 Headphones

💻 Laptop

🖱️ Mouse

to your shopping basket.

You move to another page.

The website still knows:

Your basket contains 3 items.

Cookies can help maintain information about your shopping session.

178

Real-Life Example: Online Shopping 🛒

Why is this useful?

Without a way to maintain session information, your basket could be lost as you move between pages.

Teacher Notes

This is one of the textbook's key examples.

"Have you ever added something to an online basket and continued shopping without buying it immediately?"


Then explain that mechanisms such as session cookies can help maintain the shopping session.

179

Multiple Choice

Which type of cookie is commonly associated with maintaining a temporary shopping session?

1

Session cookie

2

Persistent cookie

3

DNS cookie

4

. HTML cookie

180

Two Main Types of Cookies

🍪 Two Types

1. Session Cookie

⏱️ Temporary

Usually exists only during the current browsing session.


2. Persistent Cookie

📅 Remains for a specified period.

Has an expiry date/time.

May remain after the browser is closed.

Memory Trick

SESSION = Short-term

PERSISTENT = Stays

181

Two Main Types of Cookies

Persistent does NOT mean "forever."

It means the cookie can remain after the current session until it expires or is deleted.

182

Multiple Choice

Which cookie is normally temporary?

1

A. Persistent cookie

2

B. Session cookie

183

Session Cookies

Session cookies are temporary cookies associated with the current website session.

Example:

You visit an online shop.

You add:

🛒 Shoes

🛒 Bag

🛒 Headphones

The session cookie can help maintain your shopping session.

When the session ends:

Session cookie → deleted

Remember:

Session cookie = temporary

184

Session Cookies

According to the textbook, session cookies are stored in temporary memory and cease to exist when the browser is closed or the website session terminates.

For conceptual understanding, tell students:

"They are designed to last only for the current session."

185

Multiple Choice

What normally happens to a session cookie when the browsing session ends?

1

It becomes persistent

2

It is normally deleted

3

It becomes an IP address

4

It is sent to another computer

186

Persistent Cookies

Persistent cookies remain stored after the current browsing session ends.

They have an expiry date/time.

They can remain on the user's device until:

  • The expiry date is reached, OR

  • The user deletes the cookie.

187

Persistent Cookies

Example

You select:

Language → English

You close the browser.

You return later.

The website may still recognise your preference.

Remember:

Persistent = remains beyond the current session

This is an important exam distinction.

Emphasise:

Session → deleted when session ends

Persistent → remains until expiry/deletion

188

Multiple Choice

What is a key characteristic of a persistent cookie?

1

It is always deleted when the browser closes.

2

It remains for a specified period and has an expiry date/time.

3

It only stores IP addresses.

4

It cannot be deleted.

189

Session vs Persistent

Feature

Session Cookie

Persistent Cookie

Duration

Temporary

Longer-term

Expiry

Usually tied to session

Has expiry date/time

After browser closes

Normally deleted

May remain

Shopping session

✅ Common use

Possible, depending on design

Remember preferences

Less suitable

✅ Common use

Login recognition

Session-related

Can support "remember me" functionality

190

Session vs Persistent

​Easy memory trick
⏱️ SESSION → NOW
📅 PERSISTENT → LATER

191

Multiple Choice

Which statement is correct?

1

Session cookies always remain permanently.

2

Persistent cookies are always deleted when the browser closes.

3

Session cookies are temporary, while persistent cookies can remain after the session ends.

4

There is no difference between them.

192

First Visit to a Website

First visit / login

1. User's browser requests webpage

⬇️

2. Web server responds

⬇️

3. Server sends a cookie

⬇️

4. Browser stores the cookie

193

First Visit to a Website

Two possibilities:

Session Cookie

Stored temporarily.

Persistent Cookie

Stored for a longer period with an expiry date/time.

194

Multiple Choice

During a first visit, who can send a cookie to the browser?

1

The web server

2

The keyboard

3

The monitor

4

DNS only

195

What Happens When the Browser Closes?

If it is a SESSION cookie:

🌐 Browser closes

↓

🍪 Session cookie

↓

❌ Deleted

196

What Happens When the Browser Closes?

If it is a PERSISTENT cookie:

🌐 Browser closes

↓

🍪 Persistent cookie

↓

✅ Remains stored

↓

📅 Until expiry/deletion

197

Multiple Choice

A cookie remains after the browser has been closed. Which type is it most likely to be?

1

Session cookie

2

Persistent cookie

3

DNS cookie

4

Temporary HTML

198

Returning to the Website

Subsequent visit

The user visits the website again.

The browser may send relevant stored cookies.

The web server can use the information to recognise the browser and retrieve appropriate preferences/session information.

Example

Previously:

Language → English

Currency → PKR

Next visit:

🌐 Website recognises the stored preference.

Result:

The website can provide a more personalised experience.

199

Returning to the Website

You can say:

"The website can recognise the browser."

Rather than saying:

"The cookie knows who you are."

A cookie is data stored by the browser; the website uses that data.

200

Multiple Choice

On a subsequent visit, what can a website do with a relevant persistent cookie?

1

Use it to recognise the returning browser and preferences

2

Convert it into HTML

3

Turn it into an IP address

4

Delete the Internet

201

Cookies as a Website's Memory 🧠

Think of cookies as a small memory mechanism.

Without cookies:

Website:

"Who are you? What language do you prefer?"

Every visit might require information again.

With appropriate cookies:

Website can recognise stored information.

"Welcome back! We remember your preferences."

202

Cookies as a Website's Memory 🧠

Benefits

✅ Convenience
✅ Personalisation
✅ Faster interaction
✅ Remember settings

Stress that cookies don't mean the website literally remembers everything about the person. They provide stored data/identifiers that help the website maintain state or preferences.

203

Multiple Choice

Why are cookies sometimes described as a website's "memory"?

1

A. They can help a website remember information about previous interactions.

2

B. They increase the computer's RAM.

3

C. They store every webpage permanently.

4

D. They replace the hard drive.

204

Tracking User Activity 👀

Cookies can also be used to help track:

  • Websites visited

  • Browsing activity

  • Preferences

  • Products viewed

  • Previous purchases

This information may be used to:

🎯 Personalise content

🎯 Recommend products

🎯 Target advertising

205

Tracking User Activity 👀

Example

You repeatedly look at:

🎧 Headphones

The website may later show:

"You may also like these headphones."

206

Tracking User Activity 👀

This is where students should understand the privacy issue.

Ask:

"How did the website know you were interested in headphones?"

Explain that cookies and other tracking technologies can contribute to this kind of personalisation.

207

Multiple Choice

Which is a possible use of cookie-related browsing information?

1

Targeting advertisements based on previous activity

2

Increasing CPU speed

3

Changing the screen resolution

4

Finding a printer

208

Advantages of Cookies

Why are cookies useful?

🛒 Shopping

Remember items in a basket.

🌍 Preferences

Remember language and currency.

🔐 Sessions

Help maintain a user's session.

👤 Recognition

Help websites recognise returning browsers.

🎮 Games & quizzes

Save progress.

📄 Personalisation

Display customised webpages.

209

Multiple Choice

Which is an advantage of cookies?

1

They can remember user preferences.

2

They eliminate the need for the Internet.

3

They replace DNS.

4

They make every website secure.

210

Cookies in Online Games 🎮

Cookies can help websites remember progress or preferences.

Example

You play an online quiz.

You complete:

Level 1 → ✅

Level 2 → ✅

You leave the website.

When you return, your progress may be recognised.

Other examples

  • Online quizzes

  • Educational games

  • Puzzle websites

  • Learning platforms

211

Multiple Choice

Which is an example of a cookie being used in an online game?

1

Remembering game progress or preferences

2

Increasing graphics card memory

3

Creating a new IP address

4

Connecting the monitor

212

Cookies & Online Financial Transactions 💳

Cookies may also be involved in online financial transactions.

For example, they can help maintain information about a user's session while moving between pages.

Important!

Cookies are not the same as encryption.

For sensitive transactions, secure communication such as:

HTTPS 🔒

is also important.

Remember:

Cookie → helps remember/maintain information

HTTPS → helps protect communication

213

Multiple Choice

Which statement is correct?

1

Cookies provide the same function as HTTPS encryption.

2

Cookies can help maintain sessions, while HTTPS helps secure communication.

3

Cookies replace HTTPS.

4

HTTPS stores shopping baskets.

214

Which is a possible use of cookie-related browsing information?

Replace this with your body text. Duplicate this text as many times as you would like. All provided templates can be reused multiple times. Wish you a good day.

Happy teaching!

215

media
5.2 Digital Currency

216

How Does Money Move Today?

Imagine this situation:

Ali wants to send Rs. 5,000 to Sara.

He could:

  • Give her cash 💵

  • Use a bank transfer

  • Use a mobile banking app

  • Use a digital payment service

Think–Pair–Share

217

218

Multiple Choice

Which of the following is an example of digital currency?

1

Bitcoin

2

Debit card transactions

3

Printed banknotes

4

Gold bars

219

What Is Digital Currency?

Digital currency exists purely in a digital format.

It has no physical form unlike conventional currency such as:

  • Dollar ($)

  • Pound (£)

  • Euro (€)

  • Yen (¥)

Digital currency is stored and represented as data in a computer system.

Simple Example

When you see:

Balance: Rs. 25,000

in your banking app, there isn't necessarily a pile of Rs. 25,000 sitting inside your phone.

The balance is represented by digital data in a banking system.

220

What Is Fiat Currency?

Fiat currency is conventional currency issued and backed by a government.

Examples include:

  • Pakistani Rupee (PKR)

  • US Dollar (USD)

  • British Pound (GBP)

  • Euro (EUR)

  • Japanese Yen (JPY)

Fiat currency can exist as:

  • Physical notes and coins

  • Digital records in bank accounts

221

What Is Fiat Currency?

Important


Digital currency ≠ necessarily cryptocurrency.



Digital currency is a broad term.

Cryptocurrency is one particular type of digital currency that uses cryptography and decentralised systems.

222

Multiple Choice

What is a key characteristic of digital currency?

1

It exists only in electronic form and has no physical presence.

2

It is only issued by banks and governments.

3

It cannot be used for purchasing goods or services.

4

It is illegal in all countries.

223

Digital Currency in Everyday Life

Digital money is already used in many everyday situations.

Examples:

Online banking

  • Checking account balance

  • Sending money

  • Paying bills

Mobile payment apps

  • Paying for goods

  • Sending money

  • Making online purchases

Digital payment services

  • Online payments

  • Transfers between accounts

The money is represented digitally and transferred electronically.

224

How Can Digital Currency Be Used?

Digital currency can be used to:

  • Pay for goods

  • Pay for services

  • Transfer money between accounts

  • Make online payments

  • Bank using smartphones/computers

Example

A customer purchases a product online.

Customer's digital account → Payment system → Seller's digital account

No physical cash needs to be handed over.

225

Multiple Choice

Which statement best describes digital currency?

1

Currency that can only exist as physical coins

2

Currency that exists only in digital form

3

Currency that can only be used in banks

4

Currency that is always cryptocurrency

226

How Does Digital Currency Work?

Consider two people:

Nick → Irina

Nick wants to send money to Irina.

Nick uses Bank X.

Irina uses Bank Y.

A central banking system can be involved in regulating and managing the transfer.

Simplified model:

Nick → Bank X → Central Banking System → Bank Y → Irina

227

How Does Digital Currency Work?

Key Idea

The banks and central banking system act as central authorities in the transaction.

228

Multiple Choice

What makes digital currency different from traditional currency?

1

Digital currency is purely electronic and does not have a physical form.

2

Digital currency is always controlled by central banks.

3

Digital currency can only be used in specific countries.

4

Digital currency cannot be used to buy goods or services.

229

What Is Centralisation?

Centralisation means that control or management is concentrated in a central authority.

For traditional digital currency systems, banks and central authorities play important roles in:

  • Managing accounts

  • Processing transactions

  • Regulating the financial system

  • Monitoring transactions

  • Determining/affecting exchange rates

230

What Is Centralisation?

Simple Analogy

Think of a school:

Students → Teacher → Head of Department

The teacher/HOD acts as a central authority.

Similarly, a centralised financial system has organisations that manage and control important parts of the system.

231

Why Is Centralisation a Problem?

The textbook identifies two major concerns:

1. Confidentiality

How securely is people's financial information kept?

2. Security

How well is the system protected against attacks, fraud or unauthorised access?

Because information and control are concentrated in central systems, protecting these systems is extremely important.

Think

What might happen if a central financial system were successfully attacked?

232

AFL: Centralised or Not?

For each example, decide whether the description represents a centralised or decentralised system.

A. One organisation controls the main database.

B. Many independent participants maintain copies of transaction information.

C. A central authority controls the rules of the system.

D. No single central authority controls the entire system.

233

AFL: Centralised or Not?

For each example, decide whether the description represents a centralised or decentralised system.

A. One organisation controls the main database.

B. Many independent participants maintain copies of transaction information.

C. A central authority controls the rules of the system.

D. No single central authority controls the entire system.

​Answers A → Centralised B → Decentralised C → Centralised D → Decentralised

234

AFL: Centralised or Not?

For each example, decide whether the description represents a centralised or decentralised system.

A. One organisation controls the main database.

B. Many independent participants maintain copies of transaction information.

C. A central authority controls the rules of the system.

D. No single central authority controls the entire system.

​Answers A → Centralised B → Decentralised C → Centralised D → Decentralised

235

Enter Cryptocurrency

One type of digital currency is cryptocurrency.

Cryptocurrency was developed to address some problems associated with centralised digital currency systems.

It uses:

Cryptography

Cryptography involves techniques used to protect information and transactions.

Cryptocurrency uses cryptography to help:

  • Secure transactions

  • Verify transactions

  • Protect information

  • Track transactions

236

What Is CryptoCurrency?

Cryptocurrency is a digital or virtual form of money that uses encryption for security and operates without a central bank or government. [1, 2]

What is Cryptocurrency?

  • Digital Money: It has no physical coins or paper bills; it exists entirely online.

  • Decentralized: No single institution, bank, or government controls it.

  • Peer-to-Peer: You can send money directly to another person anywhere in the world without a middleman. [1, 2, 3]

237

Multiple Choice

What is the term used to describe a digital representation of value that is not issued or controlled by any central authority?

1

Cryptocurrency

2

Digital asset

3

Virtual currency

4

Electronic money

238

What Is CryptoCurrency?

Examples include:

  • Bitcoin

  • Ethereum

Important

Cryptocurrency:

  • Has no physical notes or coins

  • Exists digitally

  • Uses cryptographic techniques

  • Uses a blockchain network

  • Is designed around decentralisation

239

What Is CryptoCurrency?

Important

Cryptocurrency:

  • Has no physical notes or coins

  • Exists digitally

  • Uses cryptographic techniques

  • Uses a blockchain network

  • Is designed around decentralisation

240

Multiple Choice

Which technology is fundamental to cryptocurrency for securing and tracking transactions?

1

HTML

2

Cryptography

3

DNS

4

Cookies

241

What Does Decentralisation Mean?

Decentralisation means that control is distributed across a network rather than being controlled by one central authority.

Centralised

Users → Central Bank → Users

One central authority plays a major role.

Decentralised

User ↔ User ↔ User ↔ User

The network is distributed across many participants.

242

Multiple Choice

Which of the following statements is true about cryptocurrencies like Bitcoin?

1

They operate on decentralized blockchain networks.

2

They are backed by physical assets such as gold.

243

What Does Decentralisation Mean?

Key Difference

Centralised: control is concentrated.

Decentralised: control is distributed.

244

Traditional Digital Currency vs Cryptocurrency

Traditional Digital Currency

Cryptocurrency

Uses centralised systems

Uses decentralised networks

Regulated by central banks/governments

Designed without state control

Central authorities have significant control

Rules are established by the cryptocurrency system/community

Transactions are managed through financial institutions

Transactions are recorded on a blockchain network

Exchange rates are determined/managed through traditional financial systems

Cryptocurrency prices are determined by market forces rather than a central bank

245

Who Controls Cryptocurrency?

Traditional digital currencies are regulated by:

Central banks + Governments

Cryptocurrency is designed to operate without a central government or central bank controlling the entire system.

Instead, the rules are established through the cryptocurrency's underlying system and participants.

Key Term

Decentralised

= No single central authority controls the entire network.

246

Cryptocurrency Transactions

An important feature of many cryptocurrencies is that transaction records are publicly available on the blockchain.

This allows transactions to be:

  • Recorded

  • Verified

  • Tracked

The system can also monitor the amount of currency recorded within the network.

247

Multiple Choice

What is the structure of a blockchain?

1

A series of linked records called blocks.

2

A single document stored in a central database.

3

A private database owned by a single company.

4

A temporary record that is erased after transactions are complete.

248

Cryptocurrency Transactions

Important Distinction

Public transaction record does NOT necessarily mean that everyone's real-world identity is publicly displayed.

Students should not assume:

"Public blockchain = everyone knows exactly who the person is."

249

Cryptography

Cryptography is the science of writing and solving secret codes to keep information safe from snoops. [1, 2]

How Secret Codes Work

Think of sending a message to a friend across a room where a sneaky sibling might intercept it. If you just yell it out, everyone hears it. Instead, you use a secret system: [1, 2]

  • Plaintext: Your normal, readable message (like "Cat" or "Hello").

  • Encryption: The magic trick of scrambling your normal message into total nonsense.

  • Ciphertext: The scrambled, gibberish message that looks like random letters or symbols to anyone else.

  • The Key: The secret rule or password needed to scramble and unscramble the message.

  • Decryption: Using the key to turn the scrambled nonsense back into the readable original message

250

Multiple Choice

Why is blockchain often referred to as a 'distributed ledger'?

1

It is stored across multiple computers rather than a central location.

2

It is controlled by a single organization.

3

It only records transactions temporarily.

4

It is used only by banks for financial transactions.

251

What Is a Blockchain?

A blockchain is a distributed digital ledger used to record transactions.

Transactions are grouped into blocks.

These blocks are linked together to form a chain.

Hence:

Block → Block → Block → Block

media

252

What Is a Blockchain?

Simple Analogy

Imagine a notebook containing transaction records.

Instead of one person keeping the notebook, copies of the record are maintained across a network.

253

Multiple Choice

What is the main function of blockchain technology in digital currencies?

1

It securely records and tracks all digital currency transactions.

2

It converts digital currency into physical cash.

3

It controls the interest rates of digital currencies.

4

It acts as a central bank for cryptocurrencies.

254

Real-Life Scenario

Ayesha wants to send cryptocurrency to Bilal.

There is no traditional bank sitting between them to approve the transaction in the same way as a conventional bank transfer.

The transaction is broadcast to the cryptocurrency network.

The network verifies the transaction.

The transaction is recorded on the blockchain

255

Real-Life Scenario

media

256

What Is a Cryptocurrency Wallet?

A cryptocurrency wallet is used to interact with cryptocurrency holdings and transactions.

It allows a user to:

  • Receive cryptocurrency

  • Send cryptocurrency

  • Manage their cryptocurrency

Important

A wallet does not work like a physical wallet containing coins.

Cryptocurrency exists digitally on the underlying blockchain system.

257

Multiple Choice

Which statement is correct?

1

Cryptocurrency is stored as physical coins inside a wallet.

2

Cryptocurrency transactions can be recorded on a blockchain.

3

Cryptocurrency is always controlled by a central bank.

4

Cryptocurrency does not use cryptography.

258

Advantages of Cryptocurrency

Potential advantages include:

Decentralisation

No single central authority controls the entire network.

Public transaction records

Transactions can be recorded and tracked on the blockchain.

Security

Cryptographic techniques and blockchain technology help protect the transaction system.

Digital transfer

Cryptocurrency can be transferred electronically between wallets.

259

Potential Issues / Limitations

Students should also understand that cryptocurrency is not simply "perfect digital money."

Possible concerns include:

  • Cryptocurrency values can change significantly.

  • Users must protect their wallet credentials/private keys.

  • Transactions may be difficult or impossible to reverse.

  • Regulations differ between countries.

  • Public transaction records can raise privacy questions.

260

AFL: Spot the Error

A student writes:

"Cryptocurrency is exactly the same as traditional digital currency because both are stored digitally and controlled by central banks."

What is wrong?

261

AFL: Spot the Error

There are two problems with this statement.

  1. Cryptocurrency is digital, but it is designed to operate using a decentralised system.

  2. Cryptocurrency is not controlled by central banks in the same way as traditional digital currencies.

Correct idea

Both are digital, but their systems of control and management are different.

262

Blockchain

​Replace with sub-header

Replace this with your body text. Duplicate this text as many times as you would like. All provided templates can be reused multiple times. Wish you a good day.

Happy teaching!

263

Uses of Blockchain

Blockchain is used in:

1. Cryptocurrency

Bitcoin, Ethereum

2. Smart Contracts

Automatic agreements

Example:

If payment is received → Ticket sent automatically.

3. Pharmaceutical Research

Sharing medical research securely.

4. Politics

Secure voting systems.

5. Education

Storing certificates and records.

264

Multiple Choice

Which is NOT a use of blockchain?

1
Traditional centralized database management
2
Decentralized identity verification
3
Secure supply chain tracking
4
Cryptocurrency transaction processing

265

What Is Inside a Block?

Each block contains:

1. Data

Examples:

  • Sender

  • Receiver

  • Amount

  • Date

media

266

What Is Inside a Block?

2. Hash Value

A unique digital fingerprint.

Example:

AB45F1

media

267

What Is Inside a Block?

media

268

What Is Inside a Block?

3. Previous Hash

Links the block to the earlier block.

media

269

Multiple Choice

What is a hash for a blockchain? in easy words

1
A blockchain hash is like a digital fingerprint for a block of information. It helps prove the block has not been changed.
2
A blockchain hash is a copy of the block that stores all its information.
3
A blockchain hash is a label that shows who created the block of information.
4
A blockchain hash is a secret password used to open a block of information.

270

What Is Inside a Block?

Hash values are created using algorithms such as:

SHA-256

Hash Example:

Input:

Ali sends Rs.100

Hash:

A7D5F4C8

Even a tiny change:

Ali sends Rs.1000

Produces:

D9E1A2B7

271

What Is Inside a Block?

Important

Small change → Completely different hash


Real-Life Example

Like changing one letter in a secret code.

Everything changes.

272

Multiple Choice

Changing data inside a block will:

1

Keep same hash

2

Change the hash

3

Delete blockchain

4

Stop internet

273

Genesis Block

The first block is called:

Genesis Block

It has:

No previous hash.

Example:

Block 1 → Genesis Block

Block 2 → Points to Block 1

Block 3 → Points to Block 2

media

274

Multiple Choice

The first block is called:

1

Master Block

2

Root Block

3

Genesis Block

4

Prime Block

275

How Blocks Connect

Example:

Block 1 → A4BF

↓

Block 2 → 6AB1

↓

Block 3 → 34EE

↓

Block 4 → FF12


Every block depends on previous blocks.

This forms a chain.

Hence:

BLOCK + CHAIN = BLOCKCHAIN

276

How Blocks Connect

Draw:

5 connected blocks.

Label:

  • Data

  • Hash

  • Previous hash

277

Multiple Choice

What connects blocks?

1

URLs

2

Previous hashes

3

Cookies

4

DNS

278

-What Happens If a Block Is Changed?

Suppose Block 2 changes.

Its hash changes.

Then:

Block 3 becomes invalid.

Block 4 becomes invalid.

Block 5 becomes invalid.

Entire chain breaks.

Real-Life Example

Dominoes:

Remove one domino.

Everything after it falls.

media

279

What Happens if Data Changes?

Suppose:

Block 2 is changed.

Old hash:

6AB1

New hash:

ZZ98

Problem:

Block 3 expects:

Previous hash = 6AB1

Chain breaks.

Important

Hackers cannot change one block easily because:

All later blocks become invalid.

media

280

Multiple Choice

Changing one block causes:

1

Nothing

2

Chain becomes invalid

3

More cookies

4

Faster transactions

281

Multiple Choice

Changing one block causes:

1

Chain remains same

2

Later blocks become invalid

3

Faster transactions

4

No effect

282

Proof of Work

Computers are fast.

Could hackers simply create a new chain?

Blockchain prevents this using:

Proof-of-Work

A difficult calculation must be solved before adding a block.

This slows block creation.

Example:

Bitcoin ≈ 10 minutes per block.

283

Multiple Choice

Proof-of-work:

1

Makes block creation difficult

2

Deletes blocks

3

Creates passwords

4

Encrypts emails

284

Miners

Miners:

✔ Verify transactions

✔ Solve proof-of-work

✔ Add blocks

✔ Receive rewards


Real-Life Example

Miners are like exam invigilators:

They check work before acceptance.

285

Multiple Choice

Miners

1

Hack systems

2

Verify transactions

3

Delete blocks

4

Create viruses

286

Why Blockchain is Secure

Security comes from:

✔ Many copies exist

✔ Hash links

✔ Proof-of-work

✔ Verification

Hackers would need to attack:

ALL copies simultaneously.

This is extremely difficult.

287

Multiple Choice

Blockchain is secure because:

1

Only one copy exists

2

Many copies exist

3

It uses HTML

4

It uses DNS

288

CYBER SECURITY THREATS

Why Cyber Security Matters

Cyber security means:

Protecting:

  • Data

  • Systems

  • Networks

Threats include:

  • Brute force

  • Data interception

  • DDoS

  • Malware

  • Phishing

media

289

CYBER SECURITY THREATS

Why Cyber Security Matters

Real-Life Example

Data stolen:

  • Passwords

  • Banking details

  • Personal information

media

290

Multiple Choice

Cyber security protects:

1

Buildings

2

Data and systems

3

Cars

4

Printers

291

Brute Force Attack

A hacker tries:

password1

password2

password3

Until the correct password is found.

This is:

Brute Force Attack

media

292

Brute Force Attack

Weak Passwords

  • 123456

  • password

  • qwerty



Strong Password

A!9kP@72mX#

media

293

Multiple Choice

Brute force attacks involve:

1

Guessing passwords repeatedly

2

Stealing hardware

3

Creating websites

4

Sending emails

294

Protecting Against Brute Force

Use:

✔ Long passwords

✔ Symbols

✔ Numbers

✔ Two-factor authentication

media

295

Multiple Choice

Which password is strongest?

1

"v7!Qm2#Lx9@Rk4$Tz8".

2

"Alex1995!".

3

"Summer2026!".

4

"K9!xP2@q".

296

Data Interception

Data interception:

Stealing data during transmission.

Example:

Laptop → Wi-Fi → Router

A hacker intercepts the signal.

Packet Sniffer

Examines data packets.


Real-Life Example

Using public Wi-Fi:

Airport

Cafe

Mall

Danger:

Data can be intercepted.

297

Multiple Choice

Data interception means:

1

Deleting files

2

Stealing transmitted data

3

Restarting computers

4

Formatting drives

298

Wardriving

Wardriving:

Using:

  • Laptop

  • Smartphone

  • Antenna

  • GPS

To find and intercept Wi-Fi signals.

Protection

✔ Strong passwords

✔ Encryption

✔ Firewalls

299

Multiple Choice

Wardriving targets:

1

Wired networks

2

Wireless networks

3

Printers

4

USB drives

300

Encryption

Encryption:

Changes readable data:

HELLO

Into:

JY72A9P

Only users with a key can decrypt it.

Example

HTTPS uses encryption.

Online banking uses encryption.

301

Multiple Choice

Encryption:

1

Makes data unreadable without a key

2

Deletes files

3

Creates malware

4

Creates passwords

302

DDoS Attacks

DDoS:

Distributed Denial of Service

Many computers send huge amounts of traffic.

Server becomes overloaded.

Users cannot access services.


Real-Life Example

Thousands of fake requests:

Website crashes.

303

Multiple Choice

DDoS attacks:

1

Encrypt files

2

Overload systems

3

Delete passwords

4

Create viruses

304

Multiple Choice

DDoS attacks:

1

Encrypt files

2

Overload systems

3

Delete passwords

4

Create viruses

305

Signs of DDoS

Signs:

✔ Slow websites

✔ Large spam emails

✔ Services unavailable

306

Multiple Choice

A sign of DDoS:

1

Faster internet

2

Slow websites

3

Better security

4

Stronger passwords

307

Protection Against DDoS

Use:

✔ Firewalls

✔ Malware protection

✔ Spam filters

✔ Traffic filtering


Note

Firewall:

Like a security guard checking traffic.

308

Multiple Choice

Which helps against DDoS?

1

Firewall

2

Cookies

3

DNS

4

URL

309

Summary Table

Threat

Description

Brute Force

Guessing passwords

Data Interception

Stealing transmitted data

Wardriving

Intercepting Wi-Fi

DDoS

Overloading servers

Encryption

Protecting data

310

HACKING

Imagine you have a computer containing:

  • Personal photographs

  • School/work documents

  • Passwords

  • Bank information

Someone accesses your computer without your permission.

Think–Pair–Share

What could the person do after gaining access?

311

HACKING

  • View personal information

  • Steal data

  • Delete files

  • Change information

  • Copy passwords

  • Pass information to others

312

HACKING

  • "Is simply knowing someone's password hacking?"

313

HACKING

  • hacking involves gaining unauthorised access to a computer system or network. Knowing a password alone is not necessarily hacking; using it to access a system without permission can be.

314

Multiple Choice

Hacking generally means:

1

Repairing a computer

2

Gaining unauthorised access to a computer system

3

Installing an operating system

4

Creating a website

315

What Can Hacking Cause?

Unauthorised access can result in:

🔴 Identity theft

Someone obtains personal information and uses it fraudulently.

🔴 Data theft

Private information is copied or stolen.

🔴 Data deletion

Important files may be deleted.

🔴 Data modification

Information may be changed.

🔴 Data corruption

Files may become damaged or unusable.

316

MALWARE

Malware = Malicious Software

Malware is software designed to perform harmful or unwanted actions on a computer system.

It can:

  • Damage files

  • Steal information

  • Monitor users

  • Display unwanted advertisements

  • Spread to other computers

  • Encrypt files

  • Give attackers access

317

Multiple Choice

What does malware mean?

1

Managed hardware

2

Malicious software

3

Modern hardware

4

Manual software

318

Malware: The Big Picture

Think of malware as a large category.

Inside the category are different types.

MALWARE

↓

Virus

Worm

Trojan Horse

Spyware

Adware

Ransomware

All six are malware, but they behave differently.

319

Multiple Choice

Which of the following is NOT a type of malware?

1

Virus

2

Spyware

3

Firewall

4

Ransomware

320

What Is a Virus?

A virus is a program or piece of program code that can:

  • Replicate/copy itself

  • Delete files

  • Corrupt files

  • Cause a computer to malfunction

Important Feature

A virus generally requires a host program or infected operating system and needs to be executed before it can cause harm.

321

Multiple Choice

Which of the following is NOT a type of malware?

1
Virus
2
Trojan horse
3
Ransomware
4
Firewall

322

What Is a Virus?

Example

A user downloads an infected program.

The user runs the program.

The virus becomes active.

It may then:

  • Copy itself

  • Damage files

  • Cause programs to malfunction

323

Multiple Choice

Which is a characteristic of a computer virus?

1
It repairs damaged files and programs automatically.
2
It can replicate and spread by infecting other files or programs.
3
It protects files and programs from unauthorized access.
4
It improves the performance of infected files or programs.

324

How Can Viruses Spread?

Viruses may be spread through:

Email attachments

A user opens an infected attachment.

Infected websites

A user downloads infected content.

Infected software

A user installs software containing malicious code.

Other infected files/media

An infected file may be transferred between devices.

325

How Can Viruses Spread?

Example

A student receives:

"Important Exam Results.pdf.exe"

The attachment may contain malicious code disguised as a document.

Safety

  • Don't open suspicious attachments.

  • Don't download software from untrusted sources.

  • Keep antivirus software updated.

326

Multiple Choice

Which is a possible way a virus can enter a computer?

1

Infected software

2

Increasing screen brightness

3

Changing wallpaper

4

Printing a document

327

Real-Life Virus Scenario

Scenario

A student downloads a "free game" from an unknown website.

The game appears to work normally.

However, the software contains malicious code.

After installation:

  • Some files become corrupted.

  • The computer behaves unusually.

  • Other programs stop working correctly.

328

Real-Life Virus Scenario

What happened?

The downloaded software may have contained a virus.

Think

What could the student have done to reduce the risk?

Answer

  • Download software from trusted sources.

  • Use updated antivirus/anti-malware software.

  • Avoid suspicious downloads.

329

Multiple Choice

Which action would reduce the risk of malware?

1

Downloading unknown software

2

Using updated security software

3

Opening every attachment

4

Disabling security features

330

What Is a Worm?

A worm is a type of malware that:

  • Is standalone

  • Can self-replicate

  • Spreads to other computers

  • Can spread across networks

  • Does not require an active host program to be opened in the same way as a virus

331

What Is a Worm?

Key Difference

Virus → usually needs a host program/user execution

Worm → can spread independently across a network

Analogy

Virus:

One infected person passes something on after interacting with others.

Worm:

It spreads from person to person automatically.

332

Multiple Choice

What makes a worm different from a virus?

1

A worm cannot replicate

2

spread independently across networks

3

A worm is always harmless

4

A worm is hardware

333

Why Are Worms Dangerous?

Worms can spread rapidly.

Imagine:

Computer 1

↓

Computer 2

↓

Computer 3

↓

Computer 4

↓

Entire network

A single infected computer can potentially lead to many other computers becoming infected.

334

Why Are Worms Dangerous?

Real-Life Example

The ILOVEYOU malware outbreak in 2000 spread through email and affected computers around the world.

It caused major disruption to organisations and individuals.

335

Multiple Choice

Why can worms be particularly dangerous?

1

They cannot spread

2

They can spread through networks

3

They only affect printers

4

They require physical coins

336

What is a host program in a virus?

A host program is a legitimate program or file that a computer virus attaches itself to in order to spread or become active.

Simple example

Imagine you download a game called game.exe.

A virus can attach its code to that program:

Normal program + Virus code → Infected program

When you run the game, the virus code can also run and replicate itself.

337

Why is it called a “host”?

The legitimate program hosts/carries the virus code, much like a passenger being carried by a vehicle.

Virus vs Worm

  • Virus: usually needs a host program/file and some form of execution to become active.

  • Worm: is standalone and can replicate and spread without attaching itself to another program.

Exam definition:

A host program is a legitimate program or file that a virus attaches to so that the virus can be activated and replicated when the host is executed.

338

Virus vs Worm

Virus

Worm

Usually needs a host program

Standalone malware

Usually needs execution/activation

Can self-propagate

Can damage files

Can spread across networks

May replicate

Replicates itself

Can require user action

Can spread without direct user action

339

Multiple Choice

A malware program spreads automatically from one computer to many computers on a network. What is it most likely to be?

1

Worm

2

Adware

3

Spyware

4

Trojan horse

340

TROJAN HORSE

A Trojan horse is malware disguised as legitimate software.

It tricks the user into installing or running it.

Example

A pop-up appears:

⚠️ "Your computer has 27 viruses!"

It offers:

DOWNLOAD FREE ANTIVIRUS

The program appears legitimate.

But the software is actually malicious.

User clicks → Malware executes

media

341

Multiple Choice

A Trojan horse is:

1

Malware disguised as legitimate software

2

A type of firewall

3

A type of firewall

4

An operating system

342

Trojan Horse Example

Imagine downloading:

"Free Video Player"

The program appears legitimate.

After installation, it secretly:

  • Gives attackers access

  • Steals information

  • Installs spyware

  • Installs ransomware

Important

The user may have allowed the program to run because they believed it was legitimate.

This is why user awareness is important.

343

Multiple Choice

Why are Trojan horses effective?

1

They cannot run

2

They look like legitimate software

3

They are always detected immediately

4

They are hardware

344

How Trojans Can Lead to Other Malware

A Trojan horse can act as a delivery method.

For example:

Fake software

↓

Trojan horse

↓

Spyware installed

or

↓

Ransomware installed

Important

The Trojan is not necessarily the final damage itself.

It may provide a way for other malicious software to enter the system.

345

Multiple Choice

A Trojan horse can be used to:

1

Deliver other malware

2

Increase RAM

3

Improve Wi-Fi speed

4

Create backups

346

What Is Spyware?

Spyware is software that secretly monitors a user's activities and gathers information.

It may collect:

  • Websites visited

  • Personal information

  • Account details

  • Passwords

  • Banking information

  • Credit/debit card details

The collected information can be sent to a cybercriminal.

Key Word

SPYWARE = SPYING

347

Multiple Choice

The main purpose of spyware is to:

1

Improve computer performance

2

Create backups

3

Monitor and collect information

4

Protect passwords

348

Keylogging

Some spyware contains keylogging software.

A keylogger records the keys pressed on a keyboard.

Example

A user types:

username: soleha123

password: ********

A keylogger could potentially record the keystrokes.

This information may then be sent to the attacker.

349

Keylogging

Why is this dangerous?

It could expose:

  • Passwords

  • Usernames

  • Messages

  • Banking information

350

Multiple Choice

What does a keylogger do?

1

Deletes the keyboard

2

Speeds up typing

3

Records keyboard input

4

Blocks advertisements

351

Why Do Some Banks Use Drop-Down Menus?

Some banking systems have used virtual keyboards or drop-down menus for entering sensitive characters.

Why?

A conventional keylogger records physical keyboard presses.

If the user selects characters using an on-screen menu instead of typing them directly, a basic keylogger may not capture those characters in the same way.

352

Why Do Some Banks Use Drop-Down Menus?

Example

Instead of typing:

P A S S 1 2 3

the user selects characters from an on-screen interface.

Important

This is one security measure, not complete protection against all spyware or malware.

353

Multiple Choice

Why can an on-screen keyboard help against some keyloggers?

1

It prevents all malware

2

It reduces the need to enter characters using the physical keyboard

3

It encrypts the entire Internet

4

It removes spyware automatically

354

Detecting Spyware

Spyware can be detected and removed using:

Anti-spyware software

It can:

  • Scan the computer

  • Detect suspicious spyware

  • Remove identified spyware

Warning Sign

If spyware is discovered, it may indicate that there is a security weakness that could be exploited again.

355

Multiple Choice

Which software can help detect and remove spyware?

1

Calculator

2

Presentation software

3

Word processor

4

Anti-spyware software

356

What Is Adware?

Adware is software that displays unwanted advertising.

It may:

  • Show pop-ups

  • Redirect browsers

  • Change search results

  • Add unwanted browser toolbars

  • Send users to advertising websites

Key Word

ADWARE = ADVERTISING

357

What Is Adware?

Example

You open your browser.

Suddenly:

  • Multiple advertisements appear.

  • Your homepage changes.

  • Search results redirect to unfamiliar websites.

This could be adware.

358

Multiple Choice

What is the main purpose of adware?

1

Display unwanted advertising

2

Encrypt files for ransom

3

Record keyboard input

4

Replicate across networks

359

Is Adware Always Extremely Harmful?

Adware can sometimes be less immediately damaging than ransomware or spyware.

However, it can still be a security concern.

It may:

  • Be difficult to remove

  • Redirect the browser

  • Change search settings

  • Exploit weaknesses

  • Lead users to unsafe websites

360

Is Adware Always Extremely Harmful?

Example

A browser repeatedly redirects:

Google search → Unknown advertising website

This could indicate unwanted software.

361

Multiple Choice

Which is a possible effect of adware?

1

Browser redirection

2

Increasing storage

3

Protecting files

4

Encrypting the Internet

362

What Is Ransomware?

Ransomware is malware that encrypts data and restricts access to it.

The attacker then demands:

💰 A RANSOM

The victim may be told:

"Pay money to receive the decryption key."

Key Word

RANSOMWARE = RANSOM + SOFTWARE

363

What Is Ransomware?

Example

A company switches on its computers.

Suddenly:

🔒 Files cannot be opened.

A message appears demanding payment.

364

Multiple Choice

What does ransomware typically do?

1

Displays harmless advertisements

2

Encrypts data and demands payment

3

Improves computer security

4

Creates backups

365

How Ransomware Can Enter a Computer

Ransomware may be delivered through:

Trojan horse

A user downloads fake software.

↓

Trojan executes.

↓

Ransomware is installed.

Social engineering

A user is tricked into performing an action.

Phishing

A user receives a malicious email/message and interacts with it.

366

Multiple Choice

Ransomware can be delivered through:

1

Trojan horses

2

Social engineering

3

Phishing

4

All of the above

367

Ransomware Scenario

Imagine this situation:

A company employee opens a malicious attachment.

The ransomware runs.

The files become encrypted.

The company can no longer access important documents.

A message demands payment.

368

Ransomware Scenario

What should the organisation have done?

✔ Maintain regular backups

✔ Train employees

✔ Use updated security software

✔ Avoid suspicious attachments

✔ Maintain security controls

369

Ransomware Scenario

Most important protection mentioned in the textbook:

REGULAR BACKUPS

If clean backups exist, the organisation may be able to restore its files without relying on the attacker.

370

Multiple Choice

Why are backups important against ransomware?

1

They increase internet speed

2

They can allow files to be restored

3

They prevent every virus

4

They remove advertisements

371

Malware Comparison - Complete the worksheet given

Malware

Main Feature

Virus

Replicates and attaches to/depends on a host program

Worm

Self-replicates and spreads across networks

Trojan Horse

Disguised as legitimate software

Spyware

Secretly monitors and collects information

Adware

Displays unwanted advertisements

Ransomware

Encrypts/restricts access to data and demands payment

372

Multiple Choice

Which malware is most associated with encrypting files and demanding payment?

1

Worm

2

Ransomware

3

Adware

4

Spyware

373

Social Engineering

Starter Activity – Would You Trust This Message?

Imagine you receive this message:

URGENT! Your bank account will be blocked in 10 minutes. Click the link below to verify your account immediately.

Discuss with a partner:

  1. What would you do after receiving this message?

  2. Why might someone click the link?

  3. What could happen if the link leads to a fake website?

  4. What should you check before responding?

374

Multiple Choice

What is the main purpose of a message claiming that a bank account will be blocked in 10 minutes?

1

To help the user update their account safely

2

To pressure the user into acting without checking

3

To improve the user's internet connection

4

To install a genuine software update

375

What Is Social Engineering?

Social engineering is the manipulation of people into breaking normal security procedures or behaving in ways that compromise security.

Instead of relying only on technical weaknesses in a computer system, a cybercriminal takes advantage of human behaviour.

The criminal may pretend to be:

  • A bank employee

  • A school administrator

  • An IT support technician

  • A delivery company representative

  • A trusted friend or colleague

376

What Is Social Engineering?

How Does It Work?

  1. The criminal creates a believable situation.

  2. The victim believes the situation is genuine.

  3. The victim is persuaded to take an action.

  4. The action may expose personal information, install malware, or give the criminal access to an account or device.

377

What Is Social Engineering?

Real-Life Example

A person receives a call from someone claiming to work for their internet service provider. The caller says that the connection has a security problem and asks the person to install a remote-access application.

If the person follows the instructions, the caller may gain control of the device or access information visible on it.

378

Multiple Choice

What is the main feature of social engineering?

1

It always requires physically damaging a computer.

2

It only attacks computer hardware.

3

It manipulates people into compromising security.

4

It automatically improves password security.

379

Why Is Social Engineering Effective?

Social engineering works because people sometimes make decisions based on emotions, pressure, or assumptions instead of checking the facts.

Cybercriminals may try to make victims:

  • Act quickly without thinking.

  • Trust someone who appears authoritative.

  • Click a link because they are curious.

  • Reveal information to someone who sounds genuine.

  • Download a file because they are afraid of a supposed threat.

380

Why Is Social Engineering Effective?

Example

A student receives an email stating:

“Your school account will be permanently deleted today. Log in immediately to restore access.”

The student may panic and click the link without checking the website address.

The website may be designed to steal the student's username and password.

381

Why Is Social Engineering Effective?

Important Point

A social engineering message does not need to look suspicious. It may contain a familiar logo, correct spelling, or details that make it appear authentic.

Discuss the difference between what a message claims and what can actually be verified. Students should learn to pause, check the source independently, and avoid using links supplied in unexpected messages.

382

Multiple Choice

Why might a person click a suspicious link even when it could be dangerous?

1

They may be frightened or pressured to act quickly.

2

All links in messages are automatically safe.

3

Clicking links prevents malware.

4

Social engineering only works on computers without screens.

383

The Five Common Types of Social Engineering Threats

Type

How it works

Human weakness exploited

Instant messaging

Malicious links are sent through chat messages

Curiosity or urgency

Scareware

Fake security warnings encourage the user to download software

Fear

Emails/phishing scams

Fake emails direct users to malicious links or request information

Trust

Baiting

An attractive offer or infected physical item tempts the victim

Curiosity or desire for a reward

Phone calls

A caller impersonates a trusted person or technical professional

Fear, trust, or authority

384

The Five Common Types of Social Engineering Threats

Example

A cybercriminal may use a WhatsApp message to send a fake prize link, an email to imitate a bank, or a phone call to pretend to be technical support.

Although the methods differ, the goal is similar: persuade the victim to take an unsafe action.

Notes

Ask students to match each threat with its main method of communication. Clarify that the same scam may combine more than one method. For example, a fake email may be followed by a phone call.

385

Multiple Choice

Which of the following is not one of the five types listed in the textbook?

1

Baiting

2

Scareware

3

Instant messaging

4

Data compression

386

Threat 1 – Instant Messaging

What Is It?

Instant messaging social engineering occurs when a cybercriminal sends a deceptive message through a chat application or messaging service.

The message may contain a malicious link or attachment.

It may claim to offer:

  • A software upgrade

  • A free gift

  • A prize or discount

  • An urgent document

  • A video or photograph that the recipient wants to see

387

Example: WhatsApp Software Update Scam

A user receives this message:

“Your WhatsApp is outdated. Download this special update now to unlock new features.”

The link leads to an unofficial website that asks the user to install an unknown application.

The application may contain malware.

How Can Users Stay Safe?

  • Do not install software from unexpected chat links.

  • Download applications through official app stores or verified websites.

  • Confirm unexpected messages with the sender through another trusted method.

  • Do not share passwords or verification codes in response to messages.

388

Example: WhatsApp Software Update Scam

Teacher Notes

Explain that an account displaying a friend's name or photograph does not guarantee that the message is genuine. An account may have been compromised or impersonated.

Ask students to identify the suspicious feature in the example: the unexpected download link and the promise of special features.

389

Multiple Choice

A student receives a chat message containing an unexpected link to install a software update. What is the safest action?

1

Install it immediately.

2

Forward it to the whole class.

3

Verify the update through an official source.

4

Enter their password on the linked website.

390

Threat 2 – Scareware

What Is Scareware?

Scareware is deceptive software or a fake security warning designed to frighten users into taking an unsafe action.

It often displays alarming messages such as:

  • “Your computer is infected!”

  • “Your files are at risk!”

  • “Five viruses detected!”

  • “Install this antivirus immediately!”

The warning may encourage the user to download fake antivirus software, pay for unnecessary services, or reveal personal information.

391

Threat 2 – Scareware

How Does It Work?

  1. A pop-up appears while the user is browsing.

  2. The message claims that the device is infected.

  3. The user becomes frightened.

  4. The user downloads software or follows payment instructions.

  5. The software may install malware or steal information.

392

Threat 2 – Scareware

Real-Life Example

A student is researching a project when a pop-up claims that their laptop has 12 viruses. It provides a button labelled “Clean Now.”

The student clicks it and downloads a fake security application, which may itself be malicious.

393

Multiple Choice

Scareware mainly relies on which human emotion?

1

Fear

2

Boredom

3

Pride

4

Happiness

394

Threat 3 – Emails and Phishing Scams

What Is Phishing?

Phishing is a form of deception in which a criminal pretends to be a trustworthy organisation or person to trick users into revealing information or visiting a malicious website.

A phishing email may appear to come from:

  • A bank

  • A delivery company

  • A school

  • A social media platform

  • An online shopping website

395

Threat 3 – Emails and Phishing Scams

How Does a Phishing Scam Work?

  1. The victim receives an email that appears genuine.

  2. The email may claim that an account needs verification.

  3. The victim clicks a link.

  4. The link opens a fake website.

  5. The victim enters information such as a password or bank details.

  6. The criminal may use the stolen information to access accounts or commit fraud.

396

Threat 3 – Emails and Phishing Scams

Real-Life Example
An email claims to be from a courier company:

“Your parcel cannot be delivered. Pay a small fee using the link below.”

The link opens a fake payment page that requests card details.

Warning Signs

  • Unexpected requests for passwords or payment details

  • Urgent or threatening language

  • Unusual sender addresses

  • Links leading to unfamiliar domains

  • Unexpected attachments

Remember: a convincing logo and professional-looking layout do not prove that an email is genuine.

397

Threat 3 – Emails and Phishing Scams

Teacher Notes

Explain that phishing is a specific type of social engineering. Social engineering is the broader technique; phishing is one method of applying it.

Demonstrate how to inspect a sender address and verify a website without clicking a suspicious link.

398

Multiple Choice

What is the main purpose of a phishing website?

1

To improve the speed of a computer

2

To collect information by deceiving the user

3

To repair damaged hardware

4

To back up the user's files automatically

399

Threat 4 – Baiting

What Is Baiting?

Baiting is a social engineering technique in which a criminal tempts a victim with something attractive or interesting to persuade them to take an unsafe action.

The bait may be:

  • A free gift

  • A prize

  • A discount

  • A free download

  • A physical object, such as a USB memory stick

400

Threat 4 – Baiting

Example 1: Infected USB Memory Stick

A criminal leaves a USB memory stick in a school computer laboratory.

A student finds it and plugs it into a school computer to discover who owns it.

The device may contain malicious files or exploit a security weakness, potentially infecting the computer or exposing data.

Example 2: Fake Prize

A message claims that a person has won a smartphone. To claim the prize, they must pay a delivery fee and provide their card details.

The prize does not exist. The criminal wants the victim's information or money.

401

Threat 4 – Baiting

How to Stay Safe

  • Never plug an unknown USB device into a computer.

  • Do not trust offers simply because they appear attractive.

  • Verify prize notifications through official channels.

  • Follow school or workplace procedures for found devices.

402

Multiple Choice

A student plugs an unknown USB memory stick into a school computer to find out what is on it. Which threat does this best illustrate?

1

Baiting

2

Encryption

3

Data compression

4

Ethical hacking

403

Threat 5 – Phone Calls

How Does Phone-Based Social Engineering Work?

A cybercriminal calls a victim and pretends to be someone trustworthy or authoritative.

The caller may claim to be:

  • An IT support professional

  • A bank representative

  • A mobile network employee

  • A government official

  • A delivery company representative

The caller may say that the victim's account or device has been compromised and must be fixed immediately.

404

Threat 5 – Phone Calls

Real-Life Example: Fake IT Support

A caller tells a teacher:

“I am from the school's IT department. Your computer has a serious security issue. Install this remote-support application and read me the access code.”

If the teacher follows the instructions, the caller may gain remote access to the device.

Another Example: Fake Bank Call

A caller claims that suspicious activity has been detected on an account and asks the victim to disclose a one-time password (OTP).

The criminal may use that code to approve a transaction or access an account.

405

Threat 5 – Phone Calls

Safety Rules

  • Do not disclose passwords, PINs, or OTPs to unexpected callers.

  • End suspicious calls and contact the organisation using an independently verified number.

  • Never install remote-access software at an unknown caller's request.

  • Do not assume a familiar phone number or caller ID proves identity; these can sometimes be spoofed.

406

Threat 5 – Phone Calls

Safety Rules

  • Do not disclose passwords, PINs, or OTPs to unexpected callers.

  • End suspicious calls and contact the organisation using an independently verified number.

  • Never install remote-access software at an unknown caller's request.

  • Do not assume a familiar phone number or caller ID proves identity; these can sometimes be spoofed.

407

Multiple Choice

A caller pretending to be from IT support asks a user to install remote-access software. What should the user do?

1

Follow the instructions because the caller sounds professional.

2

Share all passwords to help the caller.

3

Verify the request independently before taking any action.

4

Disable all security software.

408

Human Emotions Exploited by Social Engineering

Cybercriminals often exploit three broad human responses highlighted in the textbook.

1. Fear

The victim believes something bad is about to happen.

Example: “Your account will be permanently blocked unless you act now.”

The victim may act quickly without checking the warning.

409

Human Emotions Exploited by Social Engineering

2. Curiosity

The victim wants to discover something interesting or unusual.

Example: “See this secret video” or an unknown USB memory stick found in a corridor.

The victim may click a link or connect the device to satisfy their curiosity.

3. Empathy and Trust

The victim believes that a person or organisation is genuine, helpful, or deserving of assistance.

Example: Someone pretends to be a bank employee who wants to

410

Multiple Choice

A message says, “You have won a free laptop. Click here to claim it.” Which response is most likely being exploited?

1

Curiosity and desire for a reward

2

Knowledge of programming

3

Understanding of encryption

4

Experience with databases

411

Empathy and Trust – Why They Can Be Dangerous

What Is Trust-Based Manipulation?

People naturally trust familiar names, official-looking logos, professional language, or someone who appears to be helping them.

Cybercriminals exploit this behaviour by impersonating trusted people and organisations.

412

Empathy and Trust – Why They Can Be Dangerous

Example 1: School Email

A student receives an email that appears to come from a teacher asking them to sign in to view an examination timetable. The link leads to a fake login page.

Example 2: Delivery Message

A person receives a message using a courier company's logo. It requests a small fee to release a parcel.

Example 3: Friend's Account

A person receives a message from a friend's compromised social media account asking for money urgently.

413

Empathy and Trust – Why They Can Be Dangerous

How to Check Before Trusting

  • Check the full sender address, not just the display name.

  • Verify unexpected requests through another communication channel.

  • Visit the organisation's official website directly.

  • Do not share verification codes or confidential information.

  • Be suspicious of requests that bypass normal procedures.

414

Multiple Choice

Why is an official-looking logo not enough to prove that an email is genuine?

1

Logos cannot be displayed in emails.

2

Cybercriminals can copy logos and imitate organisations.

3

All official emails contain spelling mistakes.

4

Logos automatically install malware.

415

Social Engineering and Hacking – Are They the Same?

Social Engineering: The criminal manipulates a person into taking an unsafe action.

Examples:

  • Tricking a user into revealing a password

  • Persuading a user to install malware

  • Directing a user to a fake website

Hacking In the context of this textbook, hacking refers to gaining unauthorised access to a computer system or account.

Examples:

  • Exploiting a software vulnerability to enter a system

  • Using stolen credentials to access an account without permission

416

Social Engineering and Hacking – Are They the Same?

Important Difference

Social engineering does not necessarily involve directly breaking into a computer system.

A criminal may deceive a user into voluntarily giving access or information. The access is obtained through manipulation.

However, social engineering can be used as part of a wider cyberattack, and stolen credentials can later be used for unauthorised access.

417

Social Engineering and Hacking – Are They the Same?

Social engineering

Direct technical attack

Targets human behaviour

Targets a technical weakness or system

Uses deception and manipulation

May exploit software, network, or configuration weaknesses

Example: fake bank email

Example: exploiting a vulnerable service

Can lead to unauthorised access

Can also lead to unauthorised access

418

Multiple Choice

Which statement best distinguishes social engineering from a direct technical attack?

1

Social engineering manipulates people into compromising security.

2

Social engineering only damages computer screens.

3

Direct technical attacks never affect data.

4

Social engineering cannot be used in cybercrime.

419

How Social Engineering Can Introduce Malware

What Is the Connection?

Malware is malicious software designed to harm a device, disrupt operations, or gain unauthorised access to information.

Social engineering can persuade users to install or run malware themselves.

420

How Social Engineering Can Introduce Malware

Other Possible Connections

  • A phishing email may contain a malicious attachment.

  • A fake software update may install a Trojan horse.

  • An infected USB device may introduce malware.

  • A fake technical-support call may persuade a user to install remote-access software.

421

How Social Engineering Can Introduce Malware

Important Point

Social engineering is a method of manipulating people. Malware is software. A social engineering attack may lead to malware installation, but not every social engineering attack requires malware.

For example, a victim may simply be tricked into entering their password on a fake website.

422

Multiple Choice

Which statement is correct?

1

Every social engineering attack must install malware.

2

Social engineering can persuade a user to install malware.

3

Malware only spreads through phone calls.

4

Phishing and malware always mean exactly the same thing.

423

Stage 1 – Identify the Victim and Gather Information

What Happens at Stage 1?

The cybercriminal identifies a potential victim, gathers information, and decides which method of attack to use.

The criminal may try to discover:

  • The victim's name and role

  • Their workplace or school

  • The services they use

  • Their publicly available contact details

  • Which type of message may appear believable to them

The textbook describes this as the stage where the victim is identified and the attack method is decided.

424

Stage 1 – Identify the Victim and Gather Information

Example: Targeting a School Employee

A criminal learns from public information that a school uses an online learning platform.

The criminal decides to create a fake email claiming that the employee's learning-platform account needs to be verified.

Why Is This Stage Important?

An attack may appear more convincing when the message is relevant to the victim's circumstances.

425

Multiple Choice

What is the main purpose of Stage 1 in a typical social engineering attack?

1

To remove all traces of the attack

2

To identify the victim and plan the attack

3

To repair the victim's computer

4

To restore the victim's files

426

Stage 2 – Target the Victim

What Happens at Stage 2?

The cybercriminal contacts or approaches the victim using the chosen method.

Possible methods include:

  • Email

  • Phone calls

  • Instant messages

  • Fake websites

  • Malicious attachments

  • Deceptive downloads

The attacker attempts to make the message or situation appear believable.

427

Stage 2 – Target the Victim

Example: Fake Account Warning

A student receives an email that appears to come from the school administration.

The email says that the student's account will be suspended unless they sign in through a supplied link.

The student is now being targeted. The attacker is attempting to persuade them to act.

Key Point

At this stage, the victim may not yet have given away information or installed malware. The criminal is trying to persuade the victim to do so.

428

Multiple Choice

A criminal sends a fake school email to a student asking them to verify their password. Which stage does this best represent?

1

. Stage 1 – Identify and plan

2

Stage 2 – Target the victim

3

Stage 3 – Execute the attack

4

Stage 4 – Cover the tracks

429

Stage 3 – Execute the Attack

What Happens at Stage 3?

The victim takes the action that allows the criminal to achieve their objective.

Depending on the attack, the victim may:

  • Enter login credentials on a fake website

  • Reveal confidential information

  • Install malicious software

  • Open a malicious attachment

  • Grant access to a device or account

  • Make a fraudulent payment

The criminal may then steal information, access an account, install malware, or disrupt operations.

430

Stage 3 – Execute the Attack

Example: Fake Technical Support

  1. A caller claims that a laptop has a security problem.

  2. The caller persuades the user to install remote-access software.

  3. The user provides access details.

  4. The caller uses the access to view files or perform unauthorised actions.

The attack is executed when the victim's actions enable the criminal to carry out the planned attack.

431

Multiple Choice

In a phishing attack, which action most clearly represents the execution of the attack?

1

The criminal decides whom to target.

2

The criminal researches the organisation.

3

The victim enters their password on the fake website.

4

The victim receives a genuine school notice.

432

Stage 4 – Cover the Tracks

What Happens at Stage 4?

After attempting to achieve their objective, a cybercriminal may try to hide evidence of the attack.

The textbook describes this as an attempt to remove traces of malware and cover the criminal's tracks.

Depending on the attack, this may involve attempts to:

  • Delete evidence of unauthorised activity

  • Remove or hide malicious files

  • Conceal changes made to a system

  • Make it harder for investigators to identify what happened

433

Stage 4 – Cover the Tracks

Example

After gaining unauthorised access to a compromised computer, a criminal attempts to delete evidence of the activity to make detection more difficult.

Important Point

This stage does not always occur, and criminals do not always succeed in hiding their actions. Security logs, backups, monitoring systems, and forensic investigations may reveal evidence of an attack.

434

Multiple Choice

What is the purpose of Stage 4 in the textbook's attack model?

1

To identify the victim

2

To send the first message

3

To persuade the victim to click a link

4

To try to hide evidence of the attack

435

The Four Stages – Complete Example

Scenario: Fake Delivery Fee

A person receives an email claiming that a parcel cannot be delivered until a small fee is paid.

Stage 1 – Identify and plan

The criminal identifies a potential victim and chooses a delivery-themed scam.

Stage 2 – Target the victim

The criminal sends an email containing a fake delivery notification and payment link.

Stage 3 – Execute the attack

The victim opens the link and enters card details on a fake payment website.

Stage 4 – Cover the tracks

The criminal may attempt to hide evidence of their activity after obtaining the information.

436

How Can Social Engineering Be Prevented?

1. Pause Before Acting

Be cautious of messages that demand immediate action or threaten serious consequences.

2. Verify the Sender

Check the sender's full email address and confirm unusual requests using an independently verified contact method.

3. Avoid Suspicious Links

Do not click unexpected links or open attachments merely because the message looks official.

4. Protect Confidential Information

Never disclose passwords, PINs, or OTPs to unexpected callers or messages.

437

How Can Social Engineering Be Prevented?

5. Use Trusted Software Sources

Download applications from official app stores or verified websites.

6. Be Careful with Unknown USB Devices

Do not connect unknown memory sticks to personal or school computers.

7. Use Security Tools

Keep operating systems and applications updated, use reputable security software, and maintain suitable firewall settings.

8. Report Suspicious Activity

Follow school or workplace reporting procedures if a suspicious link is clicked or information is disclosed.

438

Multiple Choice

Which action provides the best protection against an unexpected request for a password?

1

Trust the message if it contains a logo.

2

Verify the request independently and do not enter credentials through the suspicious link.

3

Forward the message to friends.

4

Reply with the password to check whether the sender is genuine.

439

Starter – Who Should Access This Data?

Imagine a hospital computer system containing patients' medical records.

Different people work in the hospital:

  • A doctor

  • A receptionist

  • A cleaner

  • An IT administrator

440

Starter – Who Should Access This Data?

Discuss with a partner:

  1. Should all four people have access to every patient's medical records?

  2. Who needs to read medical information?

  3. Who might need to update patient records?

  4. Why should some information be restricted?

Real-life example: A hospital receptionist may need to view appointment details, while a consultant needs access to medical history and test results. A cleaner generally does not need access to either.

441

Multiple Choice

Why should different hospital employees have different levels of access?

1

To make every employee use a different computer

2

To ensure users only access the information needed for their roles

3

To prevent doctors from reading medical records

4

To remove the need for passwords

442

What Are Access Levels?

Definition: Access levels determine which data and functions a user is permitted to access in a computer system.

A computer system may use a username and password to identify a user and then apply permissions associated with that account.
Example: School Management System

User

Possible access

Student

View their own results

Teacher

View and enter marks for assigned classes

Head of Department

Review results and approve changes

System administrator

Manage user accounts and system settings

The exact permissions depend on the school's system.

443

Why Are Access Levels Important?

  • They protect confidential information.

  • They reduce the risk of unauthorised changes.

  • They help prevent users from deleting important records.

  • They make it easier to control who can perform particular tasks.

444

Multiple Choice

What is the main purpose of access levels?

1

To increase internet speed

2

To control what users can access or do

3

To make passwords visible

4

To remove all user accounts

445

Access Rights in a Database

In a database, different users may have permission to perform different actions.

Three important access rights are:

  • Read: View or retrieve data.

  • Write: Add new data or make changes to existing data.

  • Delete: Remove data.

Some systems also have permissions to create tables, manage users, or change database settings.

446

Access Rights in a Database

Real-Life Example: School Database

A teacher enters students' marks into a database.

  • A student can read their own published results.

  • A teacher can read and write marks for their assigned class.

  • An authorised administrator may delete incorrect test records according to school procedures.

Giving every user permission to delete all records would create unnecessary risk.

447

Access Rights in a Database

Different Views of Data

A database can present different views to different users. For example, a teacher may see marks and attendance, while a student sees only their own results.

448

Multiple Choice

A student can view their examination result but cannot change it. Which permission do they have?

1

Delete only

2

Write only

3

Read

4

Administrator

449

Access Levels on Social Networks

Social networks allow users to control who can see particular information through privacy settings.

The textbook describes four access levels.

Access level

Who can see the information?

Public

Anyone, including people who are not friends

Friends

People accepted as friends

Custom

A selected group, with specific people included or excluded

Data owner

Only the owner can see the information

450

Access Levels on Social Networks

Real-Life Example

A student posts four types of content:

  • A public post about a school event.

  • A photograph shared with friends.

  • A personal update shared with selected friends.

  • A private note visible only to the student.

The student uses privacy settings to control the audience for each item.

Important Point

Privacy settings control visibility, but they cannot guarantee that information will remain secret. Someone who can view a post may take a screenshot or share it.

451

Multiple Choice

Which access level allows information to be seen by anyone?

1

Data owner

2

Custom

3

Friends

4

Public

452

Anti-Malware Software

Anti-malware is software designed to detect, block, or remove malicious software.

The two types highlighted in the textbook are:

  1. Anti-virus software

  2. Anti-spyware software

453

Anti-Malware Software

Anti-Virus

Anti-virus software scans files, programs, and other areas of a device for known or suspicious threats. Depending on the software, it may block, quarantine, or remove detected malware.

Example: A student downloads an infected file. Security software detects the threat and quarantines the file before it can be opened.

454

Anti-Malware Software

Anti-Spyware

Anti-spyware software focuses on detecting and removing spyware: software that secretly monitors activities or collects information.

Example: Anti-spyware software detects a suspicious program attempting to monitor a user's activity and alerts the user.

455

Anti-Malware Software

Modern Security Packages

A security package may combine anti-virus, anti-spyware, firewall, and other protection features.

456

Multiple Choice

Which type of software is specifically intended to detect and remove spyware?

1

Word processor

2

Anti-spyware

3

Spreadsheet

4

Presentation software

457

How Does Anti-Spyware Detect Spyware?

The textbook identifies two detection methods.

1. Rules

The software checks for features or behaviours associated with spyware.

For example, it may detect a program displaying suspicious behaviour, such as attempting to collect information without appropriate permission.

2. File Structures

The software examines characteristics or patterns in a file that may be associated with known spyware.

These patterns can help identify suspicious files.

458

How Does Anti-Spyware Detect Spyware?

Real-Life Example

A user installs an application from an untrusted website. A security scan finds suspicious characteristics in the downloaded program and flags it for further inspection.

Important Point

Detection is not perfect. New or modified threats may avoid detection, and legitimate files may sometimes be flagged incorrectly. Security software needs regular updates.

459

Multiple Choice

According to the textbook, which two methods may anti-spyware use to identify spyware?

1

Rules and file structures

2

Printing and formatting

3

Copying and pasting

4

Sorting and filtering

460

General Features of Anti-Spyware

The textbook lists several features associated with anti-spyware software.

Feature

Explanation

Detect and remove spyware

Finds and removes detected spyware

Prevent spyware downloads

Blocks or warns about suspicious downloads

Protect information

Some security tools offer encryption or other protections for sensitive data

Protect keyboard input

Some tools can reduce keylogging risks through specialised protections

Protect webcam and microphone

Some tools restrict unauthorised access to these devices

Warn about possible data theft

Some tools monitor for signs that personal information may be compromised

461

General Features of Anti-Spyware

Ask students to choose the most useful feature for each situation:

  • Suspicious downloaded program — detection and removal.

  • Unexpected webcam access — webcam protection.

  • A compromised password — change the password and secure the account, as well as scan the device.

462

Multiple Choice

Which feature can help prevent spyware from secretly accessing a webcam?

1

Increasing screen brightness

2

Blocking unauthorised webcam access

3

Changing the desktop wallpaper

4

Compressing photographs

463

What Is Authentication?

Authentication is the process of verifying that a user is who they claim to be.

Three common authentication factors:

1. SOMETHING YOU KNOW — password or PIN

2. SOMETHING YOU HAVE — registered phone, security key, or authentication device

3. SOMETHING UNIQUE TO YOU — fingerprint or facial characteristic

Example: a user enters a password and then approves a login request on their registered phone.

465

What Is Biometrics?

Definition: Biometrics identifies a person using unique physical or behavioural characteristics.

Common biometric methods:

  • Fingerprint scanning

  • Retina scanning

  • Face recognition

  • Voice recognition

Real-life examples

  • Unlocking a smartphone with a fingerprint.

  • Using face recognition to enter a secure office.

Key point: Biometrics can be used to verify a user's identity before allowing access.

media

466

Multiple Choice

Which of the following is a biometric method?

1
Fingerprint recognition
2
Email address verification
3
Security question verification
4
Password authentication

467

Fingerprint Scanning

How it works

  1. The scanner captures the fingerprint pattern.

  2. The system examines the distinctive ridges and valleys.

  3. The captured data is compared with stored fingerprint data.

  4. If the match meets the system's requirements, the user is recognised.

Benefits

  • Convenient and usually quick.

  • Fingerprints are distinctive.

  • Fingers cannot be forgotten or misplaced like access cards.

Drawbacks

  • Installation can be expensive.

  • Cuts, dirt or damaged skin may affect accuracy.

  • Some people have privacy or civil-liberties concerns.

Real-life example: An employee scans a finger to enter a restricted office.

media

468

Multiple Choice

What does a fingerprint scanner compare?

1

A. The user's typing speed

2

B. The ridges and valleys with stored data

3

C. The device's battery level

4

D. The user's email inbox

469

Retina Scanning

How it works

  • Infrared light is used to scan the unique pattern of blood vessels in the retina, at the back of the eye.

  • The captured pattern is compared with stored data.

  • A match allows the user to be recognised.

Benefits

  • Very high accuracy according to the textbook.

  • The retinal blood-vessel pattern is difficult to duplicate.

Drawbacks

  • Can feel intrusive or uncomfortable.

  • The user may need to remain still during scanning.

  • Equipment can be expensive and verification may take time.

Real-life example: A secure research laboratory uses retina scans to control entry.

media

470

Multiple Choice

Which pattern does a retina scanner examine?

1

The shape of the ear

2

Blood vessels at the back of the eye

3

The user's handwriting

4

The keyboard layout

471

Comparing Four Biometric Methods

Method

Benefits

Drawbacks

Fingerprint

Convenient; familiar

Cuts or dirt may affect scanning

Retina

Very high accuracy in the textbook example

Intrusive; expensive

Face recognition

Easy and non-intrusive

Lighting, age, hair or glasses may affect results

Voice recognition

Convenient; no physical contact

Recordings or illness may affect reliability

Real-life example: A smartphone may use face or fingerprint recognition, while a secure facility may select a stricter method.

472

Multiple Choice

Which is a possible drawback of voice recognition?

1

A cold may change the user's voice

2

It always requires a retina scan

3

It cannot use a microphone

4

It is always perfectly accurate

473

How a Retina-Controlled Door Works
  1. A motion sensor detects a person and triggers the system.

  2. The retina scanner captures the person's retina pattern.

  3. An ADC converts the scanned analogue signal into digital data.

  4. A microprocessor compares the data with a database.

  5. If the data matches, a signal activates the door mechanism and the indicator turns green. Otherwise, entry is denied and the light stays red.

Key components: Retina scanner → ADC → microprocessor/database → DAC/actuator → security door.

474

Multiple Choice

What happens if the retina scan does not match the database?

1

The door unlocks automatically

2

Entry is denied and the light stays red

3

The database is deleted

4

A password is sent by email

475

What Is Two-Step Verification?

  1. Definition: Two-step verification uses two steps to help verify a user's identity.

    Example: Buying a camera online

    1. Kate enters her username and password.

    2. A one-time passcode (OTP) is sent to her registered mobile phone.

    3. Kate enters the code to complete verification.

    Authentication factors

    • Password = something you know.

    • Registered mobile phone = something you have.

    Why is it useful? If someone steals the password, they may still need the second verification step.

476

Multiple Choice

In this example, what does the registered mobile phone represent?

1

Something the user knows

2

Something the user is

3

Something the user has

4

A firewall

477

One-Time Passcodes (OTPs)

  1. An OTP is a temporary code used for verification.

  2. It may be sent to a registered phone or email address.

  3. It can help verify a login or online transaction.

  4. If a criminal obtains the code, they may be able to access an account or approve a transaction.

Real-life example: A person receives a code to approve an online payment, but an unexpected caller asks them to read it aloud.

Safe practice: Never share an OTP with an unexpected caller or message. Verify suspicious requests through the organisation's official app or contact details

478

Multiple Choice

An unexpected caller asks you to share your OTP. What should you do?

1

Share it if the caller knows your name.

2

Send it in a group chat.

3

Do not share it; verify the request independently.

4

Share it if the caller sounds professional.

479

Why Are Automatic Software Updates Important?

Definition: Automatic software updates keep computer and mobile-device software up to date, sometimes installing updates at scheduled times.

Benefits

  • Security patches fix known weaknesses.

  • Bugs may be corrected.

  • Performance may improve.

  • New features may be added.

Possible drawback: An update can sometimes cause compatibility problems or disrupt the device.

Real-life example: A smartphone installs a security update overnight while it is charging

480

Multiple Choice

What is an important benefit of software updates?

1

They can install security patches.

2

They prevent every cyberattack.

3

They replace all passwords.

4

They guarantee that a device will never malfunction.

481

What Happens During an Automatic Update?

  1. The user ensures the device is charged.

  2. The update is scheduled and installation begins.

  3. The system checks whether a restart is needed.

  4. If required, the user may be warned before a restart.

  5. The device restarts automatically or the user restarts it manually.

  6. The update is completed.

Real-life example: A laptop installs updates after school and restarts before the next lesson.

482

Multiple Choice

Why might a device restart after a software update?

1

To complete installation of changes.

2

To change the user's fingerprint.

3

To make the screen larger

4

To block all websites.

483

Check the Spelling and Tone of Emails

Before opening an unexpected email link or attachment, check for warning signs.

Suspicious tone

  • “Act immediately or your account will be blocked!”

  • “Pay now to avoid losing your parcel.”

  • Requests that pressure you into acting without checking.

Spelling and grammar

  • Misspelled words may indicate a scam.

  • Incorrect grammar may be suspicious.

  • However, a well-written email can still be fraudulent.

Real-life example: An email claims that a bank account will be closed in ten minutes unless the recipient clicks a link.

484

Multiple Choice

Which is a warning sign in an unexpected email?

1

A message you were expecting.

2

A verified school timetable.

3

A demand to act immediately under threat.

4

A normal greeting by itself.

485

Check the Sender's Email Address
  • Inspect the full email address, especially the domain after the @ symbol.

  • Do not rely only on the sender's displayed name.

  • Check whether the domain matches the organisation's verified domain.

  • Be cautious of unexpected requests for passwords, payment details or account verification.

Example

An email claims to come from a bank, but its sender address uses an unrelated domain. This is a warning sign.

Safe action: Open the organisation's official website independently or contact it using a verified number

486

Multiple Choice

What should you inspect when checking an email sender?

1

Only the sender's display name.

2

Only the font colour.

3

The number of images in the email.

4

The full email address and domain.

487

Suspicious URLs and Typo-Squatting

Typo-squatting: Using a misspelled or lookalike domain to mislead users.

Examples from the textbook:

Other warning signs

  • The link's real destination does not match the message.

  • A payment request leads to an unrelated website.

  • The website address contains unexpected words or misspellings.

Real-life example: A fake shopping email directs a user to a lookalike website that asks for card details.

Important: HTTPS protects data in transit, but it does not prove that a website is genuine.

488

Multiple Choice

What is typo-squatting?

1

Using a lookalike or misspelled domain to mislead users.

2

Compressing a website image.

3

Updating a firewall.

4

Scanning a fingerprint.

489

Recognising a Phishing Email

Phishing is a scam in which an attacker impersonates a trusted person or organisation to steal information or direct users to a malicious website.

Look for these warning signs:

  1. An unexpected request for payment or account verification.

  2. An unusual sender address.

  3. Threatening or urgent language.

  4. A link leading to an unrelated domain.

  5. A request for passwords, card details or verification codes.

Real-life example: A fake streaming-service email claims that a subscription payment failed and links to an unrelated billing website.

What should you do? Do not use the suspicious link. Verify the message through the official service and report it if appropriate

490

Multiple Choice

What is the main purpose of a phishing website?

1

To improve computer speed.

2

To deceive users into revealing information.

3

To repair hardware.

4

To update a device automatically.

491

What Is a Firewall?

Definition: A firewall is hardware or software that monitors and filters network traffic entering or leaving a computer or network.
Main functions

  • Checks incoming and outgoing traffic.

  • Allows or blocks connections according to rules.

  • Can warn users about suspicious connections.

  • May record traffic in logs for later investigation.

Real-life example: A home router blocks an unsolicited incoming connection from the internet.

492

Multiple Choice

What is the main role of a firewall?

1

To recognise fingerprints.

2

To filter network traffic using rules.

3

To create one-time passcodes.

4

To repair a broken keyboard.

493

Main Tasks of a Firewall

A firewall can:

  • Examine incoming and outgoing network traffic.

  • Check whether traffic meets specified criteria.

  • Block traffic that fails those criteria.

  • Warn users or administrators about possible security issues.

  • Log network activity for later investigation.

  • Block connections to specified IP addresses.

  • Warn when software attempts to communicate externally, depending on its settings.

Real-life example: A firewall warns a user that an unfamiliar program is attempting to connect to an external server.

494

Multiple Choice

Why might a firewall keep a log of network traffic?

1

To change a user's voice.

2

To store fingerprint images.

3

To support later investigation.

4

To guarantee that all malware is removed

495

Hardware and Software Firewalls

media

496

Limitations of Firewalls

A firewall cannot prevent every security problem.

  • Bypassing controls: Someone may use an unauthorised connection or device to bypass network protections.

  • Human mistakes: Users may share passwords or misuse accounts.

  • Disabled protection: A user may disable a software firewall.

  • Other threats: A firewall alone cannot stop every phishing scam or unsafe action.

Real-life example: An employee is tricked into revealing a password over the phone. The firewall cannot prevent the employee from sharing it.

Key message: Effective cyber security combines firewalls, updates, secure authentication, policies and user awareness

497

What Is a Proxy Server?

A proxy server acts as an intermediary between a user's computer and a web server.

How it works

Process

  1. The browser sends a request to the proxy.

  2. The proxy checks the request against its rules.

  3. If allowed, it forwards the request to the web server.

  4. The response returns through the proxy to the user.

Real-life example: A school uses a proxy server to block access to selected websites on school computers.

498

media

499

Multiple Choice

What is the role of a proxy server?

1

A. It acts as an intermediary between the user and web server

2

B. It replaces the computer's operating system

3

C. It scans fingerprints

4

D. It physically repairs a network cable

500

Features and Benefits of Proxy Servers

A proxy server can:

  • Filter web traffic: Block selected websites or requests from specified IP addresses.

  • Hide the user's IP address from the destination server: The destination may see the proxy's IP address instead.

  • Prevent direct access: Requests pass through the proxy, where rules can be applied.

  • Provide an extra layer of protection: It can help filter malicious requests and reduce exposure to certain attacks.

  • Use a cache: Store copies of certain web resources to speed up repeat access.

Real-life example: If many students access the same permitted school webpage, a proxy cache may serve a stored copy rather than retrieve the same resource again.

pattern-tertiary
media

Show answer

Auto Play

Slide 1 / 500

SLIDE