Question 18 marks
Question
(a) A researcher has to choose between using a direct data source or an indirect data source. The data collected may be confidential and may need to be encrypted when sent over the internet. Tick the statement that best describes the use of a direct data source. ✓ Searching the World Wide Web to find weather data Interviewing residents living on a street to find out how busy the traffic on the street is Examining the census results for previous years Looking at a list of names and addresses of everyone who is registered to vote [1] (b) Data can exist in two states, dynamic or static. Tick the most accurate statement referring to dynamic data. ✓ Dynamic data is data that never changes. Data on a hard disk is an example of dynamic data. ‘Canada has a border with the United States’ is an example of dynamic data. Dynamic data is never checked for accuracy before publication. [1] (c) The SSL/TLS protocol is an encryption protocol frequently used when data is transmitted over the internet. Describe how the SSL/TLS protocol is used to ensure the security of the data. …… [6]
Mark scheme
1(a) 1 Searching the World Wide Web to find weather data Interviewing residents living on a street to find out how busy the Π traffic on the street is Examining the census results for previous years Looking at a list of names and addresses of everyone who is registered to vote 1(b) 1 Dynamic data is data that never changes. Data on a hard disk is an example of dynamic data. Π ‘Canada has a border with the United States’ is an example of dynamic data. Dynamic data is never checked for accuracy before publication. 1(c) Six from: 6 Transmitted data is encrypted so that a third party cannot eavesdrop and view the data Only the user's computer and the secure server can recognise the data Websites often use SSL/TLS certificates to verify their authenticity SSL/TLS use two keys to encrypt data… …a public key known to everyone and a private key known only to the recipient When a web browser tries to connect to a website using SSL/TLS, it requests the web server to identify itself The web server sends the browser a copy of the SSL/TLS Certificate Certificate Authorities are used to ensure the authenticity of the certificate The browser checks to see if the SSL/TLS Certificate is trusted If the SSL/TLS Certificate is trusted, then the browser sends a message to the Web server The server then responds to the browser with a digitally signed acknowledgement to start an SSL/TLS encrypted session SSL/TLS requires a handshake to be carried out/the browser and the website carry out a (SSL/TLS) handshake