IGCSE Information and Communication Technology 0417 · Topic 8

Safety and security: past paper questions

139 real questionsasked in 10 of the last 10 exam series2019–2025usually: Explain, Describe, State, Discuss, Complete

Real questions on safety and security

The newest 20 of 139 written questions. Open one to see it on the real paper.

0417/11 · October/November 2025 · Q10a[4]
Describe what is meant by the term phishing.
See it on the paper →
0417/11 · October/November 2025 · Q10b[3]
State three ways in which a user can attempt to prevent phishing attacks.
See it on the paper →
0417/12 · October/November 2025 · Q8a[4]
Describe what is meant by the term pharming.
See it on the paper →
0417/12 · October/November 2025 · Q8b[2]
State two ways in which a user can attempt to prevent pharming attacks.
See it on the paper →
0417/12 · October/November 2025 · Q11a[4]
Describe how this could be achieved using encryption of the email.
See it on the paper →
0417/12 · October/November 2025 · Q11b[2]
State two methods of data transfer that use encryption.
See it on the paper →
0417/13 · October/November 2025 · Q4a[6]
Discuss the impact of using voice recognition in this way.
See it on the paper →
0417/13 · October/November 2025 · Q4b[2]
Voice recognition is a form of biometric password. State two other forms of biometric password that could be used in this way.
See it on the paper →
0417/13 · October/November 2025 · Q9a[4]
Explain what is meant by smishing.
See it on the paper →
0417/13 · October/November 2025 · Q9b[2]
State two ways in which a user can attempt to prevent smishing attacks.
See it on the paper →
0417/11 · May/June 2025 · Q13a[2]
Describe what is meant by hacking.
See it on the paper →
0417/11 · May/June 2025 · Q13b[3]
One method of preventing a system being hacked is the use of passwords. Describe the password rules that should be put in place to reduce the threat of hacking.
See it on the paper →
0417/12 · May/June 2025 · Q5a[3]
Electrocution
See it on the paper →
0417/12 · May/June 2025 · Q5b[3]
Trailing leads
See it on the paper →
0417/12 · May/June 2025 · Q6a[6]
Compare and contrast phishing and pharming.
See it on the paper →
0417/12 · May/June 2025 · Q6b(i)[2]
State two precautions that the user should take to protect their data from phishing attacks.
See it on the paper →
0417/12 · May/June 2025 · Q6b(ii)[2]
State two precautions that the user should take to protect their data from pharming attacks.
See it on the paper →
0417/13 · May/June 2025 · Q10a[2]
Explain the difference between personal data and sensitive data.
See it on the paper →
0417/13 · May/June 2025 · Q10b[2]
(b) State two examples of personal data.
See it on the paper →
0417/13 · May/June 2025 · Q10c[2]
State two examples of sensitive data.
See it on the paper →

What examiners said

Many candidates were able to gain at least one mark for the explanation of hacking, namely unauthorised access to a computer system. Some candidates were able to give the consequences of hacking like copying personal data. Many candidates are still writing that one of the consequences of hacking is that data can be stolen. If data is stolen, then it is removed; hacking usually copies data but does...
— Examiner report, May/June 2025, 0417/11 Q13(a) (Cambridge)

This part was well answered by the candidates with many able to gain two of the three marks available. Many candidates gave good answers in that they explained strong passwords as well as passwords should not be given to others or contain personal data.
— Examiner report, May/June 2025, 0417/11 Q13(b) (Cambridge)

Candidates gave some good answers as to how the risks could be minimised. Some candidates wrote that drink should not be taken into a computer room but in order to gain credit they must go onto write that liquid should not be placed near the computer equipment.
— Examiner report, May/June 2025, 0417/12 Q5(a) (Cambridge)

Practise this topic

Answer these questions online and get each one marked against the official mark scheme, with what you missed and how to fix it.

Practise safety and security

In the syllabus

1 Physical safety

Including: electrocution from spilling drinks near electrical equipment and touching live cables, fire from sockets being overloaded or equipment overheating, tripping over trailing cables, heavy equipment falling and injuring people The causes of these safety issues and strategies for preventing them

2 0417.8.2.01 — The principles of a typical data protection act and why data protection legislation is required

The principles of a typical data protection act and why data protection legislation is required
Characteristics of personal and sensitive data including personal name, address, date of birth, a photograph in school uniform, medical history
The need for personal data to be kept confidential and protected to avoid inappropriate disclosure
The need for eSafety when using the internet, email, social media, online gaming Minimise the potential danger of using: The internet including only using trusted websites recommended by teachers, using a search engine that only allows access to age appropriate websites Email including an awareness of the potential dangers of opening or replying to an email from an unknown person
An awareness of the risks associated with sending personal identifiable data or images via email Social media including knowing how to block and report unwanted users, an awareness of the potential dangers of meeting an online contact face to face, avoiding the distribution of inappropriate images, avoiding the use of inappropriate language, respecting confidentiality of personal data of other people Online gaming including not using real names, not giving out personal or financial data

3 0417.8.2.02 — Characteristics of personal and sensitive data including personal name, address, date of birth, a photograph in school uniform, medical hist

Characteristics of personal and sensitive data including personal name, address, date of birth, a photograph in school uniform, medical history

4 0417.8.2.03 — The need for personal data to be kept confidential and protected to avoid inappropriate disclosure

The need for personal data to be kept confidential and protected to avoid inappropriate disclosure

5 0417.8.2.04 — The need for eSafety when using the internet, email, social media, online gaming Minimise the potential danger of using: The internet includ

The need for eSafety when using the internet, email, social media, online gaming Minimise the potential danger of using: The internet including only using trusted websites recommended by teachers, using a search engine that only allows access to age appropriate websites Email including an awareness of the potential dangers of opening or replying to an email from an unknown person

6 0417.8.2.05 — An awareness of the risks associated with sending personal identifiable data or images via email Social media including knowing how to block

An awareness of the risks associated with sending personal identifiable data or images via email Social media including knowing how to block and report unwanted users, an awareness of the potential dangers of meeting an online contact face to face, avoiding the distribution of inappropriate images, avoiding the use of inappropriate language, respecting confidentiality of personal data of other people Online gaming including not using real names, not giving out personal or financial data

7 0417.8.3.01 — Characteristics and effect of threats to data including hacking, phishing, pharming, smishing, vishing, viruses, malware, card fraud Hacking

Characteristics and effect of threats to data including hacking, phishing, pharming, smishing, vishing, viruses, malware, card fraud Hacking including the measures that must be taken in order to protect data Phishing, pharming, smishing, vishing including the methods that can be used to help prevent them Viruses and malware including how to take preventative action to avoid the danger of infecting a computer from a downloaded file Card fraud including shoulder surfing, card cloning, key logging
Characteristics and methods of protecting data including biometrics, digital certificate, secure socket layer (SSL), encryption, firewall, two-factor authentication, user id and password Biometrics including the use of biometric data Digital certificate including its purpose and contents Secure socket layer (SSL) including encrypted links between the server and the client computer Encryption including its purpose for the protection of data on hard discs, email, cloud, HTTPS websites Firewall including its purpose Two-factor authentication including its purpose and function User id and password including how they are used to increase the security of data

8 0417.8.3.02 — Characteristics and methods of protecting data including biometrics, digital certificate, secure socket layer (SSL), encryption, firewall, t

Characteristics and methods of protecting data including biometrics, digital certificate, secure socket layer (SSL), encryption, firewall, two-factor authentication, user id and password Biometrics including the use of biometric data Digital certificate including its purpose and contents Secure socket layer (SSL) including encrypted links between the server and the client computer Encryption including its purpose for the protection of data on hard discs, email, cloud, HTTPS websites Firewall including its purpose Two-factor authentication including its purpose and function User id and password including how they are used to increase the security of data

Past papers, syllabus and examiner reports © UCLES (Cambridge University Press & Assessment). Questions are matched to topics from the official syllabus. AssessPro is independent and not endorsed by Cambridge.