Kay runs a youth club and uses a laptop to store emergency contact information for members. Staff access the records through an online account. Kay notices ...
Question 1 Report
Kay runs a youth club and uses a laptop to store emergency contact information for members. Staff access the records through an online account. Kay notices that several volunteers use the same password because it is easy to remember. A volunteer also saves the password in an unprotected note on a smartphone. Kay wants a practical method that allows each staff member to access only the information needed for their role.
(a) State two characteristics of a strong password for the online account. [2]
(b) Describe how a password manager could improve security for the staff. [2]
(c) Give two reasons why staff should each have an individual user account rather than share one account. [2]
(d) Explain why access permissions should be different for a volunteer and for Kay. [2]
Answer Details
(a) A strong password is long and uses a mixture of upper- and lower-case letters, numbers and symbols. It should not be based on personal information or common words, and it should be unique to this account. [2]
(b) A password manager stores passwords in an encrypted vault. It can generate and retain different complex passwords, so staff do not need to memorise weak passwords or write them in an unprotected note. [2]
(c) Individual accounts mean actions can be traced to a named person in an audit log. An account can be removed when a staff member leaves, and permissions can be set for each person's role without disclosing shared credentials to everyone. [2]
(d) Kay needs full access to update emergency records and manage accounts. Volunteers should have least-privilege access, so they cannot view unnecessary sensitive data or make unauthorised changes. [2]
Download The App On Google Playstore
Everything you need to excel in your exams
