The diagram shows the method used by a field reporter to send video from a laptop at a sports venue to Ed's news office. The reporter connects through a pub...
Question 1 Report
The diagram shows the method used by a field reporter to send video from a laptop at a sports venue to Ed's news office. The reporter connects through a public wireless network, then starts a VPN application before uploading files to the office server. Ed must decide which safeguards are needed because the video may be embargoed until broadcast.
(a) Describe the security risk of uploading the video using public Wi-Fi without the VPN. [3]
(b) Explain how encryption in the VPN tunnel reduces this risk. [3]
(c) Give three security checks the reporter should complete before uploading the video. [3]
(d) Which security method would prevent an unauthorised user from changing the video file during transfer: a checksum, a backup or a password? State your answer. [2]
Answer Details
(a) Without the VPN, other users on the public wireless network may monitor traffic. Data packets could be intercepted, allowing unencrypted video or login information to be read or stolen. [3]
(b) The VPN converts the video data into ciphertext before it leaves the laptop. An interceptor does not have the encryption key needed to read it. The intended server or VPN endpoint decrypts the data at the other end. [3]
(c) Confirm that the VPN is connected, check that the wireless network name is trusted, and verify the office server URL or certificate. Updated security software, multi-factor authentication and locking the laptop when unattended are further suitable checks. [3]
(d) A checksum is the appropriate method. A checksum calculated at the sender and receiver can be compared to detect whether the video file was altered during transfer. A password controls access, while a backup provides another copy; neither specifically detects file alteration in transit. [2]
Download The App On Google Playstore
Everything you need to excel in your exams
