WAEC SSCE - Data Processing - 2015 (Essay and Test of Practical Work)

Answer Details

This question tests core database concepts, what a database management system does, and how data can be lost and protected.

(a)(i) Database

A database is an organised collection of related data stored together so that it can be easily accessed, managed, and updated. For example, a school's student records kept in structured tables form a database.

(a)(ii) Database management system (DBMS)

A database management system is the software that allows users to create, store, retrieve, update, and control access to a database. Examples are Microsoft Access, MySQL, and Oracle.

(b) Three functions of a database management system

• Data storage, retrieval and update: it lets users add, read, change, and delete records.
• Data security and access control: it uses passwords and user rights to control who can view or edit data.
• Backup and recovery: it keeps copies of the data and can restore them after a failure.

(Other valid functions: enforcing data integrity, allowing multiple users to share data concurrently, providing query facilities.)

(c) Two ways through which data can be destroyed

• Virus or malware attack that corrupts or deletes files.
• Accidental or deliberate deletion/overwriting by a user (human error or sabotage). (Hardware failure, fire, power surge, and theft are also acceptable.)

(d) Three precautionary measures to prevent data loss

• Take regular backups and store copies in a separate, safe location.
• Install and update antivirus software to guard against malware.
• Use access controls (passwords and user rights) so only authorised people can change data.

(Other valid measures: use an uninterruptible power supply against power failure, keep the system physically secure, and avoid opening suspicious files/attachments.)

Examination reminder: keep the difference clear: a database is the stored data, while a DBMS is the software used to manage that data. Marks are lost when the two are confused.

Answer Details

This question tests data security concepts, risk assessment, access control in databases, and the duties of a database administrator.

(a)(i) Data security

Data security is the protection of data from unauthorised access, alteration, disclosure, or destruction, so that its confidentiality, integrity, and availability are preserved.

(a)(ii) Data risk assessment

Data risk assessment is the process of identifying the threats and vulnerabilities that could affect an organisation's data, judging how likely each is and how much harm it would cause, so that suitable safeguards can be chosen.

(b)(i) Access control

Access control is the security mechanism that decides and enforces who is allowed to view or use data and resources, and what actions (read, write, modify, delete) each user may perform.

(b)(ii) Access control methods in database security

• Discretionary Access Control (DAC): the owner of the data grants or revokes access rights to other users.
• Mandatory Access Control (MAC): access is decided by fixed security classifications/labels set by the system, not by individual owners.
• Role-Based Access Control (RBAC): permissions are assigned to roles, and users gain access according to the role they hold.

(Authentication methods such as passwords and biometrics support these controls.)

(c) Three roles of a database administrator (DBA)

• Managing security and access: creating user accounts and granting or revoking privileges to protect the data.
• Performing backup and recovery: keeping copies of the database and restoring it after failure.
• Maintaining and tuning the database: monitoring performance, controlling storage, and keeping data integrity (other valid roles: installing/upgrading the DBMS, designing the database structure).

Examination reminder: keep the terms distinct: data security is the overall protection, risk assessment is judging the threats beforehand, and access control is the specific mechanism that limits who can do what.

Answer Details

This question tests what an application package is, the uses of common packages, the benefits of a presentation package, and good practice when building a PowerPoint presentation.

(a)(i) Application package

An application package is a ready-made program (or set of programs) developed to perform a specific type of user task, sold or supplied for general use rather than written for one organisation only. Examples are Microsoft Word, Excel, and PowerPoint.

(a)(ii) One use each of any four application packages

(b) Two benefits of a presentation package

• It lets you present information attractively and clearly using slides that combine text, images, and multimedia.
• It supports and organises a speaker, allowing points to be revealed one at a time and reused or edited easily for later presentations.

(c) Three guidelines for creating a good MS PowerPoint presentation

• Keep each slide simple and uncluttered: use short bullet points, not long paragraphs (follow a rule such as few lines per slide).
• Use a large, readable font and good colour contrast between text and background so the audience can read from a distance.
• Keep the design consistent (same theme, fonts, and layout) and use images or animation only where they add meaning, not as distraction.

Examination reminder: when asked for guidelines, give practical design rules (readability, brevity, consistency), not just "make it nice"; each specific, distinct point earns a mark.

Answer Details

None