Years 9–10 Digital Systems Word Scramble: Controlling and securing access to data and Threats and software vulnerabilities (Modules 25–40)
Name:
Date:
Class:
🔤
Word scramble
Unscramble the letters and write each key term on the line.
1
TASL
A random value added to a password before hashing, so identical passwords give different hashes. Each user gets their own ______, which defeats precomputed hash tables.
2
ERCFT-UROEB CAATTK
An attack that tries many passwords automatically until one works. A dictionary attack tries common words and leaked passwords first. Long passwords and lockouts slow it down.
3
SATES
Anything of value in a digital system that needs protecting, such as data, accounts, devices or services. Examples: a student database (data) or a school laptop (hardware).
4
RATTEH
Anything that could cause harm to an asset, such as an attacker, malware, human error or a power failure. Threats can be deliberate or accidental, and internal or external.
5
HATTRE ORCAT
A person or group that carries out an attack on a system, described by their motive (why) and skill (how able). Examples: cybercriminals, hacktivists, insiders and nation-state groups.
6
YTIUELRVAIBNL
A weakness in software, hardware, a process or a person that a threat could use to harm an asset. A ______ is only a weakness, not an attack.
7
XPOELIT
A method or piece of code that takes advantage of a vulnerability (a weakness) to attack a system. The weakness is the open door; the ______ is the tool that gets through it.
8
CTKATA AERFUSC
All the points where an attacker could try to get into a system or take data out, such as open ports, running services and user accounts. A smaller ______ means fewer ways in.
9
TINUP OAIVLIATND
Checking that data a user enters is the expected type, length and format before the program uses it, so bad or harmful input is rejected.
Answer Key
Years 9–10 Digital Systems · Modules 25–40
1TASL → salt — A random value added to a password before hashing, so identical passwords give different hashes. Each user gets their own salt, which defeats precomputed hash tables.
2ERCFT-UROEB CAATTK → brute-force attack — An attack that tries many passwords automatically until one works. A dictionary attack tries common words and leaked passwords first. Long passwords and lockouts slow it down.
3SATES → asset — Anything of value in a digital system that needs protecting, such as data, accounts, devices or services. Examples: a student database (data) or a school laptop (hardware).
4RATTEH → threat — Anything that could cause harm to an asset, such as an attacker, malware, human error or a power failure. Threats can be deliberate or accidental, and internal or external.
5HATTRE ORCAT → threat actor — A person or group that carries out an attack on a system, described by their motive (why) and skill (how able). Examples: cybercriminals, hacktivists, insiders and nation-state groups.
6YTIUELRVAIBNL → vulnerability — A weakness in software, hardware, a process or a person that a threat could use to harm an asset. A vulnerability is only a weakness, not an attack.
7XPOELIT → exploit — A method or piece of code that takes advantage of a vulnerability (a weakness) to attack a system. The weakness is the open door; the exploit is the tool that gets through it.
8CTKATA AERFUSC → attack surface — All the points where an attacker could try to get into a system or take data out, such as open ports, running services and user accounts. A smaller attack surface means fewer ways in.
9TINUP OAIVLIATND → input validation — Checking that data a user enters is the expected type, length and format before the program uses it, so bad or harmful input is rejected.