OS function: providing system security

Tip: Choose Save as PDF in the print dialog to download. Use A4 paper size.

OS function: providing system security

Name:
Date:
Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which is an example of the OS providing system security?
A Asking users to log in with a username and password
B Letting the CPU fetch the next instruction
2. How does the OS use access rights to protect files?
A It decides which users can read, write or execute each file
B It gives every user full access to every file
3. Why does an OS install security updates?
A To fix weaknesses that attackers could use
B To make the screen resolution higher
4. Which statement about security tools and the OS is correct?
A An OS can never work with a firewall or antivirus software
B The OS can include or support a firewall and antivirus software
5. Which password is the better choice for protecting a user account?
A The word password
B A long mix of letters, numbers and symbols

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left columnRight column
1Username + Password AIgnoring security updates leaves known weaknesses unpatched, so attackers can exploit them. Security updates should be applied as soon as possible.
2Access rights: read only BThe user can open and view a file but cannot change or delete it
3The OS protects the computer from malware by running security tools such as a firewall and antivirus CInstall update: security patch
4The OS fixes weaknesses that hackers could exploit by installing security updates DA login check that makes the OS confirm who the user is before it allows access to the computer
5Password: 1234 (shared by all users) EA weak password that is shared by everyone gives poor security. Each user needs their own strong password so the OS can identify them and block unauthorised access.
6Ignore security updates to save time FFirewall: ON | Antivirus: ON

Definitions

system security

Fill in the Blanks

Complete each line of code by filling in the missing parts.

1.
INPUT password IF password _ storedPassword THEN OUTPUT "Login accepted"
2.
IF accessRight = "read" THEN ______ "File opened as read-only" ENDIF
3.
IF updateAvailable = ____ THEN installUpdate() ENDIF
4.
threat ← ________(download) IF threat = TRUE THEN blockFile(download)
5.
IF attempts __ 3 THEN lockAccount() ENDIF

Spot the Error

Shade in the letter of the line that contains an error.

Question 1
A INPUT username, password
B IF password <> savedPass THEN
C OUTPUT "Access granted"
D ELSE OUTPUT "Access denied"
Question 2
A user ← "guest"
B rights ← FULL_ACCESS
C IF action = "write" THEN
D OUTPUT "Not allowed"
Question 3
A attempts ← 0
B REPEAT
C attempts ← attempts - 1
D INPUT password
E UNTIL correct OR attempts = 3
Question 4
A CHECK for updates
B IF update_found THEN
C DOWNLOAD patch
D DELETE patch
E ENDIF
Question 5
A FOR EACH packet IN traffic
B IF source IN blocklist THEN
C ALLOW packet
D ELSE ALLOW packet
E NEXT packet

Answer Key

OS function: providing system security
Section A: Quick Questions
Q1
A — Asking users to log in with a username and password
Q2
A — It decides which users can read, write or execute each file
Q3
A — To fix weaknesses that attackers could use
Q4
B — The OS can include or support a firewall and antivirus software
Q5
B — A long mix of letters, numbers and symbols
Section B: Match the Pairs
Q1
Username + Password → A login check that makes the OS confirm who the user is before it allows access to the computer
Q2
Access rights: read only → The user can open and view a file but cannot change or delete it
Q3
The OS protects the computer from malware by running security tools such as a firewall and antivirus → Firewall: ON | Antivirus: ON
Q4
The OS fixes weaknesses that hackers could exploit by installing security updates → Install update: security patch
Q5
Password: 1234 (shared by all users) → A weak password that is shared by everyone gives poor security. Each user needs their own strong password so the OS can identify them and block unauthorised access.
Q6
Ignore security updates to save time → Ignoring security updates leaves known weaknesses unpatched, so attackers can exploit them. Security updates should be applied as soon as possible.
Section C: Definitions
Q1
system security — An OS function that protects the computer and its data from unauthorised access and attack using logins, access rights, updates and security tools.
Section D: Fill in the Blanks
Q1
INPUT password IF password = storedPassword THEN OUTPUT "Login accepted"
Q2
IF accessRight = "read" THEN OUTPUT "File opened as read-only" ENDIF
Q3
IF updateAvailable = TRUE THEN installUpdate() ENDIF
Q4
threat ← scanFile(download) IF threat = TRUE THEN blockFile(download)
Q5
IF attempts >= 3 THEN lockAccount() ENDIF
Section E: Spot the Error
Q1
B — The login check uses <> (not equal), so access is granted when the password is wrong. It should be IF password = savedPass THEN so only the correct password logs the user in.
Q2
B — A guest should only get the lowest access rights needed. Giving FULL_ACCESS lets them write and delete files. It should be rights ← READ_ONLY.
Q3
C — The counter must go up by 1 each try so the account is locked after 3 failed attempts. Subtracting means it never reaches 3, so guessing is unlimited. It should be attempts ← attempts + 1.
Q4
D — A security update only protects the computer once it is installed. Deleting the patch leaves the weakness open to attack. It should be INSTALL patch.
Q5
C — The firewall must stop traffic from blocklisted sources. Allowing it lets the unwanted traffic in. It should be BLOCK packet.