4.1g Cybersecurity: Threats & Prevention — Edexcel 1CP2

🔒

Unlock Pro

Subscribe to access all 59 Edexcel 1CP2 lessons.

£7.99/month

or £59/year

Subscribe →

Cyber Threats

A cyber threat is an attempt to damage, disrupt, or gain unauthorised access to a computer system or network.

Malware

Malware (malicious software) is any software designed to harm a computer system.

Type	Description
Virus	Attaches itself to files and spreads when files are shared. Can delete data or corrupt files.
Worm	Self-replicating malware that spreads across networks without needing to attach to a file.
Trojan horse	Disguises itself as legitimate software but carries a hidden malicious payload.
Ransomware	Encrypts victim's files and demands payment (ransom) to restore access.
Spyware	Secretly monitors user activity and sends information to attackers (e.g. keystrokes, passwords).
Adware	Displays unwanted advertisements; may redirect browsers to harmful sites.

Social Engineering

Social engineering exploits human psychology rather than technical vulnerabilities.

Phishing: fake emails/messages that appear to come from trusted sources, tricking users into revealing personal information or clicking malicious links
Vishing: phishing via voice/telephone calls
Smishing: phishing via SMS text messages
Baiting: leaving infected USB drives for victims to find and plug in
Pretexting: creating a fabricated scenario to extract information

Other Threats

Threat	Description
Denial of Service (DoS)	Floods a server with traffic to make it unavailable to legitimate users
Distributed DoS (DDoS)	DoS attack from multiple sources (a botnet) — harder to block
Brute force attack	Tries all possible passwords until the correct one is found
SQL injection	Malicious SQL code entered into a web form to access/manipulate a database
Man-in-the-middle	Attacker intercepts communications between two parties

Prevention Methods

Measure	How it helps
Firewall	Monitors and filters incoming/outgoing network traffic based on security rules
Antivirus software	Detects and removes known malware; runs regular scans
Strong passwords	Harder to crack — use uppercase, lowercase, numbers, symbols, 12+ characters
Two-factor authentication (2FA)	Requires a second form of verification (e.g. phone code) in addition to password
Software updates/patches	Fix known security vulnerabilities in software and operating systems
User access control	Restricts access to data/systems based on the user's role
Encryption	Scrambles data so it is unreadable to unauthorised parties
User education	Train staff to recognise phishing, use secure passwords, and follow security policies
Physical security	Lock doors, use ID badges, CCTV — prevent physical access to systems
Backups	Regular backups ensure data can be restored if lost or corrupted by ransomware

Exam tip: Know specific definitions for each malware type. "Name and describe two types of malware" is a common question. Always link prevention methods to specific threats: e.g. "2FA prevents brute force attacks because even with the password, a second verification is needed."

⚠️ Common Mistakes

Saying a virus "spreads automatically across a network" — that's a worm. A virus needs a user to share infected files.
Confusing phishing (email) with vishing (voice) — know all three: phishing/vishing/smishing
Not distinguishing DoS (single source) from DDoS (multiple sources/botnet)
Saying antivirus software prevents ALL malware — it only detects known threats

▶

Video coming soon

Click slide or press arrow keys to navigate

✍️

Worksheet — 4.1g Cybersecurity

8 Edexcel-style questions · AI-marked

Q1Explain the difference between a computer virus and a worm.[2]

✅ Mark scheme

A virus attaches itself to files and spreads when the user shares the infected file [1]; a worm is self-replicating and spreads automatically across networks without needing to be attached to a file [1].

Q2What is ransomware? Describe how it affects users.[2]

✅ Mark scheme

Ransomware is malware that encrypts the victim's files [1]; making them inaccessible — attackers then demand payment (a ransom) to provide the decryption key and restore access [1].

Q3Describe what phishing is and explain why it is effective.[3]

✅ Mark scheme

Phishing is sending fake emails or messages that appear to come from trusted sources (e.g. banks, companies) [1]; designed to trick users into revealing personal information such as passwords or credit card details [1]; it is effective because it exploits human psychology/trust rather than technical weaknesses [1].

Q4Explain the difference between a DoS and DDoS attack.[2]

✅ Mark scheme

A DoS (Denial of Service) attack floods a server with traffic from a single source to make it unavailable [1]; a DDoS (Distributed DoS) attack uses multiple sources (a botnet) to flood the server, making it much harder to block [1].

Q5State two ways a business can protect itself against malware.[2]

✅ Mark scheme

Any two from: install and update antivirus software [1]; use a firewall to monitor/filter network traffic [1]; keep software updated with security patches [1]; educate staff to recognise suspicious emails/links [1]; regular backups [1].

Q6What is two-factor authentication (2FA) and how does it improve security?[2]

✅ Mark scheme

2FA requires a second form of verification in addition to a password (e.g. a one-time code sent to a phone) [1]; this means even if a hacker obtains the password, they still cannot access the account without the second factor [1].

Q7What is social engineering and why is it a threat?[2]

✅ Mark scheme

Social engineering manipulates people into revealing confidential information or performing security-compromising actions [1]; it is effective because it exploits human trust and behaviour rather than technical vulnerabilities, making technical security measures less effective [1].

Q8A company suffers a ransomware attack. Explain how regular backups could have reduced the impact.[2]

✅ Mark scheme

Ransomware encrypts files and demands payment to restore access [1]; with regular backups, the company can restore files from a clean backup copy without paying the ransom, minimising data loss and downtime [1].

Topic Quiz

Q 1 of 15

You scored

out of 15

⚡ XP

Click to reveal definition

🎉

Session complete!

Term	Definition

Unlock Pro

Cyber Threats

Malware

Social Engineering

Other Threats

Prevention Methods

Worksheet — 4.1g Cybersecurity

Mini Test — Cybersecurity