BCS THE CHARTERED INSTITUTE FOR IT. BCS HIGHER EDUCATION QUALIFICATIONS BCS Level 6 Professional Graduate Diploma in IT WEB ENGINEERING

Size: px

Start display at page:

Download "BCS THE CHARTERED INSTITUTE FOR IT. BCS HIGHER EDUCATION QUALIFICATIONS BCS Level 6 Professional Graduate Diploma in IT WEB ENGINEERING"

Brenda Harris
6 years ago
Views:

1 BCS THE CHARTERED INSTITUTE FOR IT BCS HIGHER EDUCATION QUALIFICATIONS BCS Level 6 Professional Graduate Diploma in IT WEB ENGINEERING Tuesday 28 th March Afternoon Answer any THREE questions out of FIVE. All questions carry equal marks. Time: THREE hours Answer any Section A questions you attempt in Answer Book A Answer any Section B questions you attempt in Answer Book B The marks given in brackets are indicative of the weight given to each part of the question. Calculators are NOT allowed in this examination. Please refer to attached work book for figures. Section A Answer Section A questions in Answer Book A A1. a) (i) For each of the following three common security attacks, briefly describe the attack, and outline a suitable countermeasure that could be used to minimise risk or impact: Man in the middle attack; Buffer overrun; and SQL Injection; (ii) Another risk to network security is packet sniffing. Briefly describe the attack, and explain why this is a particularly important risk to wireless networks. (iii) Users often access Internet services using other devices such as mobile phones and home video games consoles (e.g. mobile phones, tablets). State ONE risk specific to accessing Internet services using mobile phones, and ONE risk specific to Internet services using home video games consoles. b) Some people believe that web services should not require users to log in or authenticate in any way, and should instead be open for all to use. (i) With a suitable example, briefly explain why authentication may be necessary. Page 1 of 6

2 (ii) One traditional method of restricting user access to web pages is the use of htaccess and htpasswd. State TWO features that htaccess offers for restricting access to pages. (iii) A company is currently using htaccess files to restrict access to sensitive pages, but a recent visit from an IT consultant has suggested this technique is old fashioned and insecure. Your manager would like to understand some alternatives. Briefly explain the following three methods of authentication, and provide a drawback of using each method. a. Biometric data alone; b. 2-factor authentication (not using biometric data); and c. Personal digital certificates using public key infrastructure. c) Following a number of UK High Court judgements since 2014, large UK Internet Service Providers are obliged to restrict access to a blacklist of Torrent and Streaming Media sites, as well as those that may deal in counterfeit products. Considering the above, and using any other real-life examples that may support your argument, discuss the statement It is ethical for Courts of Law to restrict access to websites. You should ensure that you present a balanced argument (considering situations when blocking access might have positive and negative consequences) and come to a clear conclusion. A2. a) (i) What does CSS stand for? Explain the acronym, and the general purpose of this technology. (ii) List (along with a brief explanation) THREE distinct benefits brought by using CSS, as well as ONE limitation. (4 marks) b) Analyse the code sample in the following figure. Describe what colour each of the TEN following words will show up as, and briefly explain why: Australia, Bolivia, China, Denmark, Ethiopia, Finland, Germany, Honduras, India, Japan. Page 2 of 6

3 File mystyle.css 1 body > h1 { color: grey; } File cssdemo.html 1 <!DOCTYPE html> 2 <html> 3 <head> 4 <title>my CSS Demo</title> 5 <link rel="stylesheet" type="text/css" href="mystyle.css"> 6 <style> 7 h2 { color: green; } 8.myselector { color: blue; } 9 div h1 { color: orange; } 10 div div * { color: red; } 11 #myselector { color: yellow; } 12 </style> 13 </head> 14 <body> 15 <div style="color:purple;"> 16 Australia 17 <span style="color:pink;">bolivia</span> 18 <span>china</span> 19 </div> 20 <div> 21 <div> 22 <h3>denmark</h3> 23 <h2 id="myselector">ethiopia</h2> 24 <h2 class="myselector">finland</h2> 25 </div> 26 <h1>germany</h1> 27 <p>honduras</p> 28 </div> 29 <h1>india</h1> 30 <h2>japan</h2> 31 </body> 32 </html> Page 3 of 6

4 c) The British Equality Act 2010 mandates that reasonable adjustments should be made (free of charge) to ensure disabled individuals can access: - education - employment - housing - goods and services (e.g. shops, banks, cinemas, hospitals, council offices, leisure centres) - associations and private clubs Failure to make such adjustments constitutes unlawful discrimination. (i) In which circumstances does this law apply to websites? (ii) What kind of adjustments can be made? (iii) How can you ensure that these requirements are met? (iv) In countries where similar laws don t exist, what could motivate (or discourage) web developers (and their clients) to make similar adjustments? d) Bounce rate is a metric used in web traffic analysis. It represents the percentage of visitors who enter a site and then leave ( bounce ) rather than continuing on to view other pages within the same site. An e-commerce website has recently been upgraded. Following the upgrade, the following bounce rates have been observed (broken down by web browsers): Chrome: 38% Internet Explorer: 100% Firefox: 29% Safari: 31% Opera: 36% Others: 34% (i) What do these numbers suggest? (ii) How can this hypothesis be verified? (iii) How could this situation have been avoided? e) Some users have been complaining that your website is too slow. What can be done to improve the situation? Page 4 of 6

5 Section B Answer Section B questions in Answer Book B B3. a) Explain, with reference to XML, the purpose of the Document Type Definition and the Document Type Declaration. (3 marks) b) Explain how an XML document would call: an internal DTD an external DTD an XML schema (3 marks) c) The XML document in figure 4.2 contains precisely FOUR errors when validated against the DTD in figure 4.1. Identify all the errors, and provide a solution for each one. [Note: the line numbers are for your benefit and are not part of the XML code.] d) Write an external DTD for the XML file in figure 4.3: (4 marks) The element trainlog may contain, in any order, one or more session and progress_report elements. A session element must first contain a duration element, followed by distance element, followed by a location element, followed optionally by a comment element, followed by zero or more photo elements. The date and heartrate attributes in session are optional. The type attribute in session must be present but allow only 3 values running, swimming, cycling - with default set to running. A photo element must contain a url attribute, but may not contain any text. A progress_report element must contain one or more comment elements. (15 marks) B4. a) CSS, XSLT and JavaScript can transform XML documents into HTML documents. Briefly explain how each of the technologies achieves this. b) Textbooks for a computing course are to be stored in an XML document as shown in Figure 5.1 and an XSLT style sheet will render this as a web page as shown in Figure 5.2. Using the HTML template provided in Figure 5.3, in your answer book provide the missing code (the section marked ) to accomplish this. You can assume that the textbook.css file exists and that no style code needs to be written. (12 marks) Page 5 of 6

6 c) Modify the HTML template so that the book image is a link to book s website. Write in your answer book ONLY the code to accomplish this. (4 marks) d) Modify the HTML template so that the book title is a link to book s website. Write in your answer book ONLY the code to accomplish this. e) Modify the HTML template so that the author name is an link to author. Write in your answer book ONLY the code to accomplish this. B5. a) Internet of things (IoT) is defined as "the infrastructure of the information society." Briefly explain what this means using appropriate examples. b) What key issues will need to be addressed for IoT to be fully accepted? c) Briefly explain virtualisation, citing suitable examples. d) A Small Medium Enterprise company is reviewing its IT requirements and is considering using a Cloud solution as opposed to investing in existing infrastructure. You are required to make a presentation to company board outlining the potential benefits and drawbacks of both approaches. Your answer should be in the form of a power point presentation to the client (6 slides with bullet points, no need for introductory slides, focus on the key issues). The presentation should differentiate between IaaS, PaaS and SaaS. (10 marks) Page 6 of 6

BCS THE CHARTERED INSTITUTE FOR IT. BCS HIGHER EDUCATION QUALIFICATIONS BCS Level 6 Professional Graduate Diploma in IT WEB ENGINEERING

BCS THE CHARTERED INSTITUTE FOR IT BCS HIGHER EDUCATION QUALIFICATIONS BCS Level 6 Professional Graduate Diploma in IT WEB ENGINEERING Tuesday 27 th March 2018 - Afternoon Answer any THREE questions out