Question Constellation Sign up for free AQA · GCSE · Computer Science · Higher
CAPTCHA and email confirmation security
A website wants to improve its cyber security procedures.
Explain how CAPTCHA and email confirmations could improve the security of the website.
Write your answer first. You can study the marking guidance whenever you need it.
Study the marking See what earns credit and compare it with a full-mark answer.
Marking points
- 1 For full credit, includes two credited CAPTCHA points.
- 2 For full credit, includes two credited email-confirmation points.
- 3 Stopping bots from access/account creation is a credited CAPTCHA point.
- 4 Testing whether the user is human is a credited CAPTCHA point.
- 5 Preventing web-based database access is a credited CAPTCHA point.
- 6 Sending confirmation on account creation is a credited email point.
- 7 Requiring access to the registered email address is a credited email point.
- 8 Blocking unauthorised/bot account creation is a credited email point.
- 9 Limiting mass account creation and website crashes is a credited email point.
Full-mark answer
CAPTCHA gives a test intended to distinguish a human user from a bot, helping stop automated programs creating accounts or accessing the site. Email confirmation sends a message to the address supplied when an account is registered; the user must access that mailbox to confirm the account, which helps stop unauthorised or automated account creation.
Why this answer loses marks
CAPTCHA is another password, and email confirmation only checks that an address was typed.
CAPTCHA distinguishes humans from bots, while confirmation must test access to the supplied mailbox and link that check to reduced unauthorised activity.