Gce Model Questions Vol1 2017 Computer Studies Question 6

A university's computer lab suffered a security breach in which an unauthorised user accessed the lab's network and copied confidential student data. An investigation revealed the following facts: - The lab computers run Windows 10 with default security settings. - Passwords for all user accounts were simple alphanumeric strings of six characters, changed only once a year. - The network uses a single Wi‑Fi access point with WPA2‑PSK, the pre‑shared key being "university123". - No firewall or intrusion‑detection system (IDS) is installed on the network. - The copied data was stored on a shared folder that had read‑write permissions for all lab users. Answer the following: (a) Identify and explain three major security vulnerabilities that made the breach possible. (b) For each vulnerability identified in (a), recommend a specific technical control that would mitigate the risk, and briefly justify how it works. (c) Discuss the ethical responsibilities of the university's IT administrator in handling the breach, including at least two professional codes or principles that should guide their actions.