The Life Starter
Sign up
Grade 11 · unit review

Review: Distinguish Security and Privacy Boundaries

A private service sends detailed answers to an external provider and supplies a signed report. Explain the data-flow/privacy question and what a valid signature does not establish.

Download reviews and answer keys

Bring the unit skills together

Use these 4 new cases to check your reasoning. Choices are temporary and are not saved to an account, sent to staff or recorded as school grades. Download your current review choices before leaving or reloading.

Unit review questions
1. Confidential text is recovered by authorized decryption. Which mechanism or evidence is stated?
Need a hint?
  • Distinguish digest comparison, reversible confidentiality protection and source authentication.
  • Matching an untrusted digest supplied by an attacker does not establish trusted origin.
2. Verification uses the matching public key. Which role or limit is described?
Need a hint?
  • Separate signing with a private key from verification and from judging content truth.
  • A valid signature authenticates its cryptographic relationship, not the truth of every statement.
3. A summary need collects needless detailed identifiers. Which concern is described?
Need a hint?
  • Check why data is collected and used as well as who may access it.
  • Encryption does not automatically make every collection purpose appropriate.
4. A project is stored through the service API. Which destination or boundary is described?
Need a hint?
  • Identify the receiver and applicable protection at each stated data-flow step.
  • A public-looking interface does not reveal every downstream recipient.

The download contains your current choices and any checked feedback. Keep the separate transfer-task work in your own document; downloading its instructions does not mark it complete.

Use the skills in a new task

A private service sends detailed answers to an external provider and supplies a signed report. Explain the data-flow/privacy question and what a valid signature does not establish.

Work on paper or in your own document. Explain the choices you made.

  • Use only supplied fictional inputs and state the relevant rule.
  • Include labeled steps or evidence for each decision.
  • Name one limitation or tempting mistake.
  • Check that the result meets the task and revise a justified error.
Compare with a model response

The external recipient is a trust-boundary crossing that needs purpose, scope and exposure review. A valid signature with a trusted key context can support signer/integrity checks; it does not prove report claims or make all data collection appropriate.

A different response can also meet the criteria. Compare the evidence and reasoning, rather than copying the wording.