I85PREP
⌘ K
ICAB CL Information Technology study materials
ICAB CL Information Technology study resources

ICAB CL Information Technology practice questions

One question at a time. Build your ICAB CL Information Technology understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Information Technology

Which component of a computer system is primarily responsible for executing program instructions and coordinating the activities of other hardware units?

  1. The random access memory
  2. The power supply unit
  3. The central processing unit Correct answer.
  4. The hard disk drive

Explanation

The central processing unit fetches, decodes and executes instructions, and it also controls and synchronises the other hardware components through the control unit. Memory and storage only hold data and instructions, while the power supply merely delivers electrical energy.

Question 2Information Technology

In a spreadsheet, which type of cell reference keeps both the column and the row fixed when the formula is copied to another cell?

  1. A mixed reference such as A$1
  2. An absolute reference such as $A$1 Correct answer.
  3. A named range reference without a sheet name
  4. A relative reference such as A1

Explanation

An absolute reference uses dollar signs before both the column letter and the row number, so copying the formula leaves that address unchanged. Relative references shift, and mixed references lock only one part of the address.

Question 3Information Technology

Which protocol is used by a web browser to request and receive web pages over the internet in an encrypted form?

  1. HTTPS Correct answer.
  2. FTP
  3. Telnet
  4. SMTP

Explanation

HTTPS is HTTP layered over TLS, which encrypts the traffic between the browser and the web server and protects it from eavesdropping. FTP, SMTP and Telnet are used for file transfer, mail transfer and remote login respectively and do not provide that encrypted web retrieval.

Question 4Information Technology

Which of the following best describes the function of an operating system?

  1. It stores backup copies of files on remote servers
  2. It designs the graphical layout of user documents
  3. It compiles source code into machine code for a specific processor
  4. It manages hardware resources and provides services to application programs Correct answer.

Explanation

An operating system acts as an intermediary between users, applications and hardware, managing memory, processors, storage and input/output devices while providing common services such as file systems and scheduling. Compilers, backup tools and document editors are separate programs that run on top of it.

Question 5Information Technology

In relational database terminology, what is a primary key?

  1. A field that links a table to an external spreadsheet
  2. A field or combination of fields that uniquely identifies each record in a table Correct answer.
  3. A field that stores the largest numeric value in a table
  4. A field that may contain duplicate values across records

Explanation

A primary key enforces entity integrity by guaranteeing that every row can be uniquely identified, so its values must be unique and cannot be null. Duplicate or null values are therefore not permitted in a primary key column.

Question 6Information Technology

Which of the following is an example of malicious software that self-replicates by attaching itself to legitimate host files?

  1. A device driver
  2. A virus Correct answer.
  3. A firewall
  4. A compiler

Explanation

A virus is malware that inserts its code into legitimate executable or data files and spreads when those infected files are run or shared. Firewalls, drivers and compilers are legitimate system components rather than self-replicating malicious code.

Question 7Information Technology

Which of the following is a characteristic of a local area network rather than a wide area network?

  1. It typically covers a single building or campus Correct answer.
  2. It spans multiple countries
  3. It requires satellite links for all connections
  4. It always relies on public telecommunications infrastructure

Explanation

A local area network covers a limited geographic area such as an office, building or campus and is usually owned and managed by a single organisation. Wide area networks span larger distances and generally depend on third-party telecommunications links.

Question 8Information Technology

What does the term 'phishing' describe in the context of information security?

  1. Intercepting radio signals from wireless devices
  2. Encrypting files and demanding payment for their release
  3. Physically stealing a laptop from an office
  4. Deceiving users into revealing credentials through fraudulent messages Correct answer.

Explanation

Phishing is a social-engineering attack in which attackers impersonate a trusted party through email, messages or fake websites to trick users into disclosing passwords or other sensitive data. Physical theft, ransomware and wireless interception are distinct attack types.

Question 9Information Technology

A company stores a customer's date of birth in a database field defined as a date type. Which data type would be most appropriate for storing the customer's full name?

  1. Integer
  2. Date/Time
  3. Text or variable-character Correct answer.
  4. Currency

Explanation

A name is a string of alphabetic characters of variable length, so a text or variable-character field is appropriate. Numeric, date and currency types cannot properly represent names and would prevent valid entries.

Question 10Information Technology

A user wants to send the same personalised letter to 500 customers, inserting each customer's name and address automatically. Which feature of a word processor should be used?

  1. Mail merge Correct answer.
  2. Track changes
  3. AutoCorrect
  4. Spell check

Explanation

Mail merge combines a main document containing the fixed text with a data source containing the variable fields, producing one personalised copy per record. Track changes, spell check and AutoCorrect support editing and proofreading but cannot generate personalised copies from a list.

Question 11Information Technology

A spreadsheet contains the values 10, 20, 30 and 40 in cells A1 to A4. What result does the formula =AVERAGE(A1:A4) return?

  1. 40
  2. 10
  3. 25 Correct answer.
  4. 100

Explanation

The AVERAGE function adds the values in the range, giving a total of 100, and divides by the count of four values, producing 25. It does not return the sum, the maximum or the first value in the range.

Question 12Information Technology

Which of the following best explains why an organisation should apply the principle of least privilege to user accounts?

  1. It removes the need for user authentication across the network
  2. It limits each account to the access needed for its tasks, reducing damage from misuse or compromise Correct answer.
  3. It guarantees that backups are performed every day
  4. It allows every employee to access all systems for convenience

Explanation

Least privilege grants each account only the permissions required to perform its duties, which shrinks the attack surface and limits the harm a compromised or careless account can cause. It does not eliminate authentication or replace backup procedures.

Question 13Information Technology

A small business wants to prevent employees from visiting known malicious websites while still allowing normal web browsing. Which control is most directly suited to this requirement?

  1. A web content filter or proxy that blocks traffic to blacklisted sites Correct answer.
  2. An uninterruptible power supply for the server room
  3. A full backup of the file server each night
  4. A password policy requiring twelve characters

Explanation

A web content filter or proxy inspects requested web addresses and blocks those on a blacklist while permitting legitimate browsing. Backups, password policies and power protection address different risks and do not control which websites users can reach.

Question 14Information Technology

In a relational database, what is the main purpose of a foreign key?

  1. To sort the records of a table automatically in ascending order
  2. To enforce a link between a record in one table and a related record in another table Correct answer.
  3. To ensure that every value in a column is unique across the whole table
  4. To compress the stored data to save disk space

Explanation

A foreign key references the primary key of another table and enforces referential integrity, so a child record cannot point to a parent record that does not exist. Uniqueness is the role of the primary key, and sorting or compression are unrelated functions.

Question 15Information Technology

Which statement correctly distinguishes RAM from ROM?

  1. RAM is volatile and loses its contents when power is removed, while ROM retains its contents Correct answer.
  2. RAM stores only the operating system, while ROM stores only user documents
  3. RAM retains its contents when power is removed, while ROM loses its contents
  4. Both RAM and ROM are volatile and lose their contents when power is removed

Explanation

RAM is volatile working memory that loses its contents when power is removed, whereas ROM is non-volatile and keeps its contents, typically holding firmware such as the boot instructions. The two differ in volatility rather than in which user files they hold.

Question 16Information Technology

A user reports that a spreadsheet cell displays '#####' instead of a calculated number. What is the most likely cause?

  1. The formula contains a syntax error that prevents calculation
  2. The column is too narrow to display the full formatted number Correct answer.
  3. The cell has been protected against editing
  4. The workbook has been saved in an older file format

Explanation

Spreadsheet programs show a row of hash marks when a numeric or date value is too wide for the current column width, and widening the column resolves it. A genuine formula error would normally display an error code such as #DIV/0! or #VALUE! instead.

Question 17Information Technology

Which of the following describes the role of DNS on the internet?

  1. It compresses web pages before transmission
  2. It translates human-readable domain names into IP addresses Correct answer.
  3. It assigns a permanent IP address to every device
  4. It encrypts email messages between servers

Explanation

The Domain Name System resolves names such as example.com into the numeric IP addresses that routers need to deliver traffic. It does not encrypt mail, allocate addresses dynamically or compress content.

Question 18Information Technology

An employee receives an email that appears to come from the finance director, urgently requesting a bank transfer to a new supplier account. Which action best reflects good security practice?

  1. Reply to the email asking for confirmation of the account details
  2. Make the transfer immediately because the request comes from a senior manager
  3. Forward the email to all colleagues so they are aware of the supplier
  4. Verify the request through an independent channel before making any payment Correct answer.

Explanation

Urgent payment requests that appear to come from senior staff are a classic business email compromise pattern, so the recipient should confirm the request using a known, separate channel such as a telephone call. Replying to the suspicious message or acting on urgency plays into the attacker's hands.

Question 19Information Technology

In a spreadsheet, a manager wants to highlight all sales figures above 10,000 automatically as new data is entered. Which feature is most appropriate?

  1. Print titles
  2. Conditional formatting Correct answer.
  3. Data validation
  4. Freeze panes

Explanation

Conditional formatting applies a chosen format, such as a fill colour, to cells whose values meet a specified rule, and it updates automatically as values change. Data validation restricts what can be entered, while freeze panes and print titles affect display and printing only.

Question 20Information Technology

Which of the following is the primary purpose of a firewall in a corporate network?

  1. To scan email attachments for viruses before delivery
  2. To control network traffic by permitting or denying connections according to defined rules Correct answer.
  3. To convert domain names into IP addresses
  4. To provide a backup copy of the network configuration

Explanation

A firewall examines packets or connections and allows or blocks them according to a rule set, forming a barrier between trusted and untrusted networks. Antivirus scanning, configuration backup and name resolution are performed by other components.

Question 21Information Technology

A company wants to ensure that only authorised software can run on employee laptops. Which approach best supports this objective?

  1. Increasing the size of the hard disk on each laptop
  2. Application whitelisting that permits only approved programs to execute Correct answer.
  3. Allowing users to install any software from the internet
  4. Disabling antivirus updates to improve performance

Explanation

Application whitelisting maintains a list of approved programs and blocks everything else, which directly restricts execution to authorised software. Additional storage, unrestricted installation and disabled antivirus updates all weaken control rather than strengthen it.

Question 22Information Technology

A retail company stores customer records in a database. It must ensure that a deleted order record does not leave a related payment record without a parent order. Which database mechanism should be used?

  1. A unique index on the payment amount
  2. A foreign key with referential integrity constraints Correct answer.
  3. A stored procedure that logs deletions
  4. A view that joins the two tables

Explanation

A foreign key with referential integrity prevents the creation of orphan child records and can be configured to cascade or restrict deletions of parent rows. Indexes, views and logging procedures do not enforce the parent-child relationship.

Question 23Information Technology

An organisation uses symmetric encryption to protect a large volume of stored data. What is the principal key-management challenge of this approach?

  1. Symmetric keys cannot be generated by software and must be bought from a vendor
  2. Symmetric encryption provides no confidentiality at all
  3. The same secret key must be shared securely between every party that needs to encrypt or decrypt Correct answer.
  4. Symmetric algorithms are too slow for bulk data and cannot be used at scale

Explanation

Symmetric encryption is fast and well suited to bulk data, but every communicating party needs the same secret key, so secure distribution, storage and rotation of that key become the central difficulty. Asymmetric techniques are often used to exchange or protect the symmetric key.

Question 24Information Technology

A web server is reachable from the internet, and an attacker sends a request containing a crafted input that causes the database to return every user record. Which weakness does this most likely exploit?

  1. Insufficient disk space on the database server
  2. A failure to renew the TLS certificate
  3. A weak password policy on administrator accounts
  4. Improper input validation leading to SQL injection Correct answer.

Explanation

SQL injection occurs when untrusted input is concatenated into a query without proper validation or parameterisation, allowing an attacker to alter the query and retrieve or modify data. Parameterised queries and strict input validation are the standard defences.

Question 25Information Technology

A company must choose between a full backup and an incremental backup strategy for a large file server. Which statement best captures the trade-off?

  1. Full backups use less storage than incremental backups in every case
  2. Incremental backups require no backup software and can be done manually
  3. Full backups cannot be restored after a disk failure
  4. Incremental backups are faster to create but slower and more complex to restore because several sets must be applied Correct answer.

Explanation

An incremental backup captures only data changed since the last backup, so it is quick and compact to create, but restoring requires the last full backup plus each subsequent increment in order. Full backups are simpler and faster to restore but consume more time and storage.

Question 26Information Technology

Which of the following best describes the function of an operating system on a personal computer?

  1. It manages hardware resources and provides services that application software uses Correct answer.
  2. It converts source code written in a high-level language into machine code
  3. It encrypts all network traffic leaving the local machine
  4. It stores backup copies of user files on a remote server

Explanation

An operating system sits between the hardware and the applications, allocating processor time, memory and storage while exposing services such as file systems and device drivers. Compilers, backup tools and encryption utilities are separate programs that rely on these services rather than replace them.

Question 27Information Technology

A user is working on a document and the computer loses power before the file is saved. Which type of memory would have retained the unsaved work only if power had not been lost?

  1. The read-only memory
  2. The volatile main memory Correct answer.
  3. The optical drive
  4. The hard disk drive

Explanation

Unsaved work resides in volatile main memory (RAM), which loses its contents when power is removed. Persistent storage such as a hard disk or optical media keeps data without power, but only holds what has already been written to it.

Question 28Information Technology

Which of the following is the main purpose of a spreadsheet's absolute cell reference, written as $B$2?

  1. To round the value in the cell to two decimal places
  2. To keep the reference fixed when the formula is copied to other cells Correct answer.
  3. To format the cell so its contents cannot be edited
  4. To link the cell to an external database table

Explanation

The dollar signs anchor both the column and the row, so copying a formula that contains $B$2 to another location still points at B2. A relative reference such as B2 would shift by the same offset as the copy destination.

Question 29Information Technology

Which of the following best describes the role of a router in a network?

  1. It assigns a permanent hardware address to each network card
  2. It stores web pages so that clients can retrieve them quickly
  3. It converts analogue signals into digital signals for the telephone line
  4. It forwards data packets between different networks based on IP addresses Correct answer.

Explanation

A router examines the destination IP address of each packet and chooses the best path toward another network, which is what connects a LAN to the internet. Switches and hubs work within a single network segment rather than between networks.

Question 30Information Technology

Which of the following is an example of an output device?

  1. A barcode scanner
  2. A graphics tablet
  3. A touch-sensitive keypad
  4. A laser printer Correct answer.

Explanation

An output device presents processed data from the computer to the user, and a laser printer produces printed pages from digital documents. Scanners, tablets and keypads send data into the computer and are therefore input devices.

Question 31Information Technology

In a word processor, which feature is designed to apply a consistent style to every main heading throughout a long report?

  1. A page border applied to each page
  2. A text box placed on the first page
  3. A footnote inserted at the bottom of the page
  4. A paragraph style such as Heading 1 Correct answer.

Explanation

Paragraph styles store font, size and spacing settings under a named style, so applying Heading 1 to each main heading gives uniform formatting and enables automatic tables of contents. Page borders, text boxes and footnotes affect layout or annotation but do not standardise heading appearance.

Question 32Information Technology

Which of the following best describes a database management system?

  1. A programming language used to build web pages
  2. A software layer that stores, retrieves and controls access to data in a database Correct answer.
  3. A physical disk used exclusively for archiving old records
  4. A network protocol for transferring files between computers

Explanation

A database management system is software that organises stored data, enforces integrity rules, manages concurrent access and provides query facilities. The physical storage medium and the network protocols are infrastructure on which the DBMS relies.

Question 33Information Technology

Which of the following is the main purpose of a disaster recovery plan?

  1. To record the daily sales figures for management reporting
  2. To define how IT services will be restored after a major disruption Correct answer.
  3. To list the disciplinary procedures for staff who breach security policy
  4. To describe the marketing strategy for a new product launch

Explanation

A disaster recovery plan sets out the procedures, priorities and resources needed to bring critical systems back into operation after events such as fire, flood or major outage. It complements business continuity planning by focusing specifically on restoring technology services.

Question 34Information Technology

A sales manager wants a spreadsheet to display the word 'Target met' when a cell value is at least 5000 and 'Below target' otherwise. Which function is most appropriate?

  1. VLOOKUP
  2. CONCATENATE
  3. COUNTIF
  4. IF Correct answer.

Explanation

The IF function tests a logical condition and returns one value when the condition is true and another when it is false, which exactly matches the two-outcome requirement. Lookup and counting functions retrieve or tally data rather than choose between two text results.

Question 35Information Technology

A database table of orders must ensure that every order is linked to a customer who actually exists. Which constraint enforces this rule?

  1. A unique index on the order date
  2. A default value on the order status
  3. A primary key on the order number
  4. A foreign key referencing the customer table Correct answer.

Explanation

A foreign key restricts the customer identifier in the orders table to values that exist in the customer table, so an order cannot reference a non-existent customer. The primary key only guarantees uniqueness of order numbers within the orders table.

Question 36Information Technology

An employee needs to send a confidential contract to a client over the internet. Which combination best provides confidentiality and proof of origin?

  1. Encrypting the file and digitally signing it Correct answer.
  2. Storing the file on a public web server
  3. Renaming the file with a password in the filename
  4. Compressing the file and emailing it as an attachment

Explanation

Encryption keeps the contents unreadable to anyone without the key, while a digital signature lets the recipient verify who sent the file and detect tampering. Compression, renaming or public hosting provides no confidentiality or assurance of origin.

Question 37Information Technology

A company wants staff to access shared files from home without exposing those files directly to the internet. Which technology is most appropriate?

  1. A virtual private network Correct answer.
  2. A public FTP server
  3. A peer-to-peer file sharing client
  4. An open wireless hotspot

Explanation

A virtual private network creates an encrypted tunnel from the remote device into the corporate network, so shared files can be reached as if the user were on site. Public FTP, peer-to-peer clients and open hotspots all expose data or traffic to untrusted parties.

Question 38Information Technology

A spreadsheet contains the text 'AB-1234' in cell A1. A user wants to extract only the four digits into another cell. Which function is most suitable?

  1. =LEFT(A1,2)
  2. =UPPER(A1)
  3. =LEN(A1)
  4. =RIGHT(A1,4) Correct answer.

Explanation

The RIGHT function returns a specified number of characters from the end of a text string, so RIGHT(A1,4) yields the last four characters, which are the digits. LEFT would take characters from the start and LEN would only report the total length.

Question 39Information Technology

An organisation wants to reduce the impact of a ransomware attack on file servers. Which measure most directly limits the damage?

  1. Increasing the screen resolution of administrator workstations
  2. Disabling automatic operating system updates
  3. Maintaining regular offline backups that are tested for restoration Correct answer.
  4. Allowing all staff to hold administrator rights

Explanation

Offline backups that are verified by test restores allow data to be recovered without paying a ransom, because the copies are not reachable by the malware. Granting broad administrator rights or skipping updates increases the attack surface rather than limiting the damage.

Question 40Information Technology

A project team needs to collaborate on a single document with several people editing at the same time and a full history of changes. Which solution best meets the requirement?

  1. A cloud-based collaborative document platform with version history Correct answer.
  2. Emailing the file back and forth between team members
  3. Printing the document for each review meeting
  4. A shared folder containing one read-only copy

Explanation

A cloud-based collaborative platform allows simultaneous editing of one authoritative copy and automatically records revisions, so changes can be reviewed or reverted. Email attachments create divergent copies, and read-only or printed versions prevent collaborative editing.

Question 41Information Technology

A payroll spreadsheet must calculate income tax using several thresholds. Which approach makes the calculation easiest to maintain when the thresholds change?

  1. Typing the threshold values directly into every formula
  2. Rounding all salaries to the nearest thousand before calculating
  3. Storing the thresholds in a dedicated range and referring to it with absolute references Correct answer.
  4. Writing a separate formula for each employee by hand

Explanation

Placing the thresholds in a named or dedicated range means a single edit updates every dependent formula, which reduces error and maintenance effort. Hard-coded values scattered through formulas must be found and changed individually, and manual formulas are error-prone.

Question 42Information Technology

A user's laptop connects to a coffee shop wireless network. Which risk is most significant when the network is unencrypted?

  1. The laptop's hard disk will be reformatted automatically
  2. The operating system will lose its licence activation
  3. The laptop's battery will discharge more quickly
  4. Traffic can be intercepted and read by others on the network Correct answer.

Explanation

On an open, unencrypted wireless network, data travels through the air without protection, so anyone nearby with suitable equipment can capture and read it. Battery drain, disk formatting and licence loss are unrelated to the lack of wireless encryption.

Question 43Information Technology

A database designer is normalising a table that stores order lines. Which change best removes a partial dependency?

  1. Combine the orders and customers tables into one large table
  2. Remove all primary keys from the table
  3. Move attributes that depend on only part of a composite key into a separate table Correct answer.
  4. Add a duplicate copy of every column to improve read speed

Explanation

A partial dependency occurs when a non-key attribute depends on only part of a composite primary key; moving those attributes to a table keyed by that part achieves second normal form. Duplicating columns or merging tables introduces redundancy, and dropping keys removes integrity controls.

Question 44Information Technology

An organisation wants to detect unusual outbound data transfers that might indicate a compromised host. Which control is most appropriate?

  1. An intrusion detection system monitoring network traffic Correct answer.
  2. A content filter that blocks all file downloads
  3. A password complexity rule for user accounts
  4. A screensaver policy that locks idle workstations

Explanation

An intrusion detection system analyses network traffic and raises alerts on patterns such as large or unusual outbound transfers, giving visibility of possible exfiltration. Blocking downloads, locking screens and enforcing password rules address different risks and do not monitor outbound traffic.

Question 45Information Technology

A company plans to move a legacy application to a cloud provider. Which consideration most directly affects compliance with data protection law?

  1. The number of monitors used by the support team
  2. The country in which the cloud provider stores the data Correct answer.
  3. The brand of keyboard supplied to developers
  4. The colour scheme of the application's user interface

Explanation

Data protection rules often restrict where personal data may be stored or transferred, so the physical location of cloud storage is a decisive compliance factor. Interface design and hardware choices have no bearing on lawful processing or cross-border transfer.

Question 46Information Technology

A spreadsheet uses =SUM(B2:B10) in cell B11. A user inserts a new row immediately above row 10 and enters a value. What happens to the total?

  1. The total automatically includes the new value because the range expands Correct answer.
  2. The total doubles because the row is inserted
  3. The total excludes the new value because the range is fixed
  4. The formula is deleted and must be re-entered

Explanation

When a row is inserted inside the range referenced by a formula, most spreadsheet programs expand the range so that the new cell is included in the calculation. The formula is not removed, and there is no reason for the result to double.

Question 47Information Technology

An organisation uses role-based access control. A staff member moves from the sales department to finance. Which action best maintains the principle of least privilege?

  1. Share the finance manager's credentials until a new account is created
  2. Grant administrator rights temporarily during the transition
  3. Keep the sales role and add the finance role to preserve continuity
  4. Remove the sales role and grant only the finance role Correct answer.

Explanation

Least privilege requires that access match the user's current duties, so the old role should be revoked and only the new role granted. Accumulating roles or sharing credentials gives access beyond what the new job requires and undermines accountability.

Question 48Information Technology

A web application stores session identifiers in URLs. Which weakness does this design introduce?

  1. The database will reject all queries
  2. The application will be unable to use HTTPS
  3. Users will be forced to change passwords daily
  4. Session identifiers may leak through logs, bookmarks and referrer headers Correct answer.

Explanation

Session identifiers placed in URLs are recorded in browser history, server logs and referrer headers sent to third parties, which can allow an attacker to hijack the session. The choice does not prevent HTTPS or affect database queries, and it has no relationship to password expiry policy.

Question 49Information Technology

A company must choose between storing backups on-site on a mirrored disk array and storing them off-site in encrypted form. Which statement best reflects the trade-off?

  1. On-site mirroring protects against disk failure but not against a site-wide incident Correct answer.
  2. Off-site storage is always slower and therefore unsuitable
  3. On-site mirroring eliminates the need for encryption
  4. Off-site storage removes the need for any backup testing

Explanation

A mirrored array on the same site survives a disk failure but is lost with the building in a fire, flood or theft, whereas off-site copies survive site-wide events. Neither approach removes the need for testing or for encryption where data is sensitive.

Question 50Information Technology

A database query that joins three large tables runs slowly. Which change is most likely to improve performance without altering the results?

  1. Increasing the number of columns returned by the query
  2. Adding appropriate indexes on the columns used in join conditions Correct answer.
  3. Storing the tables as unformatted text files
  4. Removing the primary keys from all three tables

Explanation

Indexes let the database locate matching rows without scanning whole tables, which speeds up joins on the indexed columns while returning the same result set. Removing keys, changing storage format or returning more columns would harm integrity or increase the work performed.