ICDL Computer & Online Essentials (ICDL) common mistakes
ICDL Computer & Online Essentials · Understand the traps and how to avoid them.
Describing RAM as the place where files are permanently stored, or saying that data in RAM survives when the computer is switched off.
Everyday language calls both RAM and disk space 'memory', and phone advertising talks about '128 GB memory' when it means storage, so the two get merged into one idea.
What to do instead
Learn one sentence and apply it to every scenario: RAM is the volatile workspace that is emptied at power-off; storage (hard disk/SSD/USB drive) keeps files when the power is off. Then sort ten short scenarios ('you are typing a letter', 'you shut down and reopen the file tomorrow') into RAM or storage until you get them all right without hesitation.
Labelling an application such as a web browser, word processor or media player as the operating system, or labelling Windows/macOS as 'just another program'.
Both categories are called 'software' and on a modern device the operating system is invisible until something goes wrong, so there is no visual cue to separate them.
What to do instead
Use a two-question test for any named program: does it start at boot and manage hardware, files and other programs (operating system), or does it perform a task for the user on top of that layer (application)? Classify a mixed list of ten names - Windows, Android, Word, Chrome, Excel, iOS, File Explorer, VLC, Linux, PowerPoint - until the split is automatic.
Identifying a file's type from its icon or name alone, then answering wrongly for files whose extension contradicts that guess (for example treating report.pdf as an editable Word document, or a .zip as a picture).
Windows hides file extensions by default and icons are often borrowed by several programs, so candidates have genuinely never seen the extension that decides the answer.
What to do instead
Turn on 'show file name extensions' in your own file manager settings and look at real files for a week. Memorise a short table: .docx/.xlsx/.pptx = editable Office documents, .pdf = fixed-layout document, .jpg/.png = image, .mp3 = audio, .mp4 = video, .zip = compressed archive, .exe = installer/program. Practise naming type and purpose from the extension only, with the icon hidden.
Treating the internet and the World Wide Web as the same thing, and calling a browser (Chrome, Edge, Firefox) a search engine, or a search engine a browser.
In normal conversation people say 'search the internet' when they mean 'use Google in a browser', and both icons sit side by side on the taskbar, so the nesting is never made explicit.
What to do instead
Draw the nesting once and reuse it: the internet is the global network of networks (the physical and logical connection); the web is one service running on it, alongside email and video calls; a browser is the program that displays web pages; a search engine is a website you reach through a browser. Then answer five 'which of these is not...' style questions from that drawing rather than from memory.
Answering that Wi-Fi is the internet connection itself - for example saying a device 'has no internet' only because Wi-Fi is off, or that a Wi-Fi password protects the household's broadband account.
'Wi-Fi' and 'internet' are used interchangeably in daily speech, and the Wi-Fi indicator is the only visible sign of connectivity on most devices, so the local wireless link gets credited with the whole chain.
What to do instead
Learn the chain in order - device → Wi-Fi or cable → router → modem → ISP → internet - and for each link state what it does and what fails without it. Test yourself with a fault scenario ('the Wi-Fi icon is full but pages will not load'): work along the chain instead of blaming the first component you can see.
Reading a web address from the wrong part - naming 'www', the page path, or the words after the domain as 'the website', and therefore misjudging who actually operates a page.
Candidates scan a URL left to right and stop at the first familiar-looking word, and they have never had to separate the parts of an address because the browser usually hides them.
What to do instead
Practise splitting real addresses aloud into protocol (https://), subdomain (www, login, mail), registered domain and top-level domain (example.com), then path, and query. Add the trust drill: read only the registered domain to decide who the site belongs to, and check that login.bank-name.secure-login.top is not the bank.
Using To for a whole mailing list that should be hidden, choosing Reply All for a message only the sender needs to read, or using Cc when the recipient is expected to act on the message.
Email clients put Reply and Reply All next to each other and default the cursor into To, so the choice is made by muscle memory rather than by asking who needs to see the reply.
What to do instead
Before sending, state the audience out loud: To = people who must act, Cc = people who only need to know, Bcc = recipients who must not be visible to each other. Apply a fixed rule for large lists (always Bcc, or a distribution list) and for group threads (Reply All only when the whole group needs the answer). Drill with five short scenarios and name the correct field before typing anything.
Clicking Send and only then remembering the file, attaching the wrong version, or assuming an attachment arrived because it was mentioned in the text.
People compose the message body first, and the body is where the promise of an attachment is made; the mental task feels finished once the text is written and Send is the natural next click.
What to do instead
Change the order of work: attach the file first, then write the body, then read the recipient line last. After sending, open the Sent folder and confirm the attachment is visible on the sent copy. If a message mentions an attachment, treat that sentence as a checklist item to verify, not as evidence.
Responding to an unsolicited email by clicking its link and entering login details, or replying to it to 'confirm' or 'cancel' an account, because the message looks official.
The message imitates real branding, uses urgency and fear, and offers a convenient one-click route to the task, so the judgement is made on appearance rather than on how the message arrived.
What to do instead
Adopt one non-negotiable rule: never log in from a link in an email. Navigate to the organisation's site by typing the address or using a saved bookmark, and check the account there. Before that, verify the sender's actual address rather than the display name, and treat urgency, unexpected attachments and requests for credentials as triggers to stop and verify through a separate channel.
Treating the padlock or 'https' as proof that a website is genuine and safe to buy from, or assuming antivirus and a firewall together cover every online threat.
Browsers present security with a single reassuring icon, and marketing language about 'secure' sites blurs encryption of the connection with trustworthiness of the operator, while security software is assumed to be a blanket guarantee.
What to do instead
Learn the scope of each control: HTTPS/padlock means the traffic is encrypted between you and that server - anyone can obtain it, including a fake shop; antivirus detects known malicious software; a firewall filters network traffic; none of them verifies that a business is honest or stops you from voluntarily typing a password into a look-alike page. For any 'is this safe' item, check the registered domain, the payment method and independent reviews, not the padlock alone.