CBSE Class 10 IT (402) - Web Applications and Security

Web Applications and Security

Comprehensive study notes for CBSE Class 10 IT (Code 402) Unit 4: Web Applications and Security. Master Computer Accessibility Options, Networking Fundamentals, Instant Messaging, Offline/Online Blogging, E-Transactions, Cyber Security Threats, Defensive Measures, Ergonomics, and Workplace Health & Safety.

1. Introduction to Web Applications and Digital Safety

In modern computing, almost all office and school workflows depend on web-based services, distributed communication channels, cloud resources, and online monetary exchanges. Alongside these conveniences come serious cyber risks and occupational health hazards.

This module provides students with thorough knowledge of operating system accessibility settings, networking architectures, instant messaging, blogs, digital payments, internet threats, computer ergonomics, and workplace emergency safety guidelines.

2. Computer Accessibility Options Overview

Computer Accessibility refers to hardware and software features designed to make computers accessible and usable for all individuals, including those with physical, visual, auditory, speech, or cognitive impairments. These assistive features are built into operating systems such as Windows (found under Control Panel > Ease of Access Center) and Linux.

Accessibility features are grouped into five core categories: Keyboard, Sound, Display, Mouse, and General.

3. Keyboard Accessibility Options (StickyKeys, FilterKeys, ToggleKeys)

Accessibility ToolTarget Impairment / NeedFunctional Behavior & Shortcut
StickyKeysPhysical disabilities, tremors, or one-handed typing where pressing multiple keys together is difficult.Allows modifier keys (Shift, Ctrl, Alt, Windows) to remain active when pressed sequentially one at a time. Press Shift 5 consecutive times to activate.
FilterKeysMotor control issues, involuntary muscle spasms, or hand tremors.Instructs the computer to ignore brief or repeated keystrokes, and slows down key repeat rates so accidental double-taps are disregarded. Hold right Shift for 8 seconds to activate.
ToggleKeysVisual impairment or cognitive users who cannot see keyboard indicator LEDs.Emits an audible beep whenever locking keys (Caps Lock, Num Lock, or Scroll Lock) are toggled on (high beep) or off (low beep). Hold Num Lock for 5 seconds to activate.

4. Sound and Display Accessibility (SoundSentry, ShowSounds, High Contrast)

Sound Accessibility Tools (for users with hearing impairments):

  • SoundSentry: Generates visual warnings (such as blinking the active window border, title bar, or entire screen) whenever the computer generates an audio alert sound.
  • ShowSounds: Directs applications that convey information by speech or audio to provide visual captions, text transcripts, and informative on-screen icons.

Display Accessibility Tools (for users with visual impairments or eye strain):

  • High Contrast: Inverts screen colors and applies high-contrast color combinations (e.g., bright yellow or white text on a deep black background) to make text and icons significantly easier to distinguish.
  • Cursor / Pointer Options: Allows increasing the thickness (width) of the flashing text cursor and adjusting the blinking rate for effortless tracking.
  • Magnifier: An on-screen magnifying glass that enlarges portions of the screen up to several times its original size.

5. Mouse and General Accessibility (MouseKeys, SerialKeys)

  • MouseKeys: Designed for users who experience motor difficulty handling a physical mouse. It maps mouse cursor movements and clicking actions to the numeric keypad (e.g., 8 for Up, 2 for Down, 4 for Left, 6 for Right, and 5 to click).
  • SerialKeys: An assistive technology that allows people with severe physical disabilities to control computer functions through specialized input devices (such as sip-and-puff switches, eye-tracking sensors, or specialized joysticks) connected via serial ports.

6. Computer Networking Fundamentals & Benefits

A Computer Network is an interconnected collection of autonomous computing devices linked together via communication channels to exchange data and share hardware and software resources.

Network BenefitExplanation
Hardware SharingMultiple users can share expensive peripherals such as network printers, scanners, and high-capacity storage servers.
Software SharingSoftware applications and database licenses can be installed centrally on a server and accessed by multiple clients across the network.
Cost ReductionSharing equipment and software drastically reduces capital expenditure and operational maintenance overhead.
Centralized Data ManagementAll organizational records reside on secure master servers, simplifying regular backups and synchronizations.
Instant CommunicationEnables immediate exchange of messages, video calls, emails, and collaborative document editing across distant geographical branches.

7. Network Architectures (Peer-to-Peer vs. Client-Server)

FeaturePeer-to-Peer (P2P) ArchitectureClient-Server Architecture
Role of ComputersEvery computer (peer) has equal status, privileges, and responsibilities. Each device acts as both client and server.Dedicated powerful computers act as Servers providing resources; other workstations act as Clients requesting services.
Centralized ControlNo central server or master administrator. Each user manages their own security.Central server manages security, database access, user authentication, and network policies.
Cost & SetupVery inexpensive and simple to establish using standard basic equipment.Expensive; requires specialized server hardware, high-speed switching, and server operating systems.
Ideal ScopeSmall home setups or small offices with fewer than 10-15 computers.Large enterprises, banks, universities, web services, and enterprise organizations.

8. Types of Networks (PAN, LAN, MAN, WAN)

Networks are classified primarily based on the geographical span they cover:

Network TypeFull NameGeographical RangeTypical Real-World Example
PANPersonal Area NetworkWithin a radius of 10 meters (around a person).Connecting a smartphone to a smartwatch, wireless headphones, or laptop via Bluetooth or Wi-Fi hotspot.
LANLocal Area NetworkConfined to a single room, office floor, building, or school campus (up to 1-2 km).Computers linked in a school computer lab or bank branch using Ethernet cables or Wi-Fi.
MANMetropolitan Area NetworkSpans across an entire town or city (up to 50 km).City-wide cable television networks, regional university campus networks, or municipal CCTV systems.
WANWide Area NetworkSpans across vast distances, countries, or across the entire globe.The Internet is the largest WAN; ATM networks of multinational banking systems.

9. Network Hardware & Transmission Media

Transmission Media:

  • Guided (Wired) Media: Physical cables. Includes Twisted Pair Cable (standard RJ-45 LAN cables, inexpensive), Coaxial Cable (cable TV, high shielding), and Fiber Optic Cable (transmits light signals through glass strands; ultra-fast, immune to electrical interference).
  • Unguided (Wireless) Media: Electromagnetic waves through air. Includes Radio waves (Wi-Fi, Bluetooth), Microwaves (cellular towers, point-to-point dishes), Infrared (short-range line-of-sight remote controls), and Satellite communication.

Key Network Devices:

  • NIC (Network Interface Card): Hardware card with a unique physical MAC address enabling a device to attach to a network.
  • Modem (Modulator-Demodulator): Converts digital computer data into analog signals for telephone/cable lines, and vice versa.
  • Hub: A multiport repeater that broadcasts received data packets indiscriminately to all connected ports (inefficient, causes collisions).
  • Switch: An intelligent device that forwards packets only to the specific destination device based on its MAC address.
  • Router: Interconnects different networks and finds the optimal path for data packets using IP routing tables.

10. Internet Concepts & Terminology (WWW, URL, IP, DNS, ISP)

  • Internet: A global network of interconnected computer networks operating on standard TCP/IP protocols.
  • WWW (World Wide Web): A massive collection of multimedia hypertext documents linked together through hyperlinks, invented by Tim Berners-Lee in 1989.
  • Webpage vs. Website: A webpage is a single digital document (usually HTML); a website is a collection of related webpages hosted on a common domain.
  • Web Server: A high-capacity computer connected to the internet that stores and serves website files to client browsers upon request.
  • URL (Uniform Resource Locator): The unique global address of a web resource (e.g., https://www.techlearners.in/pages/notes/index.html).
  • IP Address: A unique numerical identifier assigned to every device connected to a network (e.g., 192.168.1.1 in IPv4, or hexadecimal in IPv6).
  • DNS (Domain Name System): The internet's phonebook; maps human-readable domain names (like techlearners.in) into machine-readable IP addresses.
  • ISP (Internet Service Provider): A commercial telecommunications company that provides internet connectivity to consumers (e.g., Jio, Airtel, BSNL, Vodafone Idea).
  • Bandwidth: The data-transfer capacity of a network channel, measured in bits per second (bps, kbps, Mbps, Gbps).

11. Internet Access Technologies (DSL, Cable, Broadband, Wi-Fi, WiMAX)

TechnologyMedia TypeKey Characteristics & Application
Dial-upWired (Analog Telephone)Slow (up to 56 kbps); ties up the landline phone line while internet is connected. Obsolete today.
DSLWired (Copper Telephone)Digital Subscriber Line; transmits high-speed digital data concurrently over standard telephone wires without tying up voice calls.
Cable BroadbandWired (Coaxial / Fiber)Provides high-bandwidth connections through existing community cable TV infrastructure.
FTTH (Fiber to the Home)Wired (Fiber Optic)Modern gigabit broadband utilizing pure fiber glass strands directly into buildings.
Wi-FiWireless (Radio Waves)Wireless Fidelity (IEEE 802.11); short-range wireless networking within 50-100 meters using routers/hotspots.
WiMAXWireless (Microwave)Worldwide Interoperability for Microwave Access; long-range broadband connectivity covering entire cities or rural zones (up to 50 km).
Mobile BroadbandWireless (Cellular)High-speed cellular data (3G, 4G LTE, 5G) provided via telecom towers directly to smartphones and dongles.

12. Instant Messaging (IM) & Chat Etiquette

Instant Messaging (IM) provides real-time text, voice, and video transmission between two or more participants over the internet. Unlike email, conversations happen synchronously with immediate responses.

  • Features of IM: Real-time chatting, audio/video calling, file sharing, group chats, status indicators (Available, Away, Busy, Offline).
  • Application-based IM: Software installed directly on the device (e.g., WhatsApp Desktop, Skype, Telegram).
  • Web-based IM: Accessed through web browsers without software installation (e.g., WhatsApp Web, Web Telegram, Slack in browser).

Chat Etiquette Rules:

  • Always start with a brief polite greeting before diving into questions.
  • Keep business or academic messages concise and to the point.
  • Avoid typing in ALL CAPS; typing in capital letters is perceived as online shouting.
  • Never share sensitive personal passwords, bank PINs, or confidential files over chat.
  • End the conversation courteously and respect others' time and status indicators.

13. Creating and Publishing Web Pages (Blogs & Offline Blog Editors)

A Blog (short for Weblog) is an online personal journal, diary, or informative article stream arranged in reverse chronological order (newest posts appear first). A person who writes blogs is called a Blogger, and the process of writing is termed Blogging.

Online vs. Offline Blog Editors:

CategoryFeatures & WorkingPopular Examples
Online PlatformsRequire constant active internet access. Articles are written, styled, and published directly within web browser dashboards.WordPress.com, Blogger.com (Blogspot), Medium.
Offline Blog EditorsDesktop applications that allow writers to draft, edit, format, and review blog posts offline without internet. Once connectivity is detected, posts are synchronized and published automatically with a single click.Qumana, Windows Live Writer, BlogDesk.

Advantages of Offline Blog Editors: Eliminates browser crashes losing unsaved drafts, saves mobile data costs, allows convenient offline writing while traveling, and includes advanced local image-editing tools.

14. Using Online Transactions (E-Commerce, Net Banking, UPI)

An Online Transaction is an electronic exchange of funds or payment conducted across telecommunication networks:

  • Online Shopping / E-Commerce: Purchasing goods, groceries, and electronics from online portals (Amazon, Flipkart, Myntra) using digital carts.
  • Online Ticketing: Booking train tickets (IRCTC), airline flights, movie seats, and bus routes online without waiting in physical queues.
  • Net Banking (Internet Banking): Managing bank accounts, downloading account statements, creating fixed deposits, and transferring funds (via NEFT, RTGS, IMPS).
  • UPI (Unified Payments Interface): Real-time instantaneous mobile payments using Virtual Payment Addresses (VPA) and QR codes without disclosing bank account numbers.
  • Debit & Credit Cards: Digital payment cards requiring 16-digit card number, expiry date, CVV, and OTP authentication.

15. Best Practices for Safe Online Transactions

  • Verify HTTPS & Padlock Icon: Always ensure the website address begins with https:// (Hypertext Transfer Protocol Secure) and displays a locked padlock icon in the browser address bar, indicating end-to-end SSL/TLS encryption.
  • Never Share OTPs or PINs: One-Time Passwords (OTPs), ATM PINs, and CVV numbers should never be disclosed to anyone, including bank representatives.
  • Avoid Public Wi-Fi Networks: Never execute financial banking or payment transactions on open, unsecured public Wi-Fi networks in cafes, railway stations, or airports.
  • Avoid Public / Cyber Cafe Computers: Browsers on shared public computers may store login credentials, cached cookies, and keystrokes.
  • Use Two-Factor Authentication (2FA): Enable multi-factor authentication for bank logins and email services.
  • Review Bank Statements Regularly: Check SMS notifications and monthly bank records for unauthorized debit alerts.

16. Internet Security Threats (Viruses, Worms, Trojans, Ransomware, Spyware)

Malware (Malicious Software) is any software deliberately engineered to cause damage to a computer system, server, client, or computer network:

Threat TypeCharacteristics & Danger
Computer VirusA self-replicating malicious program that attaches itself to legitimate host executable files (.exe, .doc). It corrupts, modifies, or destroys files and requires human execution to trigger and spread.
Computer WormA standalone self-replicating program that spreads across computer networks automatically through vulnerabilities without attaching to host files or needing human intervention. Rapidly exhausts network bandwidth.
Trojan HorseMalware disguised as useful, harmless software (e.g., a free game or media player utility). Once installed, it opens backdoor ports, providing unauthorized remote access to cyber criminals.
SpywareSecretly monitors computer activity, logs visited URLs, steals login credentials, and transmits personal data back to attackers.
KeyloggerA specialized form of spyware that records every keystroke pressed on the physical keyboard to capture banking passwords and credit card details.
RansomwareEncrypts the victim's documents and system drives, rendering them inaccessible, and demands ransom money (often via cryptocurrency) for decryption keys.
AdwareSoftware that automatically displays or downloads unwanted advertising banners and popups, slowing down system performance.

17. Cyber Attack Techniques (Phishing, Spoofing, Denial of Service)

  • Phishing: Fraudulent attempts to obtain sensitive data (passwords, banking details) by disguising as a trustworthy entity via counterfeit emails, SMS, or clone websites.
  • Spoofing: Forging the sender address of an email or IP packet to trick the receiver into trusting the origin of the transmission.
  • Denial of Service (DoS / DDoS): Flooding a targeted server or web application with an overwhelming torrent of fake network traffic, crashing the server and making legitimate services unavailable to real users.
  • Eavesdropping / Man-in-the-Middle (MitM): Intercepting private communication between two computers on an insecure network to steal sensitive data packets.

18. Best Practices for Internet Security & Data Protection

  • Create Robust Passwords: Use passwords of at least 8-12 characters combining uppercase letters, lowercase letters, numbers, and special symbols (e.g., Tr@v3l#2026$). Never use birthdays, phone numbers, or dictionary words. Change passwords periodically.
  • Install & Update Antivirus / Anti-malware: Install reputable antivirus software and keep definition signatures updated daily to counter zero-day threats.
  • Activate Firewalls: A Firewall (hardware or software) filters incoming and outgoing network traffic against defined security rules, blocking unauthorized intrusions.
  • Update OS and Web Browsers: Apply regular security patches to operating systems and browsers to eliminate known security vulnerabilities.
  • Clear Browsing Data: Regularly clear browser history, cached files, and tracking cookies, especially when utilizing public devices.
  • Regular Offline Backups: Maintain periodic backups of vital files on external solid-state drives or secure cloud storage.

19. Two-Factor Authentication (2FA) & Data Encryption

Two-Factor Authentication (2FA): Adds a crucial second layer of security beyond just a username and password. Access requires two distinct forms of identification:

  1. Something you know: Password or PIN.
  2. Something you have: OTP sent to registered mobile phone, or authenticator app token (e.g., Google Authenticator).
  3. Something you are: Biometric fingerprint or face scan.

Data Encryption: The process of converting plain readable text (plaintext) into an unreadable scrambled format (ciphertext) using cryptographic algorithms. Only authorized parties possessing the decryption key can read the original data. Protocols like HTTPS and SSL/TLS encrypt web traffic end-to-end.

20. Workplace Safety: Ergonomics & Physical Health

Ergonomics is the scientific study of designing and arranging equipment so that people interact with them safely, comfortably, and efficiently, minimizing physical strain and long-term injury.

Workplace Health RiskCausesErgonomic Prevention Guidelines
Repetitive Strain Injury (RSI)Repetitive, rapid keyboard typing and mouse clicking without wrist rest.Keep wrists flat and straight in line with forearms; use wrist pads; avoid pounding keys aggressively.
Back & Neck StrainSlouching, using non-adjustable chairs, monitor placed too low or too high.Use an adjustable chair with lumbar lower-back support; keep thighs parallel to floor; feet flat on floor or footrest; monitor at eye level.
Computer Vision Syndrome (CVS)Staring at bright digital screens for prolonged periods, screen glare, improper lighting.Position screen 18-24 inches away from eyes; avoid glare from windows; follow the 20-20-20 Rule: Every 20 minutes, look at an object 20 feet away for 20 seconds.

21. Slip, Trip, and Fall Hazards Prevention

Slips, trips, and falls account for a majority of office and laboratory accidents. Common prevention guidelines include:

  • Keep computer cables, power cords, and network patch leads neatly bundled inside cable conduits or runners along walls; never leave cords trailing across open walkways.
  • Clean liquid spills immediately and place prominent warning signs ("Caution: Wet Floor").
  • Keep corridors, computer lab aisles, and emergency exits clear of boxes, bags, and loose furniture.
  • Ensure adequate lighting in stairwells, corridors, and computer working zones.
  • Wear sensible, non-slip footwear in laboratory environments.

22. Electrical Safety, Fire Hazards & the PASS Technique

Electrical Safety Rules:

  • Never overload power sockets with multiple high-wattage extension boards.
  • Inspect power cords for cuts, frayed insulation, or exposed copper wires; replace damaged cords immediately.
  • Keep liquids, beverages, and water bottles strictly away from electrical equipment.
  • Switch off and unplug equipment during maintenance or electrical storms.

Fire Safety & Extinguisher Operation (The PASS Technique):

LetterActionDetailed Description
PPullPull the safety pin located at the top of the extinguisher to break the tamper seal.
AAimAim the extinguisher nozzle or hose at the base of the fire, not into the flames.
SSqueezeSqueeze the operating trigger handle slowly and evenly to release the extinguishing agent.
SSweepSweep the nozzle gently from side to side across the base of the fire until it is extinguished.

Note: In an IT lab containing electrical servers, use Class C (CO2) or dry powder fire extinguishers; never pour water on energized electrical fires.

23. First Aid Basics & Emergency Evacuation Procedures

First Aid Principles in Case of Accident or Electrical Shock:

  1. For Electrical Shock: Do NOT touch the victim with bare hands while they are still in contact with the live current. Immediately switch off the main electrical supply or break contact using a dry non-conductive object (such as a wooden broom or dry cloth). Call for immediate medical assistance.
  2. For Minor Burns: Cool the burn under running cold tap water for at least 10-15 minutes. Never apply ice, butter, or oil to burns.
  3. For Bleeding Wounds: Apply firm, steady pressure with a clean sterile bandage to arrest bleeding.

Emergency Evacuation Guidelines:

  • Sound the fire alarm immediately upon noticing smoke or uncontrollable fire.
  • Evacuate calmly through marked emergency exits. Never use elevators (lifts) during a fire; always use staircases.
  • Proceed to the designated external Assembly Point and participate in the roll call.
  • Report all hazards, accidents, and near-misses to the workplace safety officer.

24. Important Terms & Definitions

TermClear Definition
Accessibility OptionsOperating system assistive tools designed to enable individuals with disabilities to use computers effectively.
StickyKeysModifier keys stay active when pressed sequentially to assist users with motor limitations.
FilterKeysIgnores brief or repeated keystrokes caused by involuntary tremors.
Client-ServerA network architecture where centralized servers provide shared services to multiple client workstations.
LANLocal Area Network; connects devices in a localized physical area like a school or building.
WANWide Area Network; connects computers across cities, countries, or globally (e.g., Internet).
Offline Blog EditorDesktop software allowing writers to compose and format blog posts without active internet connectivity.
PhishingFraudulent deceptive emails or clone websites designed to trick victims into revealing sensitive personal credentials.
WormSelf-replicating malware that spreads across computer networks automatically without host file intervention.
FirewallA security barrier filtering incoming and outgoing network traffic based on predetermined security rules.
ErgonomicsThe science of designing equipment and workstations to maximize comfort and minimize physical injury.
PASS TechniqueFour-step method for operating fire extinguishers: Pull, Aim, Squeeze, Sweep.

25. High-Yield Revision Questions and Answers

Very Short Answer Questions (1 Mark Each)

1. What is the shortcut key to activate StickyKeys in Windows?
Press the Shift key five consecutive times.

2. Name the accessibility feature designed to assist people with hearing impairments by providing visual screen warnings.
SoundSentry.

3. Differentiate between Hub and Switch in one line.
A Hub broadcasts incoming data packets to all ports, while a Switch intelligently forwards packets only to the specific intended destination device.

4. Mention two examples of Offline Blog Editors.
Qumana and Windows Live Writer (or BlogDesk).

5. Expand the acronym WiMAX.
Worldwide Interoperability for Microwave Access.

6. What does the 'A' stand for in the PASS fire extinguisher technique?
Aim (Aim at the base of the fire).

Short Answer Questions (2 Marks Each)

1. Differentiate between a Computer Virus and a Computer Worm.
A Computer Virus attaches itself to an executable host file and requires human action (executing the file) to spread and cause damage. A Computer Worm is an independent program that replicates and spreads across networks automatically through security loopholes without attaching to files or requiring human intervention.

2. What is Computer Vision Syndrome (CVS) and how can it be mitigated?
Computer Vision Syndrome is eye strain, dryness, blurred vision, and headache caused by staring continuously at digital screens. It is mitigated by keeping monitors 18-24 inches away, adjusting contrast, and following the 20-20-20 rule (look at an object 20 feet away for 20 seconds every 20 minutes).

3. Explain two precautions that should be observed while performing online financial transactions.
First, ensure the website URL begins with https:// with a closed padlock icon indicating SSL encryption. Second, never perform sensitive banking or shopping transactions over unsecured public Wi-Fi networks or public cyber cafe computers.

4. What is the role of a Firewall in computer security?
A Firewall monitors and filters all incoming and outgoing network traffic based on security policies. It blocks unauthorized access, prevents malicious hackers from establishing remote connections, and prevents infected computers from leaking sensitive data.

Long Answer Questions (4 Marks Each)

1. Explain four keyboard accessibility features available in Windows and identify which category of users benefits from each.
a) StickyKeys: Keeps modifier keys (Shift, Ctrl, Alt, Win) pressed one at a time. Benefits users with physical disabilities or tremors who cannot press multiple keys simultaneously.
b) FilterKeys: Ignores brief, rapid, or repeated keystrokes caused by involuntary tremors, ensuring only intentional keystrokes register.
c) ToggleKeys: Plays high and low audio beeps when locking keys (Caps Lock, Num Lock, Scroll Lock) are turned on or off. Benefits visually impaired users who cannot see LED lights on the keyboard.
d) MouseKeys: Replaces mouse cursor movement and clicking using the numbers on the numeric keypad. Benefits users with hand stiffness or motor difficulty manipulating a physical mouse.

2. Describe the four basic categories of workplace occupational hazards and provide safety recommendations for each.
a) Physical Hazards: Loose wires, slippery floors, and obstructed aisles causing slips and falls. Mitigated by using cable channels and keeping pathways clear.
b) Ergonomic Hazards: Improper chair height, poor posture, and excessive typing causing RSI and chronic backache. Mitigated by using adjustable lumbar chairs, wrist rests, and taking regular stretch breaks.
c) Electrical & Fire Hazards: Socket overloading, frayed cords, and damaged plugs leading to short circuits and fire. Mitigated by installing circuit breakers, avoiding water near electronics, and training on the PASS fire extinguisher technique.
d) Psychological / Stress Hazards: Long working hours, excessive workload, and poor work-life balance. Mitigated by regular breaks, reasonable deadlines, and open workplace communication.