Study guide · 7.3

Be aware of data-collection technology

Websites, apps and devices collect data about what you do, often to personalize services or show advertising. This guide explains how tracking works, the risks it brings, the risks of data stored on your devices and what private browsing does and does not do.

A study feature written by ExamDragon, not part of the real exam. Each heading is one of Certiport's skills for this objective.

7.3.1Describe how navigation tracking works

Cookies are small files a site stores in your browser; first-party cookies come from the site you visit, third-party cookies from other companies such as advertisers on that page.
Tracking pixels and scripts embedded in pages and emails report when you view them.
Browser fingerprinting identifies a browser by its settings, such as screen size, fonts and version, even without cookies.
Your IP address shows your approximate location to the sites you visit.
When you are signed in, services link your searches and activity to your account; apps can also track location and usage.
Collected data builds a profile used for personalized content and targeted ads.

Example: You look at running shoes on one shop's website, and later the same shoes appear in ads on a news site, because a third-party tracker recognized your browser.

7.3.2Describe security concerns related to navigation tracking

Profiles can reveal sensitive details such as health interests, location patterns, beliefs or finances.
Data is often shared with or sold to third parties you never dealt with directly.
Companies holding tracking data can be breached, exposing it to criminals.
Location tracking can show where you live, work and travel, which can affect personal safety.
Detailed profiles make phishing and scams more convincing.
Reduce tracking: review cookie choices, block third-party cookies, limit app permissions, turn off ad personalization and use privacy features in the browser.

Example: A fitness app shares running routes publicly by default, revealing the user's home address; changing the privacy setting to private fixes it.

7.3.3Describe security concerns related to storing information on a device

Devices store saved passwords, photos, messages, documents, browsing data and signed-in sessions.
If a device is lost or stolen without a lock, all of this can be read.
Shared or public computers may keep your files, downloads and sign-ins for the next user.
Old devices that are sold or thrown away can still hold recoverable data unless they are properly erased with a factory reset.
Protect stored data with a screen lock, encryption (such as BitLocker, FileVault, or the built-in encryption on modern phones), updates and backups.
Malware on a device can read stored information, so install software only from trusted sources.

Example: Before selling an old phone, you back it up, sign out of all accounts, then do a factory reset so the buyer cannot see your photos or messages.

7.3.4Describe the benefits of private mode browsing

Private mode is called Incognito in Chrome, InPrivate in Edge and Private Browsing in Firefox and Safari.
It does not save your browsing history, cookies or form data on the device after you close the private window.
It is useful on shared or borrowed devices and for signing in to a second account without signing out of the first.
It does not make you anonymous: websites, your school or employer network and your internet provider can still see your activity.
It does not protect against malware or phishing, and files you download and bookmarks you create stay on the device.

Example: On a friend's laptop you open an Incognito window to check your email, so when you close it your sign-in and history are not left behind.

Key terms

Third-party cookie: A cookie set by a company other than the site you are visiting.
Tracking: Recording a person's online activity across time or sites.
Fingerprinting: Identifying a browser by its unique combination of settings.
Private browsing: A browser mode that does not keep history or cookies after closing.
Factory reset: Restoring a device to its original state and erasing user data.
Encryption: Scrambling data so only someone with the key can read it.

Easy to confuse

Believing private or Incognito mode hides your activity from websites, employers or internet providers.
Thinking deleting files is enough before selling a device; a factory reset is needed.
Assuming tracking only happens through cookies; fingerprinting and sign-ins also track.
Accepting all cookies and app permissions without reading the choices.

After this guide: You should be able to explain how tracking works, list its risks and the risks of stored data, and state what private browsing does and does not protect.