2. Inflation over two years will be:

$$
\left((1+0.015)^{\wedge} 2-1\right)^{*} 100 \% = 3.0225 \%
$$

The real return on a bank deposit, taking into account the extension for the second year, will be $(1.07 * 1.07 /(1+0.030225)-1) * 100 \% = 11.13 \%$

## Evaluation Criteria:

A maximum of 25 points for a correct and justified solution. Of these:

2 points for the correct calculation of the investment amount.

5 points for the correct calculation of the nominal income from the bank deposit. If this value was calculated incorrectly, the participant could receive points for the following steps in the solution:

- 3 points for calculating the amount the family can withdraw after closing the deposit, taking into account its extension for the second year.
- 1 point for calculating the amount the family can withdraw after closing the deposit, without correctly accounting for its extension for the second year.

7 points for the correct calculation of the expected income from investment in construction. If this value was calculated incorrectly, the participant could receive points for the following steps in the solution:

- a maximum of 2 points for conceptually incorrect consideration of the probabilities of different outcomes.
- 2 points for correctly accounting for the 13% income tax.

1 point for the correct choice of investment method. If the correct choice was made based on incorrect calculations of income in any of the investment options, the participant did not receive a point for this part of the solution.

10 points for the correct calculation of profitability. If this value was calculated incorrectly, the participant could receive points for the following steps in the solution:

- 4 points for a logically correct method of calculating profitability in %, provided that the actual income was calculated incorrectly.
- 8 points for calculating profitability in % as the difference between nominal profitability and inflation over 2 years, provided that nominal profitability was calculated correctly.
- 1 point for incorrect accounting of inflation over two years.

If the entire logic of the calculations is correct, but the participant makes only arithmetic errors, then -1 point for each such error.

## Problem 5

In the modern world, there are black and white ${ }^{1}$ hackers. Black hackers break into computer systems and steal our money, while white hackers, on the contrary, stand up for our interests and test computer infrastructure for vulnerabilities. Imagine yourself as a white hacker testing the security systems of a large commercial bank. Describe how you would conduct testing for the possibility of hacking the following objects of the banking infrastructure (no less than $2 x$ existing methods for each object):

- ATMs;
- online banking;
- central automated banking system.

${ }^{1}$ White hacker (ethical hacker) - a computer security specialist who specializes in testing the security of computer systems.
# Solution:

Possible scenarios:

- ATMs - skimming (installation of an overlay keyboard and card reader), shimming (installation of an intercepting scheme in the card reader), microcameras (to record the PIN code), physical theft of ATMs, hacking the ATM management system.
- Online banking - hacking the bank's website and installing malicious scripts to alter transaction data, hacking the user's laptop and installing malware to intercept login and password, creating phishing (fake) websites and redirecting online banking users to them.
- Hacking the bank's infrastructure by sending phishing (fake) emails with malicious attachments to bank operators, system administrators, and other employees. Scattering USB drives with malicious files in the parking lot near the bank. Hacking the bank's wireless networks to gain access to the internal infrastructure. Getting a job at the bank to familiarize oneself with their technological processes. Setting up backdoors, unauthorized remote access, and more.

## Evaluation Criteria:

A maximum of 15 points for a correct and justified solution. Points are awarded for arguments that carry meaningful content relevant to the task and do not contradict logic:

15 points - 6 or more approaches (to protection or analysis, depending on the variant) are described in detail, close to the examples.

13 points - 6 or more approaches (to protection or analysis, depending on the variant) are described in detail, close to the examples, but there are inaccuracies. 10 points - 4-6 approaches (to protection or analysis, depending on the variant) are briefly described, the proposed measures differ significantly from the examples.

8 points - 3 approaches (to protection or analysis, depending on the variant) are described in detail, close to the examples.

5 points - 1-3 approaches are provided, without detail.

The main error participants made when solving this task was describing what security objects should be like instead of answering the question of how to test the possibility of hacking objects of the banking infrastructure. If this error was made, no points were awarded to the participant.

## Appendix to Task No. 1

## Glossary:

Insurance is a system of relationships between insurers (insurance company) and insured individuals (e.g., any citizen) that allows for the reduction of property risks by insuring, for example, property against possible adverse events...

The most common understanding of an insurance risk is:

- the danger that threatens the insured object (the type of insurer's liability)
- the possibility, probability of an insurance event (incident) occurring, as provided for in the insurance (the magnitude of the danger);
- the event or set of events for which insurance is provided and for which the insurer must pay insurance compensation upon occurrence;
- the insured object itself (structure, cargo, etc.);
- the amount of the insurer's liability under the insurance contract.

Excerpts from Article 10 of the Law of the Russian Federation dated November 27, 1992 No. 4015-1 (as amended on August 3, 2018) "On the Organization of Insurance Activities in the Russian Federation")