User Management Exam Questions

• A Access rights (1)
• The only correct answer is A. The correct answer is access rights.
• B is not correct because file management is an operating system function that organises files and folders, not a user management feature
• C is not correct because process management is an operating system function that runs programs, not a user management feature
• D is not correct because a user profile stores a user's settings and preferences, not their file permissions

• B User authentication (1)
• The only correct answer is B. The correct answer is user authentication.
• A is not correct because access rights control which files or resources a logged-in user may use, not whether the login details are correct
• C is not correct because a user profile stores a user's settings, such as their desktop and preferences
• D is not correct because a username identifies which user is logging in but does not check the password

• B Create a new user account (1)
• The only correct answer is B. The correct answer is create a new user account.
• A is not correct because a standard user can change their own wallpaper
• C is not correct because a standard user can open their own files
• D is not correct because a standard user can set their own password

• C User profiles (1)
• The only correct answer is C. The correct answer is user profiles.
• A is not correct because access rights control what a user is allowed to do with files and folders
• B is not correct because file management organises files and folders, it does not store settings for each user
• D is not correct because user authentication checks a user's identity when they log in

Award one mark for any of the following up to a maximum of two marks:

• Manages user accounts/profiles/logins (1)
• Authenticates users when they log in (through passwords/biometrics) (1)
• Controls what each user is allowed to access (access rights/permissions) (1)
• Sets which files/folders/resources a user can use (1)
• Gives different levels of access to different users (e.g. administrator/standard user) (1)

Allow 'decides which users can use the computer' for the manage user accounts/logins mark.

Allow references to access to files/folders/resources for the access rights mark, as this is part of user management, not file management.

Do not accept 'manages users' on its own.

Do not accept 'controls user access' on its own, as it is unclear whether this means logging in or access rights.

Do not accept 'manages files' or 'manages peripherals' (these are other operating system functions).

Award one mark for any of the following up to a maximum of two marks:

• Fingerprint scan (1)
• Face recognition (1)
• Iris/retina scan (1)
• Voice recognition (1)
• Palm print/vein scan (1)
• Smart card (1)
• Security token (1)
• Authenticator app (1)

Allow one-time passcode (OTP) for authenticator app.

Do not accept password (given in the question).

Do not accept username/user ID (it identifies the user but does not authenticate them).

Do not accept 'two-factor authentication' on its own (it is a combination of methods, not a method itself).

Do not accept 'encryption'.

Award one mark for any of the following up to a maximum of two marks:

• Read/view (1)
• Write/edit/modify (1)
• Execute/run (1)
• Delete (1)

Allow 'read only' for read.

Treat write/edit/modify as one right only.

Do not accept 'open' or 'access' on its own.

Do not accept usernames/passwords (these are authentication, not file access rights).

Award up to two marks for a linked description such as:

• The user enters a username/user ID and password/PIN (1) which is compared with the account details the operating system has stored (1)
• The operating system keeps a file/list/database of users and their passwords (1) to check the login details the user enters against (1)
• The operating system compares the entered details with the details stored for that user (1) and if they do not match, access is refused/denied (1)
• The entered details are checked against the access rights stored for that user (1) so access is only allowed when the details are correct (1)

Do not award for 'it asks for a password' on its own, without saying what the password is checked against.

A stored list/file of users and passwords with no check of the login details earns one mark only.

Do not accept responses about file management, such as finding or opening the user's files.

Award up to two marks for a linked description such as:

• Each user/file is given permissions/access rights (1) so other users cannot read/write/open/change that user's files (1)
• A user may be given read-only/read access to a file (1) so they cannot edit/delete/change it (1)
• Each file is given permissions/access rights for different users (1) so the operating system allows/refuses access depending on which user is logged in (1)
• The operating system checks a user's permissions/access rights when a file is opened (1) so a user with read-only/read access cannot save/delete changes (1)

Do not accept responses about asking for a password/username, as this checks who the user is, not what they are allowed to do.

Do not accept 'files are protected/safe' or 'access rights protect files' without saying how access is limited (e.g. read-only access, permissions for different users).

Award up to two marks for a linked description such as:

• A storage limit/quota is set for each user account (1) so the drive is shared fairly between users (1)
• The operating system records how much space each user's files are using (1) and refuses to save more files when the limit is reached (1)
• Each user is given a fixed share/quota of the drive (1) so one user cannot use the space set aside for another (1)

Allow a limit set by an administrator or through the operating system's user management settings; an administrator is not required for credit.

Allow a warning that stops the save; do not award the development for a warning alone where the save is not stopped.

Do not accept responses about passwords/authentication, keeping files separate/folders with no storage limit, deleting old files, compressing files, or buying a larger drive.

Do not accept 'the operating system gives the user a bigger hard drive'.

Do not accept a single global limit for all users; the limit must apply to each user/user account.

Award up to two marks for a linked description such as:

• Each teacher can keep their own files/desktop separate (1) so other teachers cannot see or change their work (1)
• Each teacher's work is saved under their own account (1) so they can find their files easily when they log in (1)
• The operating system knows which teacher is logged in (1) so it can apply the right access rights to that person (1)
• Each teacher can set up their own desktop/settings (1) so the laptop is set up the way they like to work (1)

Do not accept responses about the laptop running faster or having more storage because it has more accounts.

Do not accept 'so they can log in' without saying why having separate accounts helps.

Award up to two marks for a linked explanation such as:

• Each student's files/work are kept separate (1) because the operating system checks the access rights of the user who is logged in, so other students cannot open/see/change/delete them (1)
• A student's own settings/desktop are loaded when they log in (1) because the operating system stores settings for each user account (1)
• Students cannot install software or change system settings (1) because their user account does not have administrator privileges (1)

For both marks, the expansion must follow/associate with the statement.

Award 1 mark for a correct point on its own, even if no linked reason is given.

Allow answers about personal settings/desktop/wallpaper being saved/loaded for that user.

Allow answers about a standard user account not having administrator privileges.

Do not accept 'so they can log in' on its own, because logging in is what the user account is for.

Do not accept 'so they can save files/work' on its own without saying other students cannot access their files.

Do not accept 'so the computer is secure' without saying what is protected or who is kept out.

Do not accept answers about stopping viruses or making the computer run faster.

Award up to two marks for a linked explanation such as:

• People who should not use the computer are kept out (1) because the operating system only allows access when the password matches the one stored for that username (1)
• The operating system can identify the user who is logging in (1) so it can load the correct account for that person (1)
• Access to the computer is controlled (1) because each user must enter their own username and password before the operating system lets them continue (1)
• Each user has a different password (1) so one user cannot log in as another user (1)

For both marks, the expansion must follow/associate with the statement.

Do not accept 'it keeps the computer safe/secure' without saying who is kept out or what they cannot do.

Do not accept 'it stops hackers' or 'it stops viruses' on its own; the answer must say that the username and password are checked before access is allowed.

Award up to two marks for a linked explanation such as:

• Only employees who need to change the file can do so (1) so it cannot be changed/deleted by mistake by other employees (1)
• Most employees can only read the file (1) so the information in it stays correct/unchanged (1)
• Some employees are not allowed to open the file at all (1) because the information is only for certain staff (1)
• The operating system checks the access rights of the logged-in user (1) before allowing the file to be opened or changed (1)

For both marks, the expansion must follow/associate with the statement.

Do not accept 'so it is more secure' or 'to keep it safe' without saying what is protected or from whom.

Do not accept answers about limiting how much storage each user can use, as this is resource allocation, not access to a file.

Award up to two marks for a linked explanation such as:

• One user cannot fill the whole server with their files (1) so there is still space for other users to save their work (1)
• Each user is given a fair share of the storage (1) so every user can save the files they need (1)
• The administrator can change the storage limit for one user (1) so a user who needs more space can be given it without affecting other users (1)

For both marks, the expansion must follow/associate with the statement.

Allow answers about keeping the server's storage available for all users for the first mark if the benefit to other users is then given.

Do not accept 'saves space', 'stops the server filling up' or 'stops users filling storage' on its own without saying whose space is protected.

Do not accept 'it makes the computer faster' or 'it stops viruses' without a link to sharing storage between users.

Do not accept answers about stopping users opening/editing each other's files, as this is access rights, not a storage limit.

Do not award answers about managing storage in general (e.g. deleting temporary files, defragmentation) as these are not about user management.

Award one mark for any of the following up to a maximum of three marks:

• Storage space/disk space/disk quota (1)
• Printer/printing (1)
• Processor time/CPU time (1)
• Memory/RAM (1)
• Internet/network access/bandwidth (1)
• Removable media/USB drives (1)
• Software/applications/programs (including the ability to install programs) (1)

Allow 'access to removable media/USB drives'.

Do not accept 'files' or 'folders' on their own.

Do not accept 'passwords' or 'usernames'.

Do not accept 'hardware' on its own.

Indicative content

User accounts

• Each student and teacher should have their own user account, so the operating system can identify the person who is logged on.
• The operating system keeps a record of all valid users on the computer, so unknown users are not allowed to log in.
• A separate home area or folder can be created for each account, so a student's saved work is kept apart from other users' work.
• An account can be disabled when a student leaves the school, so they can no longer access the computers.

Authentication

• A username and password can be required at login, so only users with the correct details can use the computer.
• The operating system checks the entered password against the stored password for that account before allowing access.
• Users should be encouraged to choose a strong password, which makes it harder for someone else to guess and log in.
• The operating system can lock an account after several failed login attempts, which reduces the chance of someone trying passwords repeatedly.

Benefits for the school

• Many students can share the same computers because each person's files are kept separate.
• Work is less likely to be deleted or changed by another student, because users only see their own files.
• The school can see which account was used on a computer, so misuse can be traced to a user.
• Teachers can be confident that only authorised people can use the library computers.
• The school does not need a separate computer for every student, so it saves money.

Levels

• Level 0 (0 marks): No rewardable content.
• Level 1 (1–2 marks): Basic, independent points are made, showing elements of understanding of key concepts/principles of computer science. (AO1) The discussion will contain basic information with little linkage between points made or application to the context. (AO2)
• Level 2 (3–4 marks): Demonstrates adequate understanding of key concepts/principles of computer science. (AO1) The discussion shows some linkages and lines of reasoning with some structure and application to the context. (AO2)
• Level 3 (5–6 marks): Demonstrates comprehensive understanding of key concepts/principles of computer science to support the discussion being presented. (AO1) The discussion is well developed, with sustained lines of reasoning that are coherent and logically structured, and which clearly apply to the context. (AO2)

Level 3 responses must cover both user accounts and authentication, and apply them to the school library.

Do not accept general operating system functions such as file management or process management unless they are explicitly linked to managing users.

Indicative content

Administrator accounts

• An administrator account can create new user accounts for new employees and delete accounts when employees leave.
• The administrator can reset a forgotten password, so an employee can get back to work without sharing another person's account.
• The administrator can set the access rights for each user or group, so designers get access to project folders and only directors can open salary files.
• Administrator privileges should be given to only a few trusted employees, as administrators can change any settings on the system.

Standard user accounts

• Designers should use standard user accounts, so they cannot install unauthorised software or change system settings.
• A standard user can be given permission to read and write files in the project folder that their team uses.
• Standard users should not be able to change other users' permissions, so the access rules cannot be removed by accident.
• If a standard user tries to open a file without permission, the operating system denies access.

File permissions

• Each file or folder can have permissions that allow a user to read, write or delete it.
• Project folders can be set so all designers can read and write the files inside them.
• Salary files can be set so only directors can read them, and other users are denied access.
• Permissions can be set for a group of users, such as all designers, which is quicker than setting them for each person.
• A file can be made read-only for standard users, so they can view it but cannot change it.

Levels

• Level 0 (0 marks): No rewardable content.
• Level 1 (1–2 marks): Basic, independent points are made, showing elements of understanding of key concepts/principles of computer science. (AO1) The discussion will contain basic information with little linkage between points made or application to the context. (AO2)
• Level 2 (3–4 marks): Demonstrates adequate understanding of key concepts/principles of computer science. (AO1) The discussion shows some linkages and lines of reasoning with some structure and application to the context. (AO2)
• Level 3 (5–6 marks): Demonstrates comprehensive understanding of key concepts/principles of computer science to support the discussion being presented. (AO1) The discussion is well developed, with sustained lines of reasoning that are coherent and logically structured, and which clearly apply to the context. (AO2)

Level 3 responses must cover administrator accounts, standard user accounts and file permissions, and apply them to the design company.

Do not accept general operating system functions such as managing the processor or memory unless they are explicitly linked to controlling what a user can access.