Edexcel GCSE Computer Science (1CP2) Exam Questions

Award up to two marks for a linked description such as:

• The program (and its data) is copied/loaded from secondary storage into main memory/RAM (1) so that the CPU can fetch/execute its instructions (1)
• An area of main memory is allocated/reserved for the program (1) that is large enough to hold the program and its data (1)
• The operating system checks that there is enough free main memory (1) before the program can be started/loaded, otherwise it cannot run/an error is reported (1)
• The operating system keeps a record of the memory addresses used by the program (1) so that its instructions and data can be found when it runs (1)

Allow 'loaded into RAM', 'stored in memory' and 'put into main memory' as equivalent to copied into main memory.

A single statement that the program is loaded/stored in main memory, with no linked development, can be given one mark only.

Do not accept descriptions of the CPU fetching/executing instructions that do not refer to the operating system loading or allocating memory.

Do not accept responses about virtual memory (moving processes to secondary storage) or about which process runs next on the CPU.

Do not accept the program being run from secondary storage/hard disk.

Award up to two marks for a linked description such as:

• A compiler produces object code/machine code/an executable (file) (1) whereas an interpreter produces no object code/translated file (1)
• A compiler produces a machine code file (1) that can be run on its own/without the compiler/translator being present (1)
• An interpreter produces no object code/file (1) because it translates and executes each line instead of saving translated code (1)
• The compiler's output can be saved/stored (1) and run again later, while interpreted code has to be translated again each time it is run (1)

Allow binary for machine code.

Allow executable/an executable for object code.

Do not accept responses about translating the whole program, reporting errors or the speed of execution.

Do not accept 'the interpreter translates/executes one line at a time' on its own: this is how it translates, not what it produces. It earns the development only when linked to no object code/translated file being produced.

Do not accept the interpreter producing object code/an executable.

Indicative content

How malware could affect the charity's computers

• A virus could damage or delete the charity's files, such as its records of donations.
• Spyware could record keystrokes and send staff passwords or personal data to a hacker.
• A Trojan horse could hide malicious code inside a useful-looking program that a volunteer downloads, so it is installed without the user knowing.
• Malware could spread from one laptop to another through files shared on the charity's network, so more laptops become infected and more files are lost.

How anti-malware software finds and deals with malware

• It scans files and compares their code with a database of known malware patterns (signatures) to identify a match.
• It can apply rules (heuristics) to decide whether a program is behaving suspiciously.
• A suspicious file can be run in a sandbox to see whether its behaviour is malicious.
• When malware is found, the file is quarantined so that it cannot run, and it can be deleted.
• Downloads and email attachments can be scanned before a member of staff opens them.

What else the charity must do for the anti-malware software to be effective

• The database of malware definitions must be kept up to date, or new malware will not be recognised.
• Staff and volunteers should be trained not to open unexpected attachments or download from unreliable sites.
• Backups are still needed, because anti-malware cannot repair files that malware has already damaged.
• Scheduled scans must be allowed to run on all 15 laptops, so that malware is found even if no one opens the file.

Levels

• Level 0 (0 marks): No rewardable content.
• Level 1 (1–2 marks): Basic, independent points are made, showing elements of understanding of key concepts/principles of computer science. (AO1) The discussion will contain basic information with little linkage between points made or application to the context. (AO2)
• Level 2 (3–4 marks): Demonstrates adequate understanding of key concepts/principles of computer science. (AO1) The discussion shows some linkages and lines of reasoning with some structure and application to the context. (AO2)
• Level 3 (5–6 marks): Demonstrates comprehensive understanding of key concepts/principles of computer science to support the discussion being presented. (AO1) The discussion is well developed, with sustained lines of reasoning that are coherent and logically structured, and which clearly apply to the context. (AO2)

Level 3 responses must cover both how malware could affect the computers and how anti-malware software finds or deals with it; a brief deal-with point and an unexplained update point, with no identification method and no effect on the charity's files, are Level 1.

Do not accept anti-malware software described as a firewall, or 'scans files'/'finds viruses' on its own as a method of identifying malware.