Edexcel GCSE Computer Science (1CP2) Exam Questions

Award one mark for any of the following up to a maximum of two marks:

• Manages user accounts/profiles/logins (1)
• Authenticates users when they log in (through passwords/biometrics) (1)
• Controls what each user is allowed to access (access rights/permissions) (1)
• Sets which files/folders/resources a user can use (1)
• Gives different levels of access to different users (e.g. administrator/standard user) (1)

Allow 'decides which users can use the computer' for the manage user accounts/logins mark.

Allow references to access to files/folders/resources for the access rights mark, as this is part of user management, not file management.

Do not accept 'manages users' on its own.

Do not accept 'controls user access' on its own, as it is unclear whether this means logging in or access rights.

Do not accept 'manages files' or 'manages peripherals' (these are other operating system functions).

Award up to two marks for a linked description such as:

• It keeps a record of which memory addresses/areas belong to each program and to the operating system (1) so it knows which addresses a program is allowed to use (1)
• Each program is given its own area of main memory (1) so a program cannot write to the addresses used by another program or by the operating system (1)
• The memory used by the operating system is marked as protected/reserved (1) so a program that tries to write to it is blocked/causes an error (1)
• The address a program writes to is checked against the record of its allocated area (1) and the write is stopped if the address is outside that area (1)

Allow the memory being protected to be that of the operating system or of another program.

For both marks, the expansion must follow/associate with the statement.

Do not award generic answers such as 'the operating system manages memory' or 'the operating system keeps track of memory'.

Do not award responses about stopping programs using too much memory or allocating memory, as these are not about protecting memory being overwritten.

Do not award responses about virtual memory, paging or moving processes to secondary storage.

Do not award responses about firewalls, antivirus software or passwords.

Award up to two marks for a linked description such as:

• A storage limit/quota is set for each user account (1) so the drive is shared fairly between users (1)
• The operating system records how much space each user's files are using (1) and refuses to save more files when the limit is reached (1)
• Each user is given a fixed share/quota of the drive (1) so one user cannot use the space set aside for another (1)

Allow a limit set by an administrator or through the operating system's user management settings; an administrator is not required for credit.

Allow a warning that stops the save; do not award the development for a warning alone where the save is not stopped.

Do not accept responses about passwords/authentication, keeping files separate/folders with no storage limit, deleting old files, compressing files, or buying a larger drive.

Do not accept 'the operating system gives the user a bigger hard drive'.

Do not accept a single global limit for all users; the limit must apply to each user/user account.

Award up to two marks for a linked explanation such as:

• It allows the operating system/OS to communicate with the device/printer (1) because it translates the commands into signals the device understands (1)
• It contains/sends the instructions/commands needed by a particular device (1) so the device carries out the correct actions (1)
• It controls the device/printer (1) by sending commands/signals to it (1)
• Different devices need different commands (1) so each one needs its own driver to work with the operating system (1)

For both marks, the expansion must follow/associate with the statement.

Do not accept 'it drives/controls the device' on its own without saying how, e.g. by sending commands/signals.

Do not accept hardware/a physical device (a device driver is software).

Do not accept 'it connects the printer to the computer' or 'it installs the printer' without saying that it provides the instructions/commands for the device.

Indicative content

How malware could affect the charity's computers

• A virus could damage or delete the charity's files, such as its records of donations.
• Spyware could record keystrokes and send staff passwords or personal data to a hacker.
• A Trojan horse could hide malicious code inside a useful-looking program that a volunteer downloads, so it is installed without the user knowing.
• Malware could spread from one laptop to another through files shared on the charity's network, so more laptops become infected and more files are lost.

How anti-malware software finds and deals with malware

• It scans files and compares their code with a database of known malware patterns (signatures) to identify a match.
• It can apply rules (heuristics) to decide whether a program is behaving suspiciously.
• A suspicious file can be run in a sandbox to see whether its behaviour is malicious.
• When malware is found, the file is quarantined so that it cannot run, and it can be deleted.
• Downloads and email attachments can be scanned before a member of staff opens them.

What else the charity must do for the anti-malware software to be effective

• The database of malware definitions must be kept up to date, or new malware will not be recognised.
• Staff and volunteers should be trained not to open unexpected attachments or download from unreliable sites.
• Backups are still needed, because anti-malware cannot repair files that malware has already damaged.
• Scheduled scans must be allowed to run on all 15 laptops, so that malware is found even if no one opens the file.

Levels

• Level 0 (0 marks): No rewardable content.
• Level 1 (1–2 marks): Basic, independent points are made, showing elements of understanding of key concepts/principles of computer science. (AO1) The discussion will contain basic information with little linkage between points made or application to the context. (AO2)
• Level 2 (3–4 marks): Demonstrates adequate understanding of key concepts/principles of computer science. (AO1) The discussion shows some linkages and lines of reasoning with some structure and application to the context. (AO2)
• Level 3 (5–6 marks): Demonstrates comprehensive understanding of key concepts/principles of computer science to support the discussion being presented. (AO1) The discussion is well developed, with sustained lines of reasoning that are coherent and logically structured, and which clearly apply to the context. (AO2)

Level 3 responses must cover both how malware could affect the computers and how anti-malware software finds or deals with it; a brief deal-with point and an unexplained update point, with no identification method and no effect on the charity's files, are Level 1.

Do not accept anti-malware software described as a firewall, or 'scans files'/'finds viruses' on its own as a method of identifying malware.