Edexcel GCSE Computer Science (1CP2) Exam Questions

Award up to two marks for a linked description such as:

• Parts of a file are moved so they are stored together/in consecutive locations (1) so the read/write head has less distance to travel to read the file (1)
• Files are rearranged so that each file is stored in one block (1) which reduces the time taken to open/load the file (1)
• Free space on the disk is collected into one area (1) so new files can be saved without becoming fragmented (1)
• The parts of each fragmented file are put in order (1) so fewer movements of the read/write head are needed to read it (1)

Do not accept responses about compressing files, deleting files or increasing the amount of storage, as these are not what defragmentation software does.

Do not accept 'it makes the disk faster' without saying how the files are changed.

Award up to two marks for a linked explanation such as:

• It allows the operating system/OS to communicate with the device/printer (1) because it translates the commands into signals the device understands (1)
• It contains/sends the instructions/commands needed by a particular device (1) so the device carries out the correct actions (1)
• It controls the device/printer (1) by sending commands/signals to it (1)
• Different devices need different commands (1) so each one needs its own driver to work with the operating system (1)

For both marks, the expansion must follow/associate with the statement.

Do not accept 'it drives/controls the device' on its own without saying how, e.g. by sending commands/signals.

Do not accept hardware/a physical device (a device driver is software).

Do not accept 'it connects the printer to the computer' or 'it installs the printer' without saying that it provides the instructions/commands for the device.

Award up to two marks for a linked explanation such as:

• The operating system uses the printer's device driver to communicate with the printer (1) so the print job is sent as commands the printer can carry out (1)
• The operating system holds print jobs in a queue/buffer (1) because the computer sends data faster than the printer can print it (1)
• The operating system reports the printer's status to the user (1) so the user knows what to do when there is a problem such as the paper running out (1)
• The operating system handles interrupts/signals from the printer (1) so a problem such as a paper jam is dealt with while other programs carry on running (1)

For both marks, the expansion must follow/associate with the statement.

Allow a point about the operating system loading/installing the device driver for a new printer (1) provided the second mark gives a reason that is not the same as the driver communication point, e.g. so the new printer can be used/controlled by the operating system (1)

Award 1 mark for stating that print jobs are held in a queue/a buffer; the second mark needs the linked reason that the printer prints more slowly than data is sent.

Do not accept restating the question, e.g. 'it manages the printer' or 'it controls the peripherals', without saying how or why.

Do not accept 'it lets the printer connect to the computer' or 'it stops the printer being damaged' without a linked reason.

Do not accept 'it makes the printer print faster' as the operating system cannot increase the printer's speed.

Indicative content

How malware could affect the charity's computers

• A virus could damage or delete the charity's files, such as its records of donations.
• Spyware could record keystrokes and send staff passwords or personal data to a hacker.
• A Trojan horse could hide malicious code inside a useful-looking program that a volunteer downloads, so it is installed without the user knowing.
• Malware could spread from one laptop to another through files shared on the charity's network, so more laptops become infected and more files are lost.

How anti-malware software finds and deals with malware

• It scans files and compares their code with a database of known malware patterns (signatures) to identify a match.
• It can apply rules (heuristics) to decide whether a program is behaving suspiciously.
• A suspicious file can be run in a sandbox to see whether its behaviour is malicious.
• When malware is found, the file is quarantined so that it cannot run, and it can be deleted.
• Downloads and email attachments can be scanned before a member of staff opens them.

What else the charity must do for the anti-malware software to be effective

• The database of malware definitions must be kept up to date, or new malware will not be recognised.
• Staff and volunteers should be trained not to open unexpected attachments or download from unreliable sites.
• Backups are still needed, because anti-malware cannot repair files that malware has already damaged.
• Scheduled scans must be allowed to run on all 15 laptops, so that malware is found even if no one opens the file.

Levels

• Level 0 (0 marks): No rewardable content.
• Level 1 (1–2 marks): Basic, independent points are made, showing elements of understanding of key concepts/principles of computer science. (AO1) The discussion will contain basic information with little linkage between points made or application to the context. (AO2)
• Level 2 (3–4 marks): Demonstrates adequate understanding of key concepts/principles of computer science. (AO1) The discussion shows some linkages and lines of reasoning with some structure and application to the context. (AO2)
• Level 3 (5–6 marks): Demonstrates comprehensive understanding of key concepts/principles of computer science to support the discussion being presented. (AO1) The discussion is well developed, with sustained lines of reasoning that are coherent and logically structured, and which clearly apply to the context. (AO2)

Level 3 responses must cover both how malware could affect the computers and how anti-malware software finds or deals with it; a brief deal-with point and an unexplained update point, with no identification method and no effect on the charity's files, are Level 1.

Do not accept anti-malware software described as a firewall, or 'scans files'/'finds viruses' on its own as a method of identifying malware.