Edexcel GCSE Computer Science (1CP2) exam questions

Build a practice paper from 604 exam-style questions, each with its mark scheme and example answers. Print it, or answer it on paper and then open the mark schemes. Or browse the questions by topic.

Practice paper

4 questions · 11 marks

Pick again

1Short recall1 markSecondary Memory Swap Remove

Data is stored on optical discs as pits and lands.

Name the component in an optical disc drive that reads this data.

[1 mark]

Mark scheme

Award one mark for:

Laser (1)

Allow laser beam

Do not accept read/write head

Do not accept pits

Do not accept lands

Do not accept reflective surface

Do not accept magnet/magnetic

Example answers and how they were marked

Full marks1/1

Laser

Why: Laser is the creditworthy answer (1).

No marks0/1

A read/write head

Why: Read/write head is not accepted by the mark scheme; it reads magnetic media, not optical discs, so no marks are awarded.

No marks0/1

Pits and lands

Why: Pits and lands are what the laser reads, not the component that reads the data, so the mark scheme does not accept them.

2Describe2 marksTranslators Swap Remove

A compiler and an interpreter both translate source code.

Describe one difference between what a compiler produces and what an interpreter produces.

[2 marks]

Mark scheme

Award up to two marks for a linked description such as:

A compiler produces object code/machine code/an executable (file) (1) whereas an interpreter produces no object code/translated file (1)
A compiler produces a machine code file (1) that can be run on its own/without the compiler/translator being present (1)
An interpreter produces no object code/file (1) because it translates and executes each line instead of saving translated code (1)
The compiler's output can be saved/stored (1) and run again later, while interpreted code has to be translated again each time it is run (1)

Allow binary for machine code.

Allow executable/an executable for object code.

Do not accept responses about translating the whole program, reporting errors or the speed of execution.

Do not accept 'the interpreter translates/executes one line at a time' on its own: this is how it translates, not what it produces. It earns the development only when linked to no object code/translated file being produced.

Do not accept the interpreter producing object code/an executable.

Example answers and how they were marked

Full marks2/2

A compiler produces object code, which is saved as a file, whereas an interpreter does not produce a file because it translates and executes each line.

Why: Compiler produces object code (1) contrasted with the interpreter producing no object code/translated file (1).

Some marks1/2

The compiler produces machine code.

Why: Machine code/object code produced (1); there is no contrast with the interpreter, so the development is not earned.

No marks0/2

The interpreter produces object code for each line it translates.

Why: Reverses the translators' outputs: the interpreter produces no object code, so nothing is creditworthy.

3Explain2 marksProtocols & Layers Swap Remove

Two computers exchange data over a network.

Explain why network protocols are needed for the two computers to communicate.

[2 marks]

Mark scheme

Award up to two marks for a linked explanation such as:

Devices (can) understand/interpret the data they receive (1) because they follow the same set of rules for communication (1)
Data is sent in an agreed format/structure (1) so the receiving device can interpret/understand it correctly (1)
Devices (can) connect/communicate successfully (1) because they agree how the data is transmitted, such as the type of signal used (1)
Errors (can) be detected/handled (1) because both devices follow the same rules for checking the data (1)

For both marks, the expansion must follow/associate with the statement.

Do not accept 'so devices can talk/communicate with each other' or 'so they can understand each other' without saying they follow the same rules/agreed format.

Do not accept an answer that only states protocols are a set of rules, without saying what this allows (e.g. the data can be understood/interpreted).

Do not accept a faster connection/speed as a reason why protocols are needed.

Do not accept naming a protocol (e.g. TCP/IP, HTTP, Wi-Fi) without an explanation of why it is needed.

Do not accept a description of what a protocol does (e.g. 'TCP splits data into packets') without saying why this is needed.

Example answers and how they were marked

Full marks2/2

Devices can understand the data they receive (1) because they follow the same set of rules for communication (1).

Why: Linked point (1) and reason (1): following the same rules is what lets the devices understand the data.

Some marks1/2

Data is sent in an agreed format (1).

Why: Point (1) identified, but no linked reason saying what the agreed format achieves.

No marks0/2

Protocols are needed so the connection is faster (0) because more data can be sent at once.

Why: Speed is not a reason protocols are needed, so there is no creditworthy point or linked reason.

4Discuss6 marksUtility Software Swap Remove

A charity has 15 laptops used by staff and volunteers. Staff often download files from the internet and open email attachments. The charity's manager is considering installing anti-malware software on every laptop.

Discuss the use of anti-malware software to protect the charity's computers.

Your answer should consider:

how malware could affect the charity's computers
how anti-malware software finds and deals with malware
what else the charity must do for the anti-malware software to be effective

[6 marks]

Mark scheme

Indicative content

How malware could affect the charity's computers

A virus could damage or delete the charity's files, such as its records of donations.
Spyware could record keystrokes and send staff passwords or personal data to a hacker.
A Trojan horse could hide malicious code inside a useful-looking program that a volunteer downloads, so it is installed without the user knowing.
Malware could spread from one laptop to another through files shared on the charity's network, so more laptops become infected and more files are lost.

How anti-malware software finds and deals with malware

It scans files and compares their code with a database of known malware patterns (signatures) to identify a match.
It can apply rules (heuristics) to decide whether a program is behaving suspiciously.
A suspicious file can be run in a sandbox to see whether its behaviour is malicious.
When malware is found, the file is quarantined so that it cannot run, and it can be deleted.
Downloads and email attachments can be scanned before a member of staff opens them.

What else the charity must do for the anti-malware software to be effective

The database of malware definitions must be kept up to date, or new malware will not be recognised.
Staff and volunteers should be trained not to open unexpected attachments or download from unreliable sites.
Backups are still needed, because anti-malware cannot repair files that malware has already damaged.
Scheduled scans must be allowed to run on all 15 laptops, so that malware is found even if no one opens the file.

Levels

Level 0 (0 marks): No rewardable content.
Level 1 (1–2 marks): Basic, independent points are made, showing elements of understanding of key concepts/principles of computer science. (AO1) The discussion will contain basic information with little linkage between points made or application to the context. (AO2)
Level 2 (3–4 marks): Demonstrates adequate understanding of key concepts/principles of computer science. (AO1) The discussion shows some linkages and lines of reasoning with some structure and application to the context. (AO2)
Level 3 (5–6 marks): Demonstrates comprehensive understanding of key concepts/principles of computer science to support the discussion being presented. (AO1) The discussion is well developed, with sustained lines of reasoning that are coherent and logically structured, and which clearly apply to the context. (AO2)

Level 3 responses must cover both how malware could affect the computers and how anti-malware software finds or deals with it; a brief deal-with point and an unexplained update point, with no identification method and no effect on the charity's files, are Level 1.

Do not accept anti-malware software described as a firewall, or 'scans files'/'finds viruses' on its own as a method of identifying malware.

Example answers and how they were marked

Full marks6/6

A virus could spread through the files the volunteers download and delete the charity's donation records, and spyware could record staff keystrokes and send passwords to a hacker. The anti-malware software would scan each laptop, including downloaded files and email attachments, and compare their code with a database of known malware patterns. If a match is found, the file is quarantined so that it cannot run, and it can then be deleted, so one infected laptop is less likely to pass malware to the other 14. The database of definitions must be kept up to date, because new malware will not be recognised by an old database. The manager should also train staff not to open unexpected attachments, and keep backups, because anti-malware cannot repair files that have already been damaged.

Why: Level 3: the effects of a virus and spyware are applied to the charity's laptops and records, and signature comparison, quarantine and deletion are explained and linked to stopping the spread (AO1/AO2), with accurate limits on what the software can do.

Some marks2/6

The anti-malware software scans the laptops and finds viruses. When it finds one it deletes the file so the laptop is safe. The charity should keep the software updated.

Why: Level 1 (2 marks): basic, independent points are made — deleting the infected file and keeping the software updated — but there is no identification method (signatures, heuristics or a sandbox), no explanation of how malware could affect the charity, and little linkage or application.

No marks0/6

The anti-malware software is a firewall that stops hackers getting into the laptops from the internet, and it scans the files for viruses.

Why: Level 0: describing anti-malware as a firewall is a misconception and is not credited, and bare 'scans the files for viruses' is not accepted on its own as a method of identifying malware, so there is no rewardable content.

Edexcel GCSE Computer Science (1CP2) Exam Questions

Build a paper

Practice paper

Questions by topic

2.1 Binary

2.2 Data representation

2.3 Data storage and compression

3.1 Hardware

3.2 Software

3.3 Programming languages

4.1 Networks

4.2 Network security

5.1 Environmental

5.2 Ethical and legal

More ways to revise Edexcel GCSE Computer Science (1CP2)