Edexcel GCSE Computer Science (1CP2) Exam Questions

Award one mark for any of the following up to a maximum of two marks:

• An arithmetic operation, e.g. addition/subtraction/multiplication/division (1)
• A logical operation, e.g. comparing two values (is A > B?) / using AND, OR, NOT (1)

Do not accept decoding instructions, fetching instructions or controlling the timing of the CPU, as these are carried out by the control unit.

Award one mark for any of the following up to a maximum of two marks:

• Reduces/makes the size of a file smaller (1)
• No data is lost/removed (during compression) (1)
• The original file/data can be recreated/restored exactly (1)

Allow 'the compressed file takes up less storage space' for the first mark.

The second and third bullets are two ways of making the same point: award a maximum of one mark for them, so a response that says no data is lost and that the original file can be restored, but does not say the file is smaller, scores one mark.

Do not accept descriptions of lossy compression, e.g. 'it removes data that is not needed to make the file smaller'.

Ignore reference to download/transmission times, bandwidth and streaming, as these are benefits of compression and not part of the definition.

Award up to two marks for a linked description such as:

• Instructions can manipulate/control the hardware/memory/registers directly (1) so the driver can control the specific device it is written for (1)
• The code is written for one specific processor/architecture (1) so it works with the exact hardware it will control (1)
• The programmer controls exactly how memory/registers are used (1) so the code is efficient and needs little memory, which suits a device that has limited memory (1)
• Each instruction maps to one machine code instruction (1) so the driver code is small enough to fit in the memory of the device (1)

Extra detail, such as naming the device the driver controls, is not needed to earn the marks.

Do not accept 'it is closer to machine code' on its own: it must be developed to show how this helps the driver, e.g. it can control the hardware directly.

Do not accept 'it is faster/quicker' with no link to the hardware/device, e.g. the device responds quickly.

Do not accept 'it is easier to learn', 'it is easier to debug' or 'it takes less time to write'.

Indicative content

How malware could affect the charity's computers

• A virus could damage or delete the charity's files, such as its records of donations.
• Spyware could record keystrokes and send staff passwords or personal data to a hacker.
• A Trojan horse could hide malicious code inside a useful-looking program that a volunteer downloads, so it is installed without the user knowing.
• Malware could spread from one laptop to another through files shared on the charity's network, so more laptops become infected and more files are lost.

How anti-malware software finds and deals with malware

• It scans files and compares their code with a database of known malware patterns (signatures) to identify a match.
• It can apply rules (heuristics) to decide whether a program is behaving suspiciously.
• A suspicious file can be run in a sandbox to see whether its behaviour is malicious.
• When malware is found, the file is quarantined so that it cannot run, and it can be deleted.
• Downloads and email attachments can be scanned before a member of staff opens them.

What else the charity must do for the anti-malware software to be effective

• The database of malware definitions must be kept up to date, or new malware will not be recognised.
• Staff and volunteers should be trained not to open unexpected attachments or download from unreliable sites.
• Backups are still needed, because anti-malware cannot repair files that malware has already damaged.
• Scheduled scans must be allowed to run on all 15 laptops, so that malware is found even if no one opens the file.

Levels

• Level 0 (0 marks): No rewardable content.
• Level 1 (1–2 marks): Basic, independent points are made, showing elements of understanding of key concepts/principles of computer science. (AO1) The discussion will contain basic information with little linkage between points made or application to the context. (AO2)
• Level 2 (3–4 marks): Demonstrates adequate understanding of key concepts/principles of computer science. (AO1) The discussion shows some linkages and lines of reasoning with some structure and application to the context. (AO2)
• Level 3 (5–6 marks): Demonstrates comprehensive understanding of key concepts/principles of computer science to support the discussion being presented. (AO1) The discussion is well developed, with sustained lines of reasoning that are coherent and logically structured, and which clearly apply to the context. (AO2)

Level 3 responses must cover both how malware could affect the computers and how anti-malware software finds or deals with it; a brief deal-with point and an unexplained update point, with no identification method and no effect on the charity's files, are Level 1.

Do not accept anti-malware software described as a firewall, or 'scans files'/'finds viruses' on its own as a method of identifying malware.