Edexcel GCSE Computer Science (1CP2) Exam Questions

• B To reduce the time taken to transmit a file (1)
• The only correct answer is B. The correct answer is to reduce the time taken to transmit a file.
• A is not correct because compression reduces file size, which can reduce the number of packets sent
• C is not correct because lossy compression can reduce the quality of a file
• D is not correct because encryption, not compression, can make a file harder to open

• B Biometric authentication (1)
• The only correct answer is B. The correct answer is biometric authentication.
• A is not correct because access levels control which files or folders a user can access
• C is not correct because a password policy sets rules for creating strong passwords
• D is not correct because a username and password verify a user but do not use a fingerprint

• A The robot may not detect an obstacle and may knock the person over (1)
• The only correct answer is A. The correct answer is the robot may not detect an obstacle and may knock the person over.
• B is not correct because biased recommendations are algorithmic bias
• C is not correct because unclear responsibility is an accountability issue
• D is not correct because a robot cannot be legally liable; legal liability applies to people or organisations

Award one mark for:

• 244 (1)

Award up to two marks for a linked description such as:

• Allocates memory/RAM to the process (1) so its instructions and data can be stored (1)
• Loads/moves the program instructions into RAM (1) so the process is ready to run (1)
• Adds the process to the ready queue (1) so it can be scheduled onto the CPU (1)
• Gives the process a process ID (PID)/identifier (1) so the operating system can track/manage it (1)

For both marks, the development must follow/be linked to the point.

Only award one of the first two bullets in any one response; allocating memory and loading into RAM are the same stage.

Accept 'memory' for 'RAM' and vice versa.

Accept 'added to a queue for the processor' for the ready queue point.

Do not accept responses that say the process is run on the CPU straight away.

Do not accept descriptions of the program executing/running its instructions, or of the program file being created/saved.

Do not accept responses about the process being blocked or terminated.

Award up to two marks for a linked description such as:

• The compiler reports all syntax errors after translation has finished (1) whereas the interpreter stops at the first error it finds (1)
• The interpreter reports a syntax error as soon as it finds one (1) and does not translate/execute any more of the program (1)
• The compiler continues translating after an error (1) and reports the errors at the end (1)
• The interpreter stops translating when it reaches an error (1) but the compiler finishes translating before reporting errors (1)

Do not accept answers about fixing/correcting errors or about object code.

Do not award 'the compiler finds more errors' without saying errors are reported at the end.

Award up to two marks for a linked description such as:

• A collection of separate/individual networks (1) that are connected/linked together (1)
• It uses a backbone of high-speed/fibre-optic cables (1) to connect networks across the world (1)
• It is the largest WAN (1) made up of many smaller networks (1)

Do not accept responses that say the internet is the World Wide Web.

Do not accept responses that say the internet is a single network or one computer.

Award up to two marks for a linked explanation such as:

• Fewer raw materials need to be mined/extracted (1) because the recycled metals can be used to make new devices (1)
• Non-renewable resources/metal ores are conserved (1) because recycling means they are not used up as quickly (1)
• Less energy is used (1) because getting metal from ore uses more energy than recycling it (1)
• Less damage is caused to the land (1) because mining causes erosion/contamination of the ground (1)
• Less e-waste is sent to landfill (1) because recycling recovers the metals so the devices are not thrown away (1)

For both marks, the expansion must follow/associate with the statement.

A valid point followed by an economic (cost) reason rather than an environmental one can still earn the point mark (1) but not the second mark.

For the raw materials point, the raw materials must be linked to the recycled metals being reused to make new devices.

Do not accept 'saves resources' on its own without saying which resources are saved or how they are saved.

Do not accept 'less energy' on its own without saying that getting metal from ore uses more energy than recycling.

Do not accept 'it is better for the environment' / 'recycling helps the environment' without the environmental benefit being stated.

Do not accept answers about saving money/cost as the second mark, as these are economic benefits, not environmental ones.

Award one mark for any of the following up to a maximum of three marks:

• The address (of the next instruction) is sent from the CPU to main memory / placed on the address bus (1)
• The (next) instruction is fetched/read from main memory (RAM) (1)
• The instruction is brought/copied into the CPU / received into the MDR (1)
• The program counter (PC) is incremented/updated to hold the address of the next instruction (1)

Allow 'the PC/MAR is placed on the address bus' for the address being sent to main memory.

Allow 'the MDR receives the instruction' for the instruction being brought into the CPU.

Do not award a second mark for the instruction being fetched from main memory and the instruction being brought into the CPU; these are the same point.

Do not award 'the instruction is transferred along the data bus' on its own; this is the same point as the instruction being fetched from main memory.

Do not accept answers about decoding the instruction, e.g. 'the instruction is fetched from RAM and decoded', as decoding happens in the decode stage.

Do not accept answers about the execute stage, e.g. 'the ALU carries out the calculation' or 'the result of a calculation is stored in a register', as these happen in the execute stage.

Indicative content

Methods an attacker could use

• A phishing email, like the fake IT team message, can lead staff to a fake login page where their username and password are captured.
• Spear phishing could target one named member of staff, such as the receptionist, using details taken from the hospital's website.
• Shoulder surfing at the shared reception computer lets an attacker watch a password being typed, or use a camera to record it.
• Blagging or pretexting can be used to phone reception and pretend to be a manager or an engineer in order to obtain information.
• Baiting can involve leaving a USB drive in the staff room for someone to plug in, or offering a free download that installs malware.
• Scareware can show a pop-up claiming the computer has a virus and invite staff to follow a link or pay for a fake fix.

Why hospital staff might be vulnerable

• Staff are busy and may follow the link without checking the sender address of the email.
• The message appears to come from the IT team, so staff trust it as an official request and do not question it.
• Staff may not have had recent training, so they do not recognise a fake login page.
• The shared reception computer is in a public area, so other people can see the screen or watch the keyboard.
• Staff want to help a caller who says there is an urgent problem, so they give information without checking who the caller is.

The impact on the hospital if an attack succeeds

• The attacker could use the stolen login to open patient records and steal sensitive data.
• The attacker could change or delete records, so treatment decisions are based on wrong information.
• The hospital may disconnect its systems to contain the attack, delaying appointments and treatment.
• The hospital could face a penalty under data protection legislation and lose the trust of its patients.
• The attacker could install malware to keep access to the network for later attacks.

Levels

• Level 0 (0 marks): No rewardable content.
• Level 1 (1–2 marks): Basic, independent points are made, showing elements of understanding of key concepts/principles of computer science. (AO1) The discussion will contain basic information with little linkage between points made or application to the context. (AO2)
• Level 2 (3–4 marks): Demonstrates adequate understanding of key concepts/principles of computer science. (AO1) The discussion shows some linkages and lines of reasoning with some structure and application to the context. (AO2)
• Level 3 (5–6 marks): Demonstrates comprehensive understanding of key concepts/principles of computer science to support the discussion being presented. (AO1) The discussion is well developed, with sustained lines of reasoning that are coherent and logically structured, and which clearly apply to the context. (AO2)
• Level 3 responses must cover methods, why staff might be vulnerable and the impact, applying each to the hospital; an answer that only names methods, or names them without applying them to the hospital, is limited to Level 1.
• Do not accept malware infection (for example a virus arriving in an email attachment) on its own as a social engineering method, but do accept malware being installed as a result of a social engineering attack as an impact.