Past questions: Short answer

1: Identifies the correct answer.

Pilot

1: Identifies the correct item from each dropdown.

Dropdown 1: Waterfall. Dropdown 2: Agile.

1: Identifies the correct answer.

Supervised learning

1: Identifies the correct answer.

Language-dependent code optimisation

1: Identifies the correct answer.

Exposure of more data than intended

1: Identifies the correct answer.

Ensuring that parties exchanging information are who they claim to be

1: Identifies the correct answer.

Blue background, white text, border around the heading

1: Identifies the correct answer.

Race conditions

1: Correctly matches each characteristic to the appropriate approach.

(1) ORM only. (2) Both ORM and SQL. (3) ORM only.

1: Identifies ALL the items that are the goals of regulatory compliance.

Protecting sensitive data from unauthorised access; Ensuring software applications meet legal and industry standards.

1: Identifies ALL the items that are key principles of DevOps.

Rapid feedback; Automation of repetitive tasks; Collaboration and shared ownership.

2: True or false correct for all SIX check boxes. 1: Correct for FOUR of the six.

True: spam, two-party election outcome, university admission (all yes/no classification). False: house prices, height v weight, spread rate (continuous values: linear/polynomial regression).

2: Correctly identifies the timing and source code access for each strategy. 1: Correct for ONE strategy, OR correct timing for each strategy.

1: Identifies the correct item from each dropdown.

3: ALL dropdowns correct. 2: FIVE correct. 1: THREE correct.

3: Outlines TWO relevant software debugging tools. 2: Outlines ONE tool, OR identifies TWO tools. 1: Some relevant information.

Breakpoints can be added to specific lines of code to halt program execution, allowing the programmer to check the value of specific variables or to step through the program line by line. Debugging output statements can be added to the code to indicate that a certain section of code has been reached or to show the contents of a variable.

3: Compares the use of a PWA with an interactive website for the weather app. 2: Outlines features of a PWA and/or interactive website. 1: Identifies a feature of a PWA or an interactive website.

Both PWAs and interactive websites are platform-independent, allowing users to access the app on any device with a browser. PWAs can pre-cache updates to enable offline updates when a stable internet connection is not available but may not provide real time updates for the most recent changes to weather or warnings. Meanwhile, interactive websites require a constant internet connection to provide any updates.

3: Outlines TWO ways, other than a PWA, to minimise load time. 2: Outlines ONE way, OR identifies TWO ways. 1: Some relevant information.

One way would be to provide the option to select lower resolution images or text only display. Another way would be to utilise caching as this would provide high speed access to commonly requested weather data.

3: Describes ONE way privacy by design could be implemented in the weather app. 2: Outlines ONE feature of privacy by design. 1: Identifies a feature of privacy by design.

Embedded within the design of the weather app would be a process for regularly deleting identifiable data. For example, the app would likely record a person's live location to deliver relevant weather details. The privacy by design approach would incorporate a regular process to delete these locations from cache.

3: Explains how metadata and data mining can be used to prevent technical difficulties during the broadcast. 2: Outlines how metadata AND/OR data mining can be used. 1: Identifies a feature of metadata or data mining.

Metadata describes the content, structure and meaning of raw data, enabling more effective, accurate and efficient data mining. Data mining identifies user preferences and viewing patterns from large datasets, helping streaming services personalise recommendations and identify times of predicted high demand. Streaming service management uses this along with real-time user data to balance server loads and deliver smooth playback experiences.

3: Describes how session management can affect code execution efficiency. 2: Identifies some features of session management. 1: Some relevant information.

Efficient session management limits memory consumption by restricting session data size and lifetime. Excessive reading, writing or storing large objects increases input/output operations and slows code execution for the user. Removing sessions when they are no longer required is essential to prevent unnecessary resource consumption.

3: Outlines relevant social and ethical issues. 2: Outlines ONE social or ethical issue OR identifies relevant issues. 1: Identifies ONE relevant issue.

The website will need to ensure payment and address data is appropriately secured and accessible only to authorised personnel. It also needs to ensure that pages can be viewed in a wide variety of languages and that the information about dishes displayed is accurate and representative of the product.

3: Explains why server-side web programming is needed, with examples from the scenario. 2: Outlines some features, with examples. 1: Identifies a feature and/or relevant examples.

Server-side development will need to be used to provide dynamic information to the front-end (website). There are many dynamic aspects to the website, including the menu which changes along with subscription information and order tracking information. Server-side scripting will need to be written to read the relevant information from storage (most likely, a database) and then provide this information to the front-end.

3: ALL items correct. 2: THREE items correct. 1: ONE item correct.

1: Identifies the correct answer.

Documenting the needs and constraints of the software

1: Identifies the correct answer.

A protocol for email transmission

1: Identifies the correct answer.

Implement data encryption

1: Correctly identifies the benefits.

Different points of view can be considered. Tasks can be delegated to those with expertise.

1: Correctly matches the implementation methods.

(i) Direct. (ii) Phased. (iii) Parallel. (iv) Pilot.

1: Identifies the correct answer.

Popularity of the framework on social media

1: Identifies the correct answer.

0 TO n−1

2: Correctly classifies all the strategies. 1: Correctly classifies THREE strategies, which must include ONE SAST and ONE DAST.

SAST: (2) and (5). DAST: (1), (3) and (4).

2: Correctly orders the steps. 1: Correctly orders the WHILE and ENDWHILE steps.

Set number = random integer between 0 and 100 WHILE guess <> number Display "Guess a number between 0 and 100:" Get guess ENDWHILE Display "Well Done"

2: Correctly identifies all the items that are true. 1: Identifies true or false correctly for THREE of the five check boxes.

3: Test data that thoroughly tests the algorithm, with expected outputs and reasons. 2: Tests most of the boundaries and paths, with relevant outputs and reasons. 1: Some relevant information.

1024 -> Desktop (boundary check). 768 -> Tablet (boundary check). 100 -> Phone (below lowest screen size check). 850 -> Tablet (between Tablet and Desktop). 2000 -> Desktop (above highest screen size check).

3: Explains how a developer could test a website for cross-platform compatibility. 2: Outlines how, OR identifies strategies. 1: Some relevant information.

A web developer can use browser developer tools. These tools, built into most modern browsers, allow developers to simulate how their website looks and behaves on different devices and screen sizes. By using these tools, developers can identify and fix any issues related to cross-platform compatibility, ensuring that the website works well across a variety of devices and browsers.

3: Explains how load time can be improved using a PWA. 2: Outlines some features of a PWA and/or issues affecting load time. 1: Some relevant information.

A progressive web app (PWA) can improve load times by pre-caching important resources, allowing files such as image-gallery.js and video-gallery.js to be loaded into memory or cache while the rest of the page loads. PWAs also use service workers to cache resources, ensuring faster load times on repeat visits and offline functionality. Background synchronisation and background fetching can update content in the background, so users see the latest information without slowing down the initial load.

3: Describes the function of protocols in the transfer of data, with reference to a specific web protocol. 2: Describes the function OR provides an example of a web protocol and its use. 1: Some relevant information.

Protocols are important in data transfer as they establish rules for communication between devices connected to a network, such as the internet. HTTP (Hypertext Transfer Protocol) enables browsers to request web content from servers, which respond with the requested data. The protocol defines the structure of requests and the response so that data transfer can occur.

3: Describes how ML algorithms can be used in data analysis. 2: Outlines some features of ML algorithms relevant to data analysis. 1: Some relevant information.

Machine learning algorithms can be trained with a subset of the data to automatically identify patterns and trends within large datasets. The algorithms can handle complex relationships and nonlinearities present in the data allowing for efficient and comprehensive analysis. Machine learning can also be used for predictions and forecasting. These models can learn from new data over time, continuously improving their analysis and predictive accuracy and performance.

2: Outlines TWO benefits. 1: Some relevant information.

It can provide the same look and feel across the company's websites for consistency and ease of use. Separate html and CSS code can allow developers to work independently on files.

3: Explains how defensive data input handling practices can be implemented for the website. 2: Outlines some features of data input handling practices. 1: Some relevant information.

Data sanitisation using client-side scripting can clean the data and remove dangerous input. Input validation on the client-side can check that entered data meets all of the requirements before getting processed by the server. Errors generated by data not meeting rules can be shown to the user.

4: Explains how authentication AND authorisation could be applied. 3: Explains how authentication OR authorisation could be applied, OR outlines how both could be applied. 2: Outlines some features of authentication and/or authorisation. 1: Some relevant information.

Authentication ensures that only staff and students with valid usernames and passwords, which should be encrypted in storage (eg using hashing), can access the app. Authorisation controls access to specific features of the app based on user roles or groups. Teachers may have permissions to upload, assign and track homework, while students can only download tasks and upload completed work. By organising users into specific roles or groups, the app restricts access to appropriate functionality, ensuring that each user can only perform actions relevant to their role or group.

1: Correctly determines the outcomes.

1: Identifies the correct answer.

Timetable[0][2] (day index 0 = Monday, period index 2 = Period 3).

3: Provides an example of when a race condition may occur AND outlines how secure code could prevent it. 2: Outlines some features of race conditions. 1: Some relevant information.

With multiple teachers potentially accessing the database at the same time, race conditions can allow malicious users to gain unauthorised access. Authentication could be used to restrict access to the database, and code can be written to use atomic transactions and database locks to time the reading and writing of data.

3: Shows thorough understanding of how the effects of human bias on training can be minimised. 2: Outlines some effects of human bias on ML OR features of training. 1: Some relevant information.

Training data is initially selected by humans, who may unintentionally introduce their own biases. To minimise this, ensure that training data is representative of the problem the ML model will address. Reviewing data by individuals from diverse backgrounds could identify and reduce potential biases, ensuring fairer and accurate model performance.

3: Compares linear regression and KNN. 2: Outlines features of one or both. 1: Some relevant information.

Linear regression and K-nearest neighbours (KNN) are both supervised learning algorithms that make predictions from labelled data. The key difference is how they handle data: linear regression assumes a linear relationship between input features and the target variable, while KNN makes predictions based on the closest 'K' training examples, allowing it to handle more complex, non-linear patterns. However, KNN can be more computationally expensive than linear regression and is usually slower.

1: Correctly orders the steps.

3: Correctly selects ALL options. 2: At least FIVE options correct. 1: At least TWO options correct.

2: Correctly matches the features to the relevant protocols. 1: At least TWO features correct.

2: Correctly identifies all the true items. 1: True/false correct for at least FIVE check boxes.

3: Test data that thoroughly tests the algorithm, with expected outputs and reasons for inclusion. 2: Tests most boundaries and/or paths, with most expected outputs and reasons. 1: Some relevant information.

85 -> H (testing greater than 80). 80 -> H (boundary value 80). 60 -> P (between 50 and 80). 50 -> P (boundary value 50). 45 -> N (testing 'otherwise', below 50).

3: Thorough discussion of the use of sandboxing in the operating system. 2: Some understanding of the advantages and/or disadvantages. 1: Identifies a feature of sandboxing.

Sandboxing allows each application to be isolated so that it cannot pose a security risk by accessing system resources or other applications. However, it requires more resources as each application requires its own container. It may also be less convenient for users to access resources such as the device's camera or files as the sandbox will either prevent access or make it more difficult.

1: Correctly determines the outcomes.

4: Explains how the load time of the web page can be improved. 3: Outlines how some issues affecting load time can be resolved. 2: Identifies issues affecting load time OR outlines how to resolve ONE. 1: Some relevant information.

The images can be resized to 640 x 480 beforehand so that the webpage does not need to load the large 4000 x 3000 images. The multiple CSS style sheets could be converted into a single .css file, reducing the number of HTTP requests the browser needs to send. If the "image-gallery.js" JavaScript file at the top of the source code loads slowly, it can be moved to the bottom just above so that it will not block the rest of the page from loading.

1: Identifies the correct answer.

Cross site scripting

2: Explains ONE way to minimise the vulnerability. 1: Some relevant information.

The website could check and change user input so that markup and script become plain text. This will still allow the page to display the information but will prevent it from executing script code.