1: Identifies the correct answer.

Pilot

1: Identifies the correct item from each dropdown.

Dropdown 1: Waterfall. Dropdown 2: Agile.

1: Identifies the correct answer.

Supervised learning

1: Identifies the correct answer.

Language-dependent code optimisation

1: Identifies the correct answer.

Exposure of more data than intended

1: Identifies the correct answer.

Ensuring that parties exchanging information are who they claim to be

1: Identifies the correct answer.

Blue background, white text, border around the heading

1: Identifies the correct answer.

Race conditions

1: Correctly matches each characteristic to the appropriate approach.

(1) ORM only. (2) Both ORM and SQL. (3) ORM only.

1: Identifies ALL the items that are the goals of regulatory compliance.

Protecting sensitive data from unauthorised access; Ensuring software applications meet legal and industry standards.

1: Identifies ALL the items that are key principles of DevOps.

Rapid feedback; Automation of repetitive tasks; Collaboration and shared ownership.

2: True or false correct for all SIX check boxes. 1: Correct for FOUR of the six.

True: spam, two-party election outcome, university admission (all yes/no classification). False: house prices, height v weight, spread rate (continuous values: linear/polynomial regression).

2: Correctly identifies the timing and source code access for each strategy. 1: Correct for ONE strategy, OR correct timing for each strategy.

1: Identifies the correct item from each dropdown.

3: ALL dropdowns correct. 2: FIVE correct. 1: THREE correct.

3: Outlines TWO relevant software debugging tools. 2: Outlines ONE tool, OR identifies TWO tools. 1: Some relevant information.

Breakpoints can be added to specific lines of code to halt program execution, allowing the programmer to check the value of specific variables or to step through the program line by line. Debugging output statements can be added to the code to indicate that a certain section of code has been reached or to show the contents of a variable.

3: Compares the use of a PWA with an interactive website for the weather app. 2: Outlines features of a PWA and/or interactive website. 1: Identifies a feature of a PWA or an interactive website.

Both PWAs and interactive websites are platform-independent, allowing users to access the app on any device with a browser. PWAs can pre-cache updates to enable offline updates when a stable internet connection is not available but may not provide real time updates for the most recent changes to weather or warnings. Meanwhile, interactive websites require a constant internet connection to provide any updates.

3: Outlines TWO ways, other than a PWA, to minimise load time. 2: Outlines ONE way, OR identifies TWO ways. 1: Some relevant information.

One way would be to provide the option to select lower resolution images or text only display. Another way would be to utilise caching as this would provide high speed access to commonly requested weather data.

3: Describes ONE way privacy by design could be implemented in the weather app. 2: Outlines ONE feature of privacy by design. 1: Identifies a feature of privacy by design.

Embedded within the design of the weather app would be a process for regularly deleting identifiable data. For example, the app would likely record a person's live location to deliver relevant weather details. The privacy by design approach would incorporate a regular process to delete these locations from cache.

3: Substantially correct pseudocode algorithm. 2: Addresses some aspects of the problem. 1: Some understanding of the problem or pseudocode.

BEGIN RiskRating Total = 0 index = 0 REPEAT Total = Total + Risks[index] index = index + 1 UNTIL index = 10 IF Total > 35 THEN Rating = "High" ELSE IF Total < 20 THEN Rating = "Low" ELSE Rating = "Medium" ENDIF ENDIF Display Rating END RiskRating (NESA also accepts a CASEWHERE version: CASEWHERE Total is > 35: Rating = "High" < 20: Rating = "Low" OTHERWISE: Rating = "Medium" END CASE; and an IF / ELSEIF / ELSE version.)

3: Explains how metadata and data mining can be used to prevent technical difficulties during the broadcast. 2: Outlines how metadata AND/OR data mining can be used. 1: Identifies a feature of metadata or data mining.

Metadata describes the content, structure and meaning of raw data, enabling more effective, accurate and efficient data mining. Data mining identifies user preferences and viewing patterns from large datasets, helping streaming services personalise recommendations and identify times of predicted high demand. Streaming service management uses this along with real-time user data to balance server loads and deliver smooth playback experiences.

3: Correct code for the problem. 2: Partially correct code that includes a correct selection structure OR password creation. 1: Some understanding of the scenario and Python.

uName = input('What is your username?') password = input('What is your password?') passwordP1 = uName[:3] passwordP1= passwordP1 + '123' if passwordP1 == password: print ('Welcome!') else: print ('Incorrect password entered')

3: Describes how session management can affect code execution efficiency. 2: Identifies some features of session management. 1: Some relevant information.

Efficient session management limits memory consumption by restricting session data size and lifetime. Excessive reading, writing or storing large objects increases input/output operations and slows code execution for the user. Removing sessions when they are no longer required is essential to prevent unnecessary resource consumption.

4: Correct SQL query that extracts 'Pending' and 'Escalated' jobs for the 'Software' and 'Hardware' categories, counts the jobs for each status in each category, and outputs results in descending order. 3: Addresses most requirements. 2: Some understanding of the problem. 1: Some understanding of SQL or the problem.

SELECT Category, Status, COUNT(JobID) AS Jobs FROM Issues WHERE (Status = 'Pending' OR Status = 'Escalated') GROUP BY Status, Category ORDER BY Jobs DESC

3: Correct class diagram that shows inheritance and removes redundant attributes from each class. 2: Some understanding of the problem. 1: Some relevant information.

3: Outlines relevant social and ethical issues. 2: Outlines ONE social or ethical issue OR identifies relevant issues. 1: Identifies ONE relevant issue.

The website will need to ensure payment and address data is appropriately secured and accessible only to authorised personnel. It also needs to ensure that pages can be viewed in a wide variety of languages and that the information about dishes displayed is accurate and representative of the product.

3: Explains why server-side web programming is needed, with examples from the scenario. 2: Outlines some features, with examples. 1: Identifies a feature and/or relevant examples.

Server-side development will need to be used to provide dynamic information to the front-end (website). There are many dynamic aspects to the website, including the menu which changes along with subscription information and order tracking information. Server-side scripting will need to be written to read the relevant information from storage (most likely, a database) and then provide this information to the front-end.

3: ALL items correct. 2: THREE items correct. 1: ONE item correct.

5: Comprehensive discussion of the impact on workers with reference to the scenario. 4: Outlines both positive AND negative ways. 3: Outlines some ways. 2: Outlines ONE way OR identifies some ways. 1: Some relevant information.

The AI monitoring system can improve safety on site by reducing human error through real-time alerts and remote monitoring. It can also help supervisors track workers' compliance with PPE requirements and identify risky behaviours, potentially preventing accidents. However, some workers might feel their privacy is invaded, especially if the wearables continue monitoring during breaks or in private areas like bathrooms. There's also a risk of the system misidentifying safe behaviour as unsafe, leading to unnecessary alerts or stress which could cause distractions at critical times. Additionally, the long-term data collection could be used to improve training, but workers may worry about how the data is stored or used.

5: Explains how the neural network supports the VPA AND includes one positive AND one negative impact. 4: Explains how the NN supports the VPA OR outlines how it supports the VPA and includes one positive AND one negative impact. 3: Outlines features of a neural network AND/OR impacts. 2: Outlines a feature of a neural network OR an impact, OR identifies features/impacts. 1: Some relevant information.

Neural networks recognise natural language patterns to categorise common support queries, such as lost luggage, and use nodes to assist with processing. They assess language tone to gauge frustration or urgency, allowing the virtual personal assistant to recommend specific phrasing for customer service staff. For instance, calming language may be suggested for distressed customers. By tracking customer ratings and turnaround times, the neural network uses weightings to refine recommendations to prioritise high-frequency queries or improve suggestions for poorly rated interactions. While this system streamlines support processes and improves response accuracy, it may also impact the role of customer service staff. As the neural network learns from interactions, staff may rely more on its recommendations, potentially reducing their familiarity with emerging query trends or response strategies. Customers may come to expect faster, more precise service, raising the standard for human interactions.

5: Correct Python program that creates a list of unique randomly generated numbers; processes the list correctly; uses selection and looping structures; provides correctly formatted output; uses inbuilt Python functions. 4: Substantially correct, most requirements. 3: Some requirements. 2: One requirement. 1: Some understanding of the problem.

import random

randList = [] for x in range(15): nextInt = random.randint(1,25) while nextInt in randList: nextInt = random.randint(1,25) randList.append(nextInt)

pos = 0 while pos < 25: if pos in randList: print ("| X", end=" ") else: print ("| ", end=" ") pos = pos + 1 if (pos % 5 == 0): print("| \n")

6: Explains how human bias could affect the usefulness of AI solutions AND supports with reference to the video. 5: Describes how, and refers to a scenario(s) in the video. 4: Outlines how human bias could affect AI solutions and refers to the video. 2-3: Identifies some sources/examples of human bias AND/OR effects on AI AND/OR outlines how AI learns. 1: Some relevant information.

AI develops its ability by analysing vast amounts of data. The quality of these data can be influenced by human bias, and in turn, affect the usefulness of AI solutions.

Human bias may be explicit or implicit. Explicit biases are intentional. For example, a researcher may favour male physicists and only collect pictures of male physicists for training an AI solution, as shown in the video. Implicit biases operate unconsciously and may be shaped by social and cultural factors. Whether the bias was explicit or implicit, the choice of male physicists would suggest to the AI solution that physicists are male.

Human bias can occur in various stages of the development of AI solutions. As shown in the photo library example, training data needs to be diverse and representative, otherwise AI solutions may produce inaccurate or unhelpful responses. The process of labelling training data may also introduce biases as people may have different interpretations of the same data. The video shows that if most people draw shoes in particular ways, certain types of shoes will not be recognised as a shoe.

1: Identifies the correct answer.

Documenting the needs and constraints of the software

1: Identifies the correct answer.

A protocol for email transmission

1: Identifies the correct answer.

Implement data encryption

1: Correctly identifies the benefits.

Different points of view can be considered. Tasks can be delegated to those with expertise.

1: Correctly matches the implementation methods.

(i) Direct. (ii) Phased. (iii) Parallel. (iv) Pilot.

1: Identifies the correct answer.

Popularity of the framework on social media

1: Identifies the correct answer.

0 TO n−1

2: Correctly classifies all the strategies. 1: Correctly classifies THREE strategies, which must include ONE SAST and ONE DAST.

SAST: (2) and (5). DAST: (1), (3) and (4).

2: Correctly orders the steps. 1: Correctly orders the WHILE and ENDWHILE steps.

Set number = random integer between 0 and 100 WHILE guess <> number Display "Guess a number between 0 and 100:" Get guess ENDWHILE Display "Well Done"

2: Correctly identifies all the items that are true. 1: Identifies true or false correctly for THREE of the five check boxes.

3: Test data that thoroughly tests the algorithm, with expected outputs and reasons. 2: Tests most of the boundaries and paths, with relevant outputs and reasons. 1: Some relevant information.

1024 -> Desktop (boundary check). 768 -> Tablet (boundary check). 100 -> Phone (below lowest screen size check). 850 -> Tablet (between Tablet and Desktop). 2000 -> Desktop (above highest screen size check).

3: Explains how a developer could test a website for cross-platform compatibility. 2: Outlines how, OR identifies strategies. 1: Some relevant information.

A web developer can use browser developer tools. These tools, built into most modern browsers, allow developers to simulate how their website looks and behaves on different devices and screen sizes. By using these tools, developers can identify and fix any issues related to cross-platform compatibility, ensuring that the website works well across a variety of devices and browsers.

3: Explains how load time can be improved using a PWA. 2: Outlines some features of a PWA and/or issues affecting load time. 1: Some relevant information.

A progressive web app (PWA) can improve load times by pre-caching important resources, allowing files such as image-gallery.js and video-gallery.js to be loaded into memory or cache while the rest of the page loads. PWAs also use service workers to cache resources, ensuring faster load times on repeat visits and offline functionality. Background synchronisation and background fetching can update content in the background, so users see the latest information without slowing down the initial load.

3: Describes the function of protocols in the transfer of data, with reference to a specific web protocol. 2: Describes the function OR provides an example of a web protocol and its use. 1: Some relevant information.

Protocols are important in data transfer as they establish rules for communication between devices connected to a network, such as the internet. HTTP (Hypertext Transfer Protocol) enables browsers to request web content from servers, which respond with the requested data. The protocol defines the structure of requests and the response so that data transfer can occur.

3: Substantially correct pseudocode that includes at least ONE subroutine. 2: Addresses some of the requirements. 1: Some understanding of the problem.

BEGIN main Get num_pizzas total_cost = 0 FOR i = 1 TO num_pizzas Get pizza_size Get num_toppings cost_per_pizza = calculate_pizza_cost(pizza_size, num_toppings) DISPLAY cost_per_pizza total_cost = total_cost + cost_per_pizza NEXT i DISPLAY total_cost END main

BEGIN calculate_pizza_cost(size, num_toppings) base_price = 10 topping_price = 1.5 IF size = "Medium" THEN base_price = base_price + 2 ELSEIF size = "Large" THEN base_price = base_price + 4 ENDIF pizza_cost = base_price + num_toppings * topping_price RETURN pizza_cost END calculate_pizza_cost

3: Describes how ML algorithms can be used in data analysis. 2: Outlines some features of ML algorithms relevant to data analysis. 1: Some relevant information.

Machine learning algorithms can be trained with a subset of the data to automatically identify patterns and trends within large datasets. The algorithms can handle complex relationships and nonlinearities present in the data allowing for efficient and comprehensive analysis. Machine learning can also be used for predictions and forecasting. These models can learn from new data over time, continuously improving their analysis and predictive accuracy and performance.

2: Outlines TWO benefits. 1: Some relevant information.

It can provide the same look and feel across the company's websites for consistency and ease of use. Separate html and CSS code can allow developers to work independently on files.

3: Correct SQL query. 2: Addresses some of the requirements. 1: Some understanding of SQL.

SELECT Products.Name AS 'Product', Suppliers.Name AS 'Supplier' FROM Products, Suppliers WHERE Products.SupplierID = Suppliers.SupplierID AND Products.Producer = 'Yumtreats' AND Products.Mass >= 50 ORDER BY Products.Name DESC

3: Explains how defensive data input handling practices can be implemented for the website. 2: Outlines some features of data input handling practices. 1: Some relevant information.

Data sanitisation using client-side scripting can clean the data and remove dangerous input. Input validation on the client-side can check that entered data meets all of the requirements before getting processed by the server. Errors generated by data not meeting rules can be shown to the user.

3: Correct function in Python to check whether a username satisfies the rules. 2: Partially correct function. 1: Some understanding of the problem and Python.

def validate_username(username): valid = True

 # length check
 if len(username) < 8:
      valid = False
 elif (not username[0].isupper()):
      valid = False
 elif (not username[-2].islower()):
      valid = False
 elif (not username[-1].isdigit()):
      valid = False

 return valid

4: Explains how authentication AND authorisation could be applied. 3: Explains how authentication OR authorisation could be applied, OR outlines how both could be applied. 2: Outlines some features of authentication and/or authorisation. 1: Some relevant information.

Authentication ensures that only staff and students with valid usernames and passwords, which should be encrypted in storage (eg using hashing), can access the app. Authorisation controls access to specific features of the app based on user roles or groups. Teachers may have permissions to upload, assign and track homework, while students can only download tasks and upload completed work. By organising users into specific roles or groups, the app restricts access to appropriate functionality, ensuring that each user can only perform actions relevant to their role or group.

1: Correctly determines the outcomes.

3: Draws a correctly simplified decision tree. 2: Simplified tree with most of the logic. 1: Some understanding of the requirement.

1: Identifies the correct answer.

Timetable[0][2] (day index 0 = Monday, period index 2 = Period 3).

5: Substantially correct Python program that places each subject in the correct period; displays all 5 days; provides appropriate subroutines; programmatically builds the timetable. 4: Most requirements. 3: Some requirements. 2: One requirement. 1: Some understanding.

subjects = ["English", "Software", "Drama", "Science", "Art"] NUM_DAYS = 5 NUM_PERIODS = 5 DAYS_OF_WEEK = ["Monday", "Tuesday", "Wednesday", "Thursday", "Friday"]

def create_timetable(subjects): timetable = [] for day in range(NUM_DAYS): periods = [] for period in range(NUM_PERIODS): periods.append(subjects[(period - day) % NUM_PERIODS]) timetable.append(periods) return timetable

def print_timetable(timetable): print() for day in range(NUM_DAYS): print(f"{DAYS_OF_WEEK[day]}") for period in range(NUM_PERIODS): print(f"\tPeriod {period+1}: {timetable[day][period]}") print()

timetable = create_timetable(subjects) print_timetable(timetable)

2: Correctly completes the SQL query. 1: Correctly selects at least TWO correct options.

SELECT Level, COUNT(StudentID) FROM Students GROUP BY Level;

3: Provides an example of when a race condition may occur AND outlines how secure code could prevent it. 2: Outlines some features of race conditions. 1: Some relevant information.

With multiple teachers potentially accessing the database at the same time, race conditions can allow malicious users to gain unauthorised access. Authentication could be used to restrict access to the database, and code can be written to use atomic transactions and database locks to time the reading and writing of data.

3: Shows thorough understanding of how the effects of human bias on training can be minimised. 2: Outlines some effects of human bias on ML OR features of training. 1: Some relevant information.

Training data is initially selected by humans, who may unintentionally introduce their own biases. To minimise this, ensure that training data is representative of the problem the ML model will address. Reviewing data by individuals from diverse backgrounds could identify and reduce potential biases, ensuring fairer and accurate model performance.

3: Compares linear regression and KNN. 2: Outlines features of one or both. 1: Some relevant information.

Linear regression and K-nearest neighbours (KNN) are both supervised learning algorithms that make predictions from labelled data. The key difference is how they handle data: linear regression assumes a linear relationship between input features and the target variable, while KNN makes predictions based on the closest 'K' training examples, allowing it to handle more complex, non-linear patterns. However, KNN can be more computationally expensive than linear regression and is usually slower.

4: Substantially correct class diagram with suitable classes, attributes and methods, showing inheritance, relationships and multiplicity. 3: Represents most features. 2: Some features. 1: Some understanding of the scenario.

8: Discusses the proposal with reference to ML in DevOps, RPA and BPA from the slideshow. 6-7: Outlines advantages AND disadvantages with reference to at least TWO of these areas. 4-5: Outlines some advantages and/or disadvantages with reference to ML in DevOps and/or RPA and/or BPA. 2-3: Some understanding of the features of the proposal. 1: Some relevant information.

QuidantCon's proposal for the company suggests leveraging machine learning (ML) and automation to bolster security measures. One key benefit is the automation of security testing and vulnerability scanning, facilitated by integrating ML-powered tools into the DevOps pipeline. This approach ensures continuous security testing and provides rapid feedback to developers, allowing for early detection of security issues and reducing the risk of vulnerabilities being exploited. The frequent and automated testing improves the overall security position and enhances compliance with industry standards. Additionally, ML algorithms can analyse vast amounts of data to detect patterns and anomalies, which is crucial for proactive threat identification. This capability enables the company to identify security risks proactively, learn from past incidents, and predict future attacks, thereby enhancing their overall security measures.

QuidantCon's proposal for the company also raises some concerns. One key issue is the need for high-quality data for ML algorithms to work effectively. If the data is inconsistent or incomplete, the ML models may not perform well, leading to false positives or missed threats. Another concern is the complexity of implementing ML solutions, which can be challenging and may require specialised skills and training. This complexity could result in integration challenges, higher costs, and delays. Additionally, ML systems can be biased, potentially affecting security decisions. Security and privacy are also critical, as handling sensitive data requires protection against unauthorised access and breaches. These concerns emphasise the need for a careful and balanced approach when considering ML and automation in security practices.

1: Correctly orders the steps.

3: Correctly selects ALL options. 2: At least FIVE options correct. 1: At least TWO options correct.

2: Correctly matches the features to the relevant protocols. 1: At least TWO features correct.

2: Correctly identifies all the true items. 1: True/false correct for at least FIVE check boxes.

3: Test data that thoroughly tests the algorithm, with expected outputs and reasons for inclusion. 2: Tests most boundaries and/or paths, with most expected outputs and reasons. 1: Some relevant information.

85 -> H (testing greater than 80). 80 -> H (boundary value 80). 60 -> P (between 50 and 80). 50 -> P (boundary value 50). 45 -> N (testing 'otherwise', below 50).

3: Thorough discussion of the use of sandboxing in the operating system. 2: Some understanding of the advantages and/or disadvantages. 1: Identifies a feature of sandboxing.

Sandboxing allows each application to be isolated so that it cannot pose a security risk by accessing system resources or other applications. However, it requires more resources as each application requires its own container. It may also be less convenient for users to access resources such as the device's camera or files as the sandbox will either prevent access or make it more difficult.

1: Correctly determines the outcomes.

3: Correctly simplified decision tree. 2: Simplified tree with most of the logic. 1: Some understanding of the requirement.

3: Correctly modifies the algorithm to achieve its intended purpose. 2: Corrects some mistakes. 1: Some understanding of the problem.

BEGIN Search (SearchItem) Set LastIndex to the number of elements in ItemArray Found = FALSE Index = 1 WHILE Found = FALSE AND Index < LastIndex + 1 IF ItemArray(Index) = SearchItem THEN Found = TRUE ENDIF Index = Index + 1 ENDWHILE IF Found = TRUE THEN Display 'Position', Index - 1 ELSE Display 'Not found' ENDIF END Search

3: UI suitable for users to register an account, with features labelled. 2: UI with some relevant features. 1: Some understanding of the problem.

3: Correct function in Python that checks whether a username satisfies the rules. 2: Partially correct function. 1: Some understanding of the problem and Python.

def validateUsername(username):

  # Length check
  if len(username) > 8:
      return False

  # Alpha character only check
  elif username.isalpha() == False:
      return False

  # < character check
  elif "<" in username:
      return False

  # If we reach here then the username meets the requirements
  return True

4: Explains how the load time of the web page can be improved. 3: Outlines how some issues affecting load time can be resolved. 2: Identifies issues affecting load time OR outlines how to resolve ONE. 1: Some relevant information.

The images can be resized to 640 x 480 beforehand so that the webpage does not need to load the large 4000 x 3000 images. The multiple CSS style sheets could be converted into a single .css file, reducing the number of HTTP requests the browser needs to send. If the "image-gallery.js" JavaScript file at the top of the source code loads slowly, it can be moved to the bottom just above so that it will not block the rest of the page from loading.

1: Identifies the correct answer.

Cross site scripting

2: Explains ONE way to minimise the vulnerability. 1: Some relevant information.

The website could check and change user input so that markup and script become plain text. This will still allow the page to display the information but will prevent it from executing script code.

2: Correct output for the SQL query, including the correct ordering of the rows. 1: Some relevant information.

ProductName / ProductPrice: Discovery 1 & 2 (DVD) 26.98; The Plant (DVD) 28.00

3: Correct SQL query. 2: Substantially correct query with at least TWO of: renaming the columns; selecting the three tables; joining the tables. 1: Some understanding of renaming the columns or joining the tables.

SELECT Customers.CustName as 'Customer', Products.ProductName as 'Product', Orders.OrderQuantity as 'Quantity' FROM Products, Customers, Orders WHERE Orders.ProductID = Products.ProductID AND Orders.CustID = Customers.CustID ORDER BY Orders.OrderID ASC

6: Substantially correct solution with ALL of: looping correctly; referring to the contents of the data structure correctly; displaying the player's scores and corresponding points as shown; calculating the total points; taking bonus points into account; handling the final round correctly. 5: Most features. 3-4: Some features. 2: One feature. 1: Some understanding.

Input code

scores = [3,5,5,2,1,4,0,1,4,5]

Display the scores and points

Header row

print("Round\tScore\tPoints") totalPoints = 0

Calculate the points and print

for i in range(len(scores)): roundNumber = i + 1 score = scores[i] points = score

# Check if any bonuses apply and NOT the final round
if points == 5 and i != 9:
    # Add the points from the next round as bonus points
    points += scores[i + 1]

# Check if the final round bonus applies
if points == 5 and i == 9:
    # Give the bonus points of 10
    points = 10

# Add to the total points tally
totalPoints += points

# Print the results
print(str(roundNumber) + "\t" + str(score) + "\t" + str(points))

print("\nTOTAL POINTS: " + str(totalPoints))

8: Informed judgement about the use of AI in our society, comprehensive understanding of its use and effects, supported by information from the slideshow. 6-7: Broad understanding of the use of AI and its advantages and disadvantages, with some slideshow information. 4-5: Sound understanding; outlines some advantages and/or disadvantages. 2-3: Some understanding of AI. 1: Some relevant information.