Cambridge International AS Level

9626 Information Technology (IT)

Chapter 1: Data processing and information (MARK SCHEME)

Specimen papers:
Describe the difference between data and information.[2]
• Data usually refers to raw data/unprocessed data
• Information is data that has been processed in such a way as to be meaningful…
• …to the person who receives it
• Information is data that has structure and context

A shop selling Konia mobile (cell) phones keeps records of all the phones it sells. The shop
only stocks three models but each model has either 32 or 64 GB of memory. An example of
the shop’s database is given below.

(a) A validation check is needed to make sure that only valid model numbers can be accepted.
Name this validation check and describe how it would work.[4]
• Name of validation check: Lookup check (1)
• A table of the three models would be stored
• Data is entered into a cell with the rule
• Data is compared to entries in the table
• If data matches an entry it is allowed/If data entered does not match any of the entries in
the table it is rejected
(b) Giving examples, explain how consistency checks could be used to ensure that the data
that is entered in the shop’s database is valid.[4]
• Rule could be that price must match model number
• If the model number is 1273C3 price must be $300
• If the model number is 1273C6 price must be $400
• If the model number is 1275C3 price must be $350
• If the model number is 1275C6 price must be $450
• If the model number is 1278C3 price must be $500
• If the model number is 1278C6 price must be $600
• Rule could be that memory must match model number
• If model number ends in 3 memory must be 32
• If model number ends in 6 memory must be 64

A government is proposing to build a new road between two large cities. They wish to collect
information on how it will affect the environment and the people living close to the proposed
route. They can collect this information using direct or indirect sources. Discuss the
advantages and disadvantages of using these types of sources for collecting the
information.[8]
Advantages of direct data sources
• Only as much or as little data is gathered as needed
• Where the data came from is known exactly and therefore how reliable it is
• There may be an opportunity to sell the data for other purposes
Disadvantages of direct data sources
• It may be more expensive as companies may have to be hired to collect the data
• It may be more expensive as data loggers and computers may need to be purchased
• Travelling expenses and time taken to collect data may be greater
• By the time the project is complete the data may be out of date
Advantages of indirect data sources
• Indirect data sources may allow a larger set of data to be examined
• A larger sample size can be used
• Information may be of a higher quality as it has already been collated and grouped into
meaningful categories
• Poorly written responses to questionnaires or interview transcripts do not have to be read
through to create the data source

2
Disadvantages of indirect data sources
• The various purposes for which data was collected originally may be quite different to the
building of a road in this area and unnecessary data may need to be filtered out
• There may be no data available since this may be the first road to be built in the area
• There may be sampling bias as data from only one section of the community may have
been collected
• There may be coding difficulties as the purpose for which the data was collected may not
be the same as building a road in this area
• If it has already been coded the coding may be difficult to understand
• Indirect data sources may also vary in reliability, depending on who collected the data and
how old the data are

Payroll is an example of batch processing. Explain why batch processing is preferred to

online processing for this task.[4]
• For large systems the hardware required can be cheaper to buy than that in an online system
• Batch processing can be carried out at a time when the computer would not normally be
used so a company can get more work out of the computer hardware it owns
• Batch processing moves the time of processing to when the computing resources are less
busy
• Batch processing requires less human supervision and input reduces the staff costs for the
data operators
• The transaction file can be set up when it is more convenient to the person entering the data
• Online processing is designed for continual input, processing and output whereas there are
fewer occasions for input with payroll

An office worker is entering data into a company’s staff database. The table shows some of
the data to be added. A format check is applied to the data.

Assess the effectiveness of using format checks to validate this data. Include examples in your
answer.[6]
What is effective
• Format checks pick up errors so rejects data that does not match the date structure.

3
 • Data that gets through is in the format required.
Examples
• Valid example of employee data that would be rejected by format check.
• Valid example of date joined that would be rejected by format check.
What is not effective
• Format checks only check structure not content so inaccurate data could be accepted.
• Because format checks allow inaccurate data to pass, the database would return unreliable
results.
• Additional validation checks would be required.
Examples
• Valid example of employee data that would pass format checks but is incorrect / digits had
been transposed.
• Valid example of date joined that would pass format checks but is incorrect.

A company has an online ordering system which makes use of a transaction file and a master
file.
(a) The transaction file contains details of the goods ordered, details about the customers and
the total amount for each order. Identify two other items which would be in the transaction
file.
• Customer ID or equivalent • Stock/item ID or equivalent
(b) Customers pay for their orders at the end of the month. The master file contains all
customer details and how much money they owe. The master file is updated from the
transaction file. Describe the data processing needed to update the master file.[6]
• Transaction file is sorted into same order as master file.
• First record in the transaction file is read.
• First record in the old master file is read.
• These two records are compared.
• If records do not match, the computer writes old master file record to new master file.
• If records match, the computer calculates the new amount owed using the current amount
from master file and value of purchase from transaction file.
• Processed record is written to new master file.
• Process is repeated until end of old master file

4
2023:
Data is collected and processed to become information. Many factors affect the quality of the
resulting information.
(a) Describe what is meant by accurate information.[1]
• Information should be/that is free from errors/mistakes
• Information should be/that is true/correct
• Information that is provable/proven to be correct
(b) Describe how the use of interviews and questionnaires for collecting data may affect the
accuracy of the resulting information.[6]
• People might not answer the questionnaire truthfully
• People might answer the interview truthfully
• People may be biased
• The questions might be badly phrased
• Interviews can clarify the answer
• Interviews can ask questions based on previous answers
• Questionnaires cannot expand on what the question means
• Interviews include open ended questions that are hard to quantify
• In a multi choice type question there may not be a sufficient number of alternatives//
answers restricted to those provided
• There is the possibility that the people collecting the data may make errors when collecting
it
Online processing can be used when goods are purchased.
(c) Define what is meant by online processing.[1]
• User is in communication with a central computer
• Where a process is carried out on the internet/WWW
(d) Johann has previously registered with an online store. Describe the steps he takes when
purchasing goods from the online store.[5]
• Go to the website
• Log on (by entering username and password)
• Choose goods category
• Choose/select item (to examine the product)
• Add (items) to shopping basket/cart //click on buy button//pick up item
• Check good in basket/cart//make changes to goods in basket/cart
• Click on/proceed/go to checkout
• Confirm billing address
• Confirm/enter delivery address
• Choose method of delivery

5
 • Select/use payment method
• Type in credit card/debit card number
• Enter card security code/last three digits of CVV/CVC/CSC
• Confirm order//click checkout button//click pay (NO further marks to be given after this
mark given, unless candidate clearly states that the action happens before this point)

Explain why encryption is needed.[4]

• (Using data encryption is) a way to keep their data secure//to protect their information from
a hacker //to safely exchange data
• Information needs to be impossible to understand/unreadable/indecipherable
• Information needs to be useless to a 3rd party if intercepted/hacked/they should not have it
• Only authorised people/people with the key can understand the information
• Encrypted data needs to be decrypted which is hard/impossible (without the key)
• To make hacking not worthwhile

Describe how people in developing countries can be disadvantaged when trying to use online
shopping.[5]
• Some people in developing countries have no actual postal address making the delivery of
goods which are purchased online difficult
• Many people in developing countries have no access to broadband so speed of purchase is
slower
• Many people in developing countries have no PCs/laptops/smartphones/tablet computers
so need to borrow a PC/go to a library
• In developing countries power outages can mean that connection is lost during the process
and so have to start again/lose the sale
• Many people in developing countries do not have bank accounts and credit cards so have
to organise for someone else to buy the product on their behalf
• In many developing countries, goods bought using the internet are not covered by
consumer-protection laws so people have no protection from unscrupulous sellers

Encryption can be used to protect data.

(a) Define encryption.[1]
• Data is scrambled/jumbled up
• Converting information so that it is impossible to interpret/understand

6
(b) Explain how intercepted data could be misused if it was not encrypted.[3]
• Can be used for identity theft (1) plus one example (1)
• Can be used for identity fraud (1) plus one example (1)
• Company secrets could be sold by hackers to rival companies
• National secrets could be used by rival powers
• Secrets/personal data could be used for blackmail purposes
• Private details could be used to pass (bank) security tests
– Accept any suitable extension for passing security tests
– And so access (e.g.) bank accounts

D’Oliveira Inc. is a company which sells stationery products to many stores. The company
uses a transaction file to keep a record of the number of products it has sold each month.
Part of a transaction file is shown. It contains:
• ProductID
• NumberSold (the number of that product sold in a particular month)
Part of the master file used by the company is also shown. It contains:
• ProductID
• Product (description of product)
• NumberinStock (how many of that product are left in stock)
The NumberinStock on the new master file is calculated every month by subtracting the
NumberSold from the NumberinStock on the old master file.

7
(a) Identify the two processes that would have been performed on the transaction file before
the master file could be updated.
Validation and sorting (1)
(b) List the steps involved when the master file is updated using the transaction file. Use the
data shown in Fig. 5.1. Stop at the step where the third master file record is read.[8]
• First record//2210 in the transaction file
• First record in the master file/1965 is read/checked
• These (previously identified) two records are compared (ALLOW FT if attempt at
identifying both records) (1) (Award ‘the’ instead of ‘these’ where MP1 AND MP2 given)
• Records don’t match (1st)
– computer writes master file record to new master file
• Next record of master file/2210 in the master file is read/checked
• Transaction file record/2210 is compared with this record
• It matches so the Numbersold is subtracted from NumberinStock
• Using NumberinStock of 12000 from master file
• Using Numbersold of 6500 from transaction file
• NumberinStock is now 5500
• Processed record/NumberinStock is written to new master file
• Next record/3356 in the transaction file is read/checked
• Next record/2976 in the master file is read/checked

Isabella is concerned about the amount of traffic in her local area. She is going to interview
all the nearby families to discover if the amount of traffic is caused mainly by local families
driving short distances. It will take her a week to collect the data. Justify the use of direct
sources such as interviews in this scenario.[8]
• Any correct definition of direct data sources, such as:
– Direct sources are where Isabella asks people in person//primary source of data (must
be an attempt to define)
• Can gain/gather qualitative AND quantitative data
• Data gathered is more up to date/recent
• Data is (guaranteed to be) relevant to the study/question
• Interviewer can base further questions on answer given
• Interviewer can ask a more in-depth/follow up questions
• Can interpret body language (1st)
– such as (e.g.) facial expressions//nervous movement of hands
• Interviews tend to be taken seriously by people (1st)
– whereas questionnaires may be ignored
• It ensures the data is relevant to the study//you get a better view of what is going on//get a
better understanding (1st)

8
 – whereas indirect sources are not specific to the study
• You are in control of the sample size//can be as big/small as needed (1st)
– whereas Isabella has no control over the amount of data collected from an indirect
source
• The source of the data is known exactly (1st)
– making it easier to judge its reliability
• Isabella could sell/pass/share the data on (to interested companies) (1st)
– indirect data is not hers to sell/pass/share

A student has been asked by her sociology teacher to produce a study of the average number
of family members in the local area.
(a) Give reasons why using an Electoral Register as an indirect data source would not
produce the data required by the study.[5]
• It would now be used for a different purpose to that for which it was originally collected
• Electoral register only shows adults (accept does not show children)
• Only shows people who are registered to vote
• The data on the electoral register might be out of date//not have been updated ...
– … people on the electoral register might no longer live in the area
– … people new to the area might not be included
– … new homes may have been built
– … people may have died
• Not all people who live at the same address are from the same family
(b) Apart from the Electoral Register, give an example of another indirect data source.[1]
• Businesses collecting personal information when used by third parties
• Census (data)
• A newspaper
• An encyclopedia
• Medical records
• Museum archive

Explain what is meant by symmetric encryption.[5]

• One mark for a description of encryption
• Often called secret key encryption
• Uses a single/the same key (to decrypt/encrypt the data)
• Any awareness that it is a private key
• This (private/secret) key must be shared between the sender and the receiver
• The encryption key is sent to the recipient

9
Many credit card purchases use online processing, whereas customer bills tend to be
produced using batch processing. Describe the differences between online processing and
batch processing systems.[5]
• Data is grouped into batches (in batch processing)
• With online processing, data is processed as quickly as possible
• With batch processing there is a delay between the collection of data and the actual
processing
• With batch processing, the data is entered and processed altogether in one batch by the
computer
• With online processing the user tends to be in direct communication with a central
computer
• Online systems require more hardware/input devices/workstations than batch processing
systems
• Batch processing uses very little processing time compared to online processing
• In online processing errors are revealed immediately
• (whereas) Errors in batch processing errors are revealed much later/only when processing
takes place/overnight/when batch process is complete
• Batch processing can be done when the system is not busy//scheduled to a specific time
• (whereas) online processing has to be active for the whole day
• For batch processing, data is only accurate at the time of processing
• (whereas) online processing, the data is accurate all the time.

Describe what is involved in data logging.[4]

• Automatic collection/storing of data
• Using a computer and sensors to collect data
• This data is analysed/processed
• The results are output in the form of graphs/charts/tables
• Data is collected over a period of time ...
– ... continuously/at regular intervals
• The analysis/processing usually requires special software
• Two of the following examples of physical variables logged:
o temperature
o sound
o light
o pressure

10
Explain the purpose of the SSL/TLS protocol.[5]
• ONE of:
– SSL is Secure Socket Layer OR
– TLS is Transfer Layer Security
– Enable encryption in order to protect data
• To protect data whilst being transferred (accept close alternatives to ‘transferred’)
• To encrypt and decrypt data sent/received by web users
• Provides secure connection between web browser and website/client and server
• Authenticate the people/companies/users exchanging data
• Ensure the integrity of the data to make sure it has not been corrupted/altered
• Enable credit/bank card payments to be made securely ...
– ... by setting standards for the storage/transmission/processing of bank card data
• Improve customer trust/more likely to do business with a company using SSL/TLS
protocol on its website
• Enable users to securely complete online transactions
• Enable the creation of a secure connection between a web server and a browser
• Prevent eavesdroppers from trying to intercept data
• To provide security of communication in a network/secure transmission/sharing of data
• Encryption protocols enable credit card payments to be made securely

There are different types of processing including batch processing and real-time processing.
(a) Without referring to master files and transaction files, describe what is meant by batch
processing.[3]
• Data is grouped
• A group of data is processed all at once//in one go
• Jobs/batches are set up so they can be run to completion without human interaction
• Data is processed at a set time
• Takes place when the computing resources are less busy
• With batch processing there is a delay between the collection of data and the actual
processing
(b) Rocket guidance systems are used in space exploration. Explain why a rocket guidance
system is an example of the use of real-time processing.[3]
• The response time of the computer must be immediate
• Real-time responses are in the order of milliseconds, and sometimes microseconds (must
be more than ‘is fast’, but this can be expanded upon)//real time processing is immediate
• Real time means that the inputs are processed and produce an output which in turn affects
the input

11
 • The processing involved in a rocket guidance system has to be continuous, so the process
is never ending
• An example of consequences
• An example of benefit

2022:
A collection of data could be the following: 1989, Paolo, √, ₹, ≠, OR
(a) Explain, by defining the term ‘data’, why this is just a collection of data and is not
information.[4]
• Data on its own has no meaning and there is no meaning to this data
• This data is just raw facts and figures
• Data has to be processed to become information and there is little evidence that any of this
data has been processed as it has no meaning
• Data needs to have a context in order to become information/we don’t know the context
for this data…
• …description using an example of why there is no meaning giving two alternative contexts
• Data can be in the form of numbers, characters, symbols as shown in the example
(b) Select three of these items of data. Explain what information each item might represent
and how it could be used.[3]
• 1989 could be a year, such as the year somebody joined a company
• Paolo could represent somebody’s first name
• √ could be the square root symbol used in Maths
• ₹ could represent a currency symbol such as is used in India
• ≠ could be the not equal to sign used in Maths
• OR could be a Boolean operator used in IT/Computer Studies

A school secretary is updating a database by copying data from some hard copy records.
Here are three of the records:

The Student_number will be stored as text, with the first two characters representing the
year group the student belongs to.

12
The Student_number and Date_of_birth are the only data that need to be validated as they
are entered. A range check, limit check or presence check would not be appropriate for
validating these data.
(a) Describe, in precise detail, three appropriate validation checks that could be used to
validate the data. Each validation check must be different.[6]
• A length check could be performed on the Student_number data
– Each data item must be exactly 5 characters long/no more and no less than 5 characters
• A format check could be performed on the Date_of_birth data
– Each date must consist of two digits followed by a slash, followed by two digits,
followed by a slash, followed by four digits
• A length check could be performed on the Date_of_birth data
– Must be exactly 10 characters
• A consistency check could be performed on the Student_number and Date_of_birth
data
– The first two digits/year group must relate to the Date_of_birth
(b) As well as validation, verification will need to be carried out. Explain why verification is
needed in addition to validation. Use examples from your answers to part (a).[6]
Four from:
• Common errors when copying data are transcription and transposition errors
• Verification would pick up a transposition error, but most validation checks (except a check
digit) would not
• Verification would pick up transcription errors, but validation might not
• Verification is checking that data that has been/is being entered into a computer has been
copied correctly from the data source
• Validation is checking that the data entered is reasonable/sensible
• Neither method checks that data is accurate/correct
Examples from:
• A format check might show that the Date_of_birth is in the correct format of dd/mm/yyyy
but verification would pick up errors…
• …Jonathon Odoki’s Date_of_birth, for example, might have been incorrectly copied as
12/07/2004/month and day have been swapped
• A length check might show that the Student_number is the correct length but verification
would pick up a transposition error…
• …For example Sven Johansson’s Student_number could have been copied as 09312/two
digits have been swapped
• A length check might show that the Student_number is the correct length but verification
would pick up a transcription error…
• …For example Sven Johansson’s Student_number has been copied as 09S32/text has been
entered instead of a digit

13
 • A consistency check might show that the Date_of_birth is consistent with the
Student_number but Manjit Sangherra’s Student_number may have been copied as
11102… …and Date_of_birth as 11/03/2006

The processing of customer orders is an example of batch processing. Describe, using

customer orders as an example, what is meant by batch processing.[4]
• It is collecting the data and then processing it/processing it all in one go/all at once / stored
until the system comes online to process the data in one ‘batch’
• The customer purchases/repayments/orders are collected into batches and each
batch/orders are processed as a whole
• Customer orders processed when the computing resources are less busy
• Batches/orders can be stored up during working hours and then executed/processed during
the evening/weekend
• Transaction file is used to update master file
• Transaction file of customer purchases/orders is kept for later processing – weekly/monthly
• Master file of customer details is only updated weekly/monthly
• Transaction file is used with master file to produce customer orders at the end of the month

When personal data is sent across the internet, it is often encrypted. Analyse the encryption
of personal data when it is sent across the internet.[8]
• Encryption is the scrambling of data… it converts plaintext to ciphertext... into meaningless
groups of symbols… can’t be understood by unauthorised people/read without the
decryptionkey…
• …without encryption messages can be stored as plain text, making it easy for anyone to
read and understand
• Encryption keeps personal data secure …such as credit card numbers and personal
information from computer hackers
• If personal information is intercepted, but it can't be understood, it is of no use...
• ... the act of hacking in this case is pointless
• It does not prevent hackers intercepting personal data but it prevents them from
understanding it
• Two types of encryption asymmetric and symmetric…
• …symmetric and asymmetric use a private key but asymmetric uses a
• public key as well /symmetric uses the same key to encrypt and decrypt but asymmetric
uses different keys…
• …symmetric uses a private key to encrypt and decrypt /symmetric is where both sender
and receiver use a private key…
• …asymmetric uses a public key to encrypt and a private key to decrypt /sender uses a
public key and receiver uses a private key

14
 • Can only decrypt using a decryption key/only authorised users have the decryption key…
• … Symmetric is a faster method than asymmetric…
• … Symmetric is less secure than asymmetric
• Data is encrypted using an encryption key

Ruritania has just passed a law which will allow supermarkets to purchase customer
information from banks, providing they anonymise it. Joanne, the owner of a supermarket,
wishes to analyse the spending habits of people in the area very near to the supermarket. She
can either use direct data sources or obtain the information indirectly from local banks.
Discuss the advantages and disadvantages to Joanne of obtaining the information indirectly
from local banks.[8]
Advantages
• It may allow a larger set of data to be examined…
• …direct data gathering could have limitations due to the availability of the people being
interviewed…
• …using banks the sample could be increased giving rise to greater confidence in the
findings
• Information can be of a higher quality as banking data will have already been collated and
grouped into meaningful categories
• Joanne does not have to read through poorly written responses to questionnaires/her
interview transcripts…
• …to create the data source
Disadvantages
• It may cost a lot of money to pay the banks to obtain the data…
• … whereas people who are questioned will not need to be paid
• The various purposes for which data was collected originally may be different to the
purpose of the current study…
• … there may be much more data than needed…
• …unnecessary data may need to be filtered out
• There may be sampling bias
• There may be coding difficulties …
• …different banks being used means there will be differences in the content
• …there may be a lack of standardisation across the data required
• …different banks will have different amounts of data
• If it has already been coded the coding may be difficult to understand

15
Some students have been asked by their teacher to carry out a study. They will collect data
about the families living in five streets close to their school. They will carry out the study
using direct data sources and will not use records from the 2020 census which are kept at the
city hall.
Describe the suitability of using direct data sources rather than the census data for the
study.[5]
• By interviewing the family, the students will obtain up to date information/census is two
years old/census data may be out of date
• More/detailed information will be obtained as the census may not contain all the
information required/has limited information/fewer details
• They are able to collect only as much information as they require/the census may include
information they do not need…might take time to filter extra information out
• It may be cheaper to visit the streets than the school paying transport costs to get the
students to city hall
• It may be too time consuming to collect direct data / to go to every house in these streets /
only need to make one trip to city hall
• The study might be limited as it is only five streets/the census would allow them to extend
the survey
• Residents might not be at home when the students call/nobody at home would not be a
problem with the census
• Data may take time to collate and present in a meaningful way/census data is already
collated and presented so it is easier to find the required information

Encryption has many uses, including the encryption of hard disks. Describe hard disk
encryption.[4]
• When a file is written to the disk, it can be automatically encrypted by encryption software
• Full disk encryption is when the data is encrypted as soon as it is saved to the hard disk
• When a file is read from the disk the decryption/encryption key/password is needed to
decrypt it
• When a file is read from the disk, the software automatically decrypts it…
• … while in some types of hard disk encryption leaving all other data on the disk encrypted
• (All) the files on the disk are encrypted/ It’s the encryption of data on that disk…except in
some cases the operating system
• Whether the disk stays in the computer or moved to another computer it is still encrypted
• Only the person/computer with the secret/decryption/encryption key/password can
understand the data on the disk/data can’t be read without the decryption/encryption
key/unauthorised people cannot read the data

16
Julia is setting up a hairdressing business. She has recruited several staff. She is creating a
database of all her staff and has written down all their details ready for entering into a
computer. She will need to verify the data when it is entered. She has been told that she
cannot use a parity check but should use visual verification and double data entry.
(a) By describing what is meant by a parity check, explain why it might not be suitable in
this scenario.[4]
For even parity:
Three max from
• When data is transmitted the sending device/computer counts the number of ones in each
byte
• Each byte is checked individually
• The parity bit is used to make sure the number of ones is even
• If the number of ones is even it sets the parity bit to 0 (and adds this on to the end of the
byte)
• If the number of ones is odd it sets the parity bit to 1 (before adding it on)
• Every byte of data should have an even number of ones
• The receiving device/computer checks each byte to make sure that it has an even number
of ones
• If the number of ones is odd there has been an error during the transfer of data
Two max from
• In this example data is not being transferred from one device to another/data is not being
transmitted
• She is only entering data to the computer so will need to use an alternative verification
method
(b) Compare the similarities and differences between the visual checking and double data
entry methods of verification.[4]
Similarities
• Both involve comparing data that has been/is being entered with another copy
• Both involve checking that data has been entered correctly not that it is correct/pick up
errors made during data entry
Differences
• Visual verification is carried out by a human/user/yourself
• Double data entry is carried out by the computer/ computerised
• Visual verification involves comparing the entered data with the original source
• Double data entry involves comparing two versions of the entered data
• Visual verification will enable the user to see mistakes if they have been made

17
 • With double data entry computer will alert user to the fact that a mistake has been made
and they decide which version has been copied correctly/freezes keyboard to prevent data
being entered until error is corrected

Updating a master file in a payroll system is an example of batch processing. Discuss the
advantages and disadvantages of using batch processing, compared to other types of
processing, for a payroll system.[8]
Advantages
• Batch processing does not require constant use of the computer when it might be needed
for other tasks...
• ...the payroll only needs to be run at the end of the week/month…
• …whereas real time processing would require computer to be available all the time…
• …batch processing/payroll can be run at convenient times for the company/when the
computing resources are less busy/when there is little demand for computer resources/can
be run overnight
• Real-time processing requires immediate processing of data which is unnecessary with
payroll...
• ...as hours worked would only be known at the end of each day so no point in using real-
time processing
• Real-time processing is not usually capable of processing large volumes of data such as
running a payroll whereas batch processing is
• Batch processing systems only need lower specification computers…
• …whereas real-time processing needs more complex computer systems
• Online processing requires more hardware making it more expensive than batch processing
• Batch processing only needs a few employees to enter the data… so total wage bill is less…
• …whereas online processing systems can need employees to be constantly using the
system
• In batch processing systems there are fewer/no transcription/update/data errors… than
human operators would produce in an online system
Disadvantages
• With batch processing there is a time delay between collecting the input data and getting
an output/data is not processed until the time specified
• With batch processing the information is only up to date after the master file has been
updated by the transaction file…
• …whereas in real-time processing information is always up to date
• With batch processing systems errors are only revealed during processing/after batch
process is complete which can be overnight and so cause delays/errors cannot be corrected
until the batch process is complete…
• …in online processing errors are revealed, and can be acted upon, immediately
• Users cannot terminate a process during execution/have to wait until execution is
completed
18
Paulo is carrying out a study on the level of noise caused by traffic in the streets around his
home. He will need data for his study.
(a) Describe what is meant by direct data.[1]
Data that is collected for a specific purpose or task/ for that purpose only/gives us data that is
often called ‘original source data’
(b) Describe how Paulo could use direct data sources for his study.[4]
• Questionnaires could be distributed amongst neighbours/local people asking about the
level of noise
• Interviews could be carried out with neighbours/local people (asking about the level of
noise)
• He could observe traffic, keeping a count of traffic coming down each street
• He could use sensors to detect the flow of traffic going down each street
• He could use sensors to measure the level of noise in each street

Describe how the SSL/TLS protocol is used in client-server networks.[6]

• Transport Layer Security (TLS) is used for applications that require data to be securely
exchanged over a client-server network...such as web browsing sessions/ file transfers
• The server shows/sends its SSL/TLS/digital certificate to the client /the client requests
server’s SSL/TLS/digital certificate
• To open a SSL/TLS connection, a client needs to obtain the public key
• The public key is found in the server's digital certificate
• The SSL/TLS/digital certificate authenticates the server to the client/identifies the server
• The client then carries out a number of checks to make sure that the certificate was issued
by a trusted CA… is in date and that the server is the legitimate owner of the public and
private keys
• For the client to access the server the client and server must carry out a SSL/TLS
handshake…
• …the client tells the server what version of SSL/TLS it uses…
• …and a list of the different types of encryption that it is able to use
• The client tells the server that it wants to set up a communications channel
• Handshaking occurs before the transfer of data can take place
• The server tells the client the type of encryption it has chosen from the client's list

19
Most companies use transaction files to update master files in their payroll systems. One part
of the updating process is to calculate weekly or monthly pay. Another part is to update
workers’ personal and work details.
Without referring to the calculation of pay, describe the three types of transaction that would
take place when workers’ details are being updated. You must give an example for each type
of transaction.[6]
e.g.
• Delete/remove a (master file) record
• To remove duplicates//Where a record is no longer needed (accept examples)
• Amend/change a (master file) record
• E.g. A worker moves department/gets a pay rise/changes name
• Add/append a (master file) record
• A new worker joins the company

A customer at a supermarket checkout pays for their goods by inserting a card into a chip
reader and entering their personal identification number (PIN). Electronic funds transfer
takes place. Describe what happens during the electronic funds transfer.[6]
• Chip is read/checked ... to make sure it has not been reported stolen, is in date and is a valid
card number (MUST be two of three) ...
• If not message appears saying the card is invalid (and the transaction does not continue)
• PIN entered by the customer is compared with that stored on the chip
• If PIN is verified the transaction continues ... otherwise (error) message will appear ...
• ... customer is asked to re-enter PIN
• If after three attempts the PINs do not match the transaction is rejected
• Supermarket computer contacts customer bank (to find customer's records) to see if there
are sufficient funds in the customer’s account
• If there are sufficient funds in the customer’s account transaction is completed
• If there are insufficient funds in the customer’s account transaction is rejected
• Amount of the transaction is deducted from customer’s bank account
• Amount of the transaction is credited to supermarket’s bank account

Encryption is a method used by organisations to keep data confidential. Symmetric or

asymmetric encryption is used. Explain what is meant by asymmetric encryption.[5]
• Often called public-key encryption
• Uses two different keys// one public and one private/secret (key)
• No need to transfer a key (with the message)
• The public key/key held by the person doing the encryption is used to encrypt the data

20
 • The corresponding private/secret key is used to decrypt the data
• The public key is published to everyone
• The private key is kept secret
• Anyone with a copy of the public key can encrypt information
• Only the private key holder can read the information
• It is not possible to deduce the private key from the public key

Explain what is meant by an indirect data source. In your explanation include descriptions
of two different indirect data sources.[4]
e.g.
• Data has been collected for a particular/different purpose ... but then that data is used for
something else
e.g.
• The Electoral Register is a list of adults who are entitled to vote in a local or national
election
• Customers in stores often provide personal information when they buy products
The owner of a book shop has created a database of her books. She will now test that it works.
Some of the records are shown. The data shown contains the maximum and minimum values.
There are only two types of book.

(a) Describe, in detail, the three most appropriate validation checks, apart from a check digit,
type check or presence check, that could be used to validate the data. For each validation
check, your description should include the field it could be used for. Each validation check
and each field must be different.[6]
• A length check could be performed (on the data) in the ISBN field
– Each data item must be 13 characters/numbers/digits long
• A lookup check can be performed (on the data) in the Book_type field
– Each data item is compared with the lookup list of P and H to see it exists//The code must
be P or H only
• A range check could be performed (on the data) in the Copies field
– Each value must not be less than the minimum/2 and must not be greater than the
maximum/5//between 1 and 6

21
(b) The owner will also need to verify the data in her database. Using examples from the
three fields you used in part (a), explain why verification is needed in addition to
validation.[3]
• Generic statement about why both required (no reference to fields).
• Verification would identify if P had been typed in the Book_type field for the first record//if
it was relevant (accept any letter and book combination from the sample)
• A lookup check/validation would accept P or H
• Verification would identify if (e.g) 5/wrong number had been entered (into the first record)
• A range check/validation would accept 5
• Verification would identify if two digits had been transposed in the ISBN field//the ISBN
number was incorrect
• Length check/Validation would accept any 13 characters

Encryption is often used to protect data.

(a) Discuss the need for encryption.[4]
• When a message/information is intercepted//accessed it is unreadable/can't be understood
...
• ... so, therefore, it is useless
• ... to a hacker (accept alternative examples of 3rd party or just ‘third party’)
• It protects customers when they bank/shop online/any other suitable example from any area
of use (MUST BE protecting data) ...
• ... as the data cannot be used for identity theft
• Data can only be decrypted by the receiving computer if it has the private/decryption key
(b) Discuss the advantages and disadvantages of using symmetric encryption.[4]
Advantages (MAX 3)
• It is a faster process//quicker to encrypt compared to asymmetric ...
• ... as it has less mathematical complexity
• It requires less computational power than asymmetric
Disadvantages (MAX 3)
• Does not have a different key for encryption and decryption//sender and receiver use the
same key ...
• ... therefore only one key needs to be stolen
• ... making it less secure
• The encryption key cannot be generally published
• The encryption key must be sent to the receiver of the message

22
 • Key could be intercepted/stolen (by a hacker) whilst being sent ...
• ... who can then decrypt any message encrypted by the sender (accept any reasonable
implication)

Before companies make planning decisions, they need to collect a lot of data. The decisions
they make will depend on the quality of the resulting information. Apart from its age and its
level of detail, describe the other factors which affect the quality of information.[6]
• Identifies Accuracy as a factor (MUST be more than just the word ‘accuracy’)
• Identifies Relevance as a factor (MUST be more than just the word ‘relevance’)
Accuracy
• Information must be accurate to be considered of good quality
• If the collected data is inaccurate then the information produced will also be inaccurate
• The method of collection can affect the accuracy of the collected data and thence
information
• If questions in an interview/on a questionnaire are not phrased correctly this leads to
inaccurate data being collected (then the information produced will also be inaccurate)
• If data is then entered incorrectly it will lead to inaccurate information being produced
• Example of inaccurate information/data
Relevance
• The relevance of the data relates to the situation or problem being studied
• Relevant information is information which meets the needs of the user/relevant to its
purpose
• It should not concentrate on one aspect of the problem
• It should not relate to a different area to the one being studied
• Should not have too much information ...
• ... user will spend a lot of time searching to find relevant information
• In order for information to be useful it needs to be complete ...
• ... if only some of the information required is present then it is very difficult to solve a
problem/complete a task
• Example of irrelevant information

A microprocessor controlled air conditioning system uses real-time processing. Explain what
is meant by real-time processing in this scenario.[5]
• A real-time system has to respond to/process inputs//inputted data instantaneously
• An air conditioning system has to deal with inputs continuously ...
• ... unless the user switches the system off
• This type of processing is usually found in systems that use sensors

23
 • The user interface of a real-time system may use specialist input devices to provide data
input ... such as a keypad/touchscreen
• Usually deals with small amounts of data//does not deal with a lot of data
• Real time systems are such that the output affects the input
2021:
When data is entered into a database, verification is often used. Analyse, including their
effectiveness, the different methods of verification that can be used when entering data into
a database.[6]
Max four from:
• Double data entry is where the data is entered twice by the same person…
• … The computer stores the data on its hard disk/SSD…
• … the two versions are compared by the computer…
• … discrepancies are highlighted as the second copy is entered…
• … the computer generates an error message/alerts the user if the second entry does not
match the first
• Double data entry can be when two people enter the data simultaneously…
• … the two versions are compared by the computer as they are entered…
• … discrepancies are highlighted immediately…
• The keyboard freezes if there is a difference
• Visual verification is when a person compares the original source document visually…
with the data on screen/database printout
• If mistakes are spotted, they can be corrected by the person
• Sometimes the data entered is printed out… and the printout is compared to the original
paper document for differences/mistakes
Max Six from:
• With double data entry data, the second copy must be entered in exactly the same order as
the original data entry otherwise errors will occur
• With visual check data is only entered once… so it is normally a quicker process than
double data entry…
• Visual check tends not to identify all errors unlike double data entry which is much more
reliable
• A problem with double entry is that if the same error is made both times…the computer
will not find a difference
• Visual checking can be unreliable… as it is difficult to transfer attention between screen
and paper

24
The table shows data relating to a company’s products. The data can only take the values
shown.

Analyse the effectiveness of the use of type checks and format checks to validate this set of
data. Do not refer to length checks or check digits in your answer.[8]
• A type check checks that all data items are of the same type of character…either letters or
numbers
• A type check on the Weight could be carried out as the data must be numeric
• A type check on the Year patented could be carried out as the data must be numeric…
• …there are no letters in the Weight/Year patented fields
• A type check would not prevent numbers out of range/incorrect numbers being entered for
Weight…
• A type check would not prevent numbers out of range/incorrect numbers being entered for
Year patented…
• A format check checks that a string follows a certain pattern… such as dd/mm/yyyy for
somebody’s date of birth
• A format check could be carried out on the Product number as it must be two letters
followed by three numbers
• A format check would not pick up a non-existent/incorrect Product number
• …as long as it was two letters followed by a three numbers…
• A format check could possibly be carried out on Weight as it has to be a digit followed by
one single decimal number
• A format check could possibly be carried out on Year patented as it has to be four
digits…but it would still accept an out of range/incorrect year…

GoodHope Ltd uses computers to process its payroll. The company pays its workers weekly,
which involves the updating of a master file.
Part of a transaction file is shown. It contains workers’ ID numbers and the hours worked
by those workers in a particular week.
Part of the master file used by the company is shown. It contains the workers’ ID numbers
and the hourly rate at which they are paid in $.

25
(a) The transaction file has been sorted so that the updating can begin. Describe what other
process must happen before updating can begin.[1]
The transaction file must be validated
(b) Describe the steps involved in updating the master file in this payroll system. You must
use examples from the files shown. You may assume that the only transaction being carried
out is the calculation of the weekly pay using the formula: Hourly rate × Hours worked
• The computer reads the first record in the transaction file belonging to 25306
• The computer reads the first record in the old master file belonging to 13487
• The record from the transaction file is compared to the record from the master file
• If the records don’t match, the computer writes the master file record to the new master file
• The records don’t match so the next record of the master file is read, 25306
• If it matches, the transaction is carried out/weekly pay is calculated
• The records match so the computer calculates the hourly rate x hours worked, 25 x 35…
• …using the hourly rate, 25, from the master file and the hours worked, 35, from the
transaction file
• The processed record is written to the new master file
• The next record, 25376, is read from the transaction file…
• …then compared to next master file record, 25376
• This continues until the last record from the transaction file, record 39286, is read/all the
transaction file records are read
• After processing the last record of the transaction file, 39286, all the remaining old master
file records are written to the new master file…in this case one record, 39875
26
The SSL/TLS protocol is an encryption protocol frequently used when data is transmitted
over the internet. Describe how the SSL/TLS protocol is used to ensure the security of the
data.[6]
• Transmitted data is encrypted so that a third party cannot eavesdrop and view the data
• Only the user's computer and the secure server can recognise the data
• Websites often use SSL/TLS certificates to verify their authenticity
• SSL/TLS use two keys to encrypt data… a public key known to everyone and a private key
known only to the recipient
• When a web browser tries to connect to a website using SSL/TLS, it requests the web
server to identify itself
• The web server sends the browser a copy of the SSL/TLS Certificate
• Certificate Authorities are used to ensure the authenticity of the certificate
• The browser checks to see if the SSL/TLS Certificate is trusted
• If the SSL/TLS Certificate is trusted, then the browser sends a message to the Web server
• The server then responds to the browser with a digitally signed acknowledgement to start
an SSL/TLS encrypted session
• SSL/TLS requires a handshake to be carried out/the browser and the website carry out a
(SSL/TLS) handshake

Phoebe is collecting data to find the level of pollution in a local river. Phoebe will use sensors
as direct data sources to collect the data. She will place sensors in the river and collect the
readings from a computer.
(c) Describe the benefits of gathering data from direct data sources in this scenario.[4]
• It ensures the data is relevant to the study
• The size of the data sample can be as big or small as needed
• Phoebe has full control over the method used to collect the data
• There may be an opportunity to sell the data to other people for them to use
• The source of the data is known, exactly making it easier to judge its reliability
(d) Describe the drawbacks of gathering data from direct data sources in this scenario.[4]
• Buying data loggers may be very expensive
• Compared to indirect data sources using direct data sources may be very expensive in
preparing and carrying out the gathering of data.
• It takes longer to gather data than to acquire data from an indirect data source
• The amount of data gathered may be inadequate and not give representative results
• The pollution could be seasonal and the time of year readings are taken may not provide
the required results

27
Many online banking applications use the HTTPS protocol, involving encryption, for secure
connections. Evaluate, by weighing up the advantages and disadvantages, the use of HTTPS
and the need for encryption in banking websites.[8]
Advantages
• Account details cannot be read by another user … unless they possess appropriate
permissions
• As modern technology becomes more sophisticated, so do hackers … so taking security
precautions is essential
• Passwords to access accounts are not enough
• Without encryption a person/malware could potentially see someone else's account details
• Does not matter which device (mobile phone/computer) is being used; data is encrypted
• Reassures bank customers that their data is secure
Disadvantages
• If the password is lost or reset, it becomes impossible to gain information from the account
• Encryption uses a lot of server resources … requiring processing power and memory
• In some circumstances it can cause delays in accessing bank's web site
• Need to buy an SSL certificate … issued by certificate authorities
• Encryption means the systems that maintain data encryption must have capacity and
upgrades… which can be quite costly

(a) A company secretary has been given a piece of paper which has the following data written
on it.
Johansen, Ingrid, 4578, 05/12/2020, 02493465782
Explain why these are regarded as just items of data. In your explanation give a possible
context for the data and describe how this data then becomes information.[5]
• They are just a collection of text, numbers and symbols
• As it stands, they have no meaning
• A possible context is that the data is about a new worker/customer
• They represent their family name, first name, worker’s ID, the date they joined the
company and their phone number
(b) Companies rely on the quality of the information that they use to make decisions.
Describe how each of the following can affect the quality of the information. In your answers,
give detail about the possible effects on companies.
(i) The age of the information.[3]
• Information needs to be up to date

28
 • Often information changes after a while so information which is out of date can produce
inaccurate results
• Businesses who base their planning on out-of-date information are likely to make bad
decisions
• It is important that where future planning is involved, only accurate and up-todate
information is used
(ii) The level of detail in the information.[2]
• To be helpful in solving the company’s problems, the information needs to have the correct
level of detail
• If there is too much detail, it is difficult to extract/find the exact information required
• If the information is not detailed enough, it may not contain the information needed

Describe the differences between symmetric and asymmetric encryption, explaining which
is more secure.[7]
Six max from:
• Symmetric encryption only uses a single private key
• With asymmetric encryption the public key is used to encrypt the data
• With asymmetric encryption the private key is used to decrypt the data
• The public key is published to everyone
• With asymmetric encryption the private key is only accessible to the recipient
• With symmetric encryption the same key is used for both encryption and decryption
• Asymmetric requires more processing (power)/is a slower process due to its mathematical
complexity
• Asymmetric encryption requires a digital certificate/symmetric encryption does not
At least one from:
• Asymmetric is more secure
• Sender and receiver have their own key so there is no problem of the key being intercepted
by a hacker
• Even if the encryption/public key is stolen by a hacker they cannot decrypt the message as
decryption/private key is only available to the receiver

Coding of data, such as G for green and B for blue, has some advantages and disadvantages.
Other methods are used to convert data. These include encryption and the use of codecs.
Analyse the effectiveness of these two methods.[8]
• Encryption is the scrambling of data … into meaningless groups of symbols …
• … can’t be understood/read without the decryption key

29
 • Is asymmetric and symmetric
• It uses public key and private key or just private key
• It allows protection of sensitive data … such as credit card numbers and personal
information from computer hackers
• Without encryption, information could be intercepted and altered or misused by outsiders
• It can be used to create digital signatures to authenticate e-mail
• If the encryption key is lost the data is effectively lost
• Encrypting data and creating the keys necessary to encrypt and decrypt the data requires
expensive systems
• Public key encryption is based on complicated mathematics … making it very hard to both
encrypt and decrypt data
• Many systems use a third party to certify the reliability of public keys …
• … if the certification authority is compromised, the criminal that did it could issue false
certificates fooling people into sending data
• Users can have a false sense of security … forgetting that once the data is decrypted it
becomes vulnerable to attack again

Students often confuse the concepts of data, information and knowledge.

Consider the following: 5, 10, 15, 20
Explain, using this example, how data becomes information, and how information can then
lead to further knowledge.[5]
• The example is just a list of numbers separated by commas and is data
• This is data which consists of raw figures
• It does not have any meaning until it is given a context
• Information is data that has a context giving it meaning
• The context is that this is a set of numbers which could be part of the five times table

2020:
Describe the features of the encryption protocols TLS and SSL.[6]
• All the major web browsers currently in use support TLS.
• SSL stands for Secure Socket Layer and TLS stands for Transport Layer Security
• TLS is the successor to SSL as SSL is being phased out
• TLS and SSL are protocols that provide security of communication in a network
• TLS/SSL are used in web browsing, email, Internet faxing, instant messaging and Voice
over IP/VoIP (at least two examples needed)
• Client-server applications use TLS in a network to try to prevent eavesdropping
• Encryption protocols enable credit card payments to be made securely
• SSL/TLS requires a handshake to be carried out

30
Many companies use batch processing for producing workers’ payslips.
(a) Describe, using payroll as an example, what is meant by batch processing.[4]
• It is collecting the data and then processing it in one go/all at once.
• Jobs are set up so they can be run to completion without human interaction.
• The input data/hours worked are collected into batches and each batch is processed as a
whole.
• Batch processing/payroll is run when the computing resources are less busy.
• Batches can be stored up during working hours and then executed during the
evening/weekend whenever the computer is idle.
• Batch processing is particularly useful for payroll as it requires the computer/peripheral
device for an extended period of time.
• Transaction file of hours worked is kept for later processing – weekly/monthly.
• Master file of workers’ details/rate of pay per hour is only updated weekly/monthly.
• Transaction file is used with master file to update master file/produce payslips at the end
of the week/month.
(b) Explain why batch processing is used instead of real-time processing for an application
such as payroll.[4]
• Real-time processing requires/batch processing does not require constant use of the
computer when it might be needed for other tasks.
• Real-time processing requires immediate processing of data which is unnecessary with
payroll.
• Hours worked would only be known at the end of each day so there is no point in using
real-time processing.
• The payroll only needs to be run at the end of the week/month so real-time processing is
unnecessary.
• Real-time processing does not usually involve the processing of large volumes of data such
as running a whole company’s payroll.

By explaining what the purpose of each is, describe the differences between verification and
validation.[4]
• Verification is checking that data that has been/is being entered into a computer has been
copied correctly from the data source.
• Validation is checking that the data entered is reasonable and sensible.
• Verification will not pick up the fact that the original data might be invalid.
• Verification would pick up a transposition error but most validation checks (except a check
digit) would not.
• Verification would pick up transcription errors but validation might not.

31
Here is part of a database showing the earnings of a group of workers in a company.

(c) Describe what a consistency validation check is and explain how it could be used in this
database as a check when inputting data.[5]
Two from:
• A consistency check is a test performed to determine if the data has any internal conflicts.
• Detects whether the value of two or more data items are not in contradiction.
• Data items which are related in some way can be checked for the consistency of their
relationship.
• Checks fields to ensure data in these fields correspond to each other.
Three from:
• Job_type and Hourly_rate are related.
• For example, both mechanics earn 20.00, all painters earn 18.00 etc. (allow one example).
• When the hourly rate is entered the check would make sure the Job_type matches.
• When the Job_type is entered the check would make sure that the Hourly_rate matches.
• An error message would appear if this is not the case.

Companies often carry out investigations into the public’s likes and dislikes. Investigations
such as this can be done using direct sources or indirect sources of information.
(a) Describe the advantages of gathering data from indirect data sources.[4]
• It may allow a larger set of data to be examined using less time and money than direct data
collection would require.
• It allows data to be gathered from subjects to whom the data gatherer does not have physical
access.
• A larger sample size can be used… direct data gathering could have limitations due to the
availability of the people being interviewed… using indirect data sources the sample could
be increased giving rise to greater confidence in the findings.

32
 • There is a relatively low cost as travelling expenses and time taken to collect data using a
direct data source can be great.
• Information can be of a higher quality as data collected indirectly has already been collated
and grouped into meaningful categories.
• Poorly written responses to questionnaires or interview transcripts do not have to be read
through to create the data source.
(b) Describe the disadvantages of gathering data from indirect data sources.[4]
• The various purposes for which data was collected originally may be different to the
purpose of the current research…
• …so unnecessary data may need to be filtered out.
• There may be no data available as the data required has simply never been recorded.
• There may be sampling bias as data from only one section of the community may have
been collected (and data from a representative cross section of the community may be
required).
• There may be coding difficulties…
• …as different sources being used means there will be differences in the content.
• …as there may be a lack of standardisation across the data required.
• …as different sources will have different amounts of data.
• If it has already been coded the coding may be difficult to understand.
• Indirect data sources may also vary in reliability, depending on who collected the data and
how old the data are.

There are two types of encryption, symmetric and asymmetric.

(a) Describe the use of public keys and private keys when used in the asymmetric method of
encryption.[4]
• The public key is used to encrypt the data.
• The corresponding private/secret key is used to decrypt the data.
• The public key is published to everyone.
• The private key is kept secret.
• Anyone with a copy of the public key can encrypt information.
• Only the private key holder can read the information.
• It is not possible to deduce the private key from the public key.
(b) Apart from the types of keys used, give two reasons why symmetric encryption is
preferred in certain situations.[2]
• Symmetric encryption takes a shorter amount of time to encrypt data than asymmetric
encryption.
• Symmetric encryption requires far less processing power to encrypt... and decrypt the
content of a message.
• One mark for an appropriate example of a situation

33
A secretary has been asked to add the data of three new employees to his company’s database
of employee records. These include payroll numbers and the date these employees joined the
company:
J45786 28/10/2019
K68932 11/11/2019
M40932 30/12/2019
Analyse the effectiveness of limit checks on the upper limits and format checks in validating
this data.[8]
• A limit check could not be carried out on the payroll number…
• … as it is a text field/it starts with a letter
• A limit check on each part of the date joined could be carried out
• A limit check could be carried out on the day part of the date, as day could not be more
than 31
• A limit check could be carried out on the month part of the date, as month could not be
more than 12
• Limit check would prevent years greater than 2020 from being entered/a date later than a
given date being entered
• Limit check would not prevent days or months less than 1 being entered
• Limit check would not prevent unacceptably early years being entered (e.g. 1900)
• Limit check would not prevent dates like 30/2/2000 or 31/06/2000 being entered
• If months were entered as 01, 02 etc. it might make them text, making limit check
impossible
• Format check could be used on payroll number – must be one letter followed by 5 digits
• Format check would pick up errors such as no starting letter/2 letters at start/extra/fewer
digits1/letter in wrong place (accept examples)
• Format check would pick up incorrect lengths (accept examples)
• Format check could be used on date joined – must be two digits followed by a slash
followed by two digits followed by a slash followed by 4 digits/dd/mm/yyyy
• Format check would pick up errors such as dates written as dd/month(name)/yy (accept
examples)
• Format check would not pick up day joined greater than 31
• Format check would not pick up month joined greater than 12
• Format check would not pick up year joined greater than 2020
• Format check would not pick up payroll numbers starting with letters not used by the
company
• Format check would not pick up payroll numbers where digits had been transposed

34
A company selling desktop computers uses batch processing to process its customer orders.
The company updates the stock master file every week.
Two sets of data are shown below.
The first set represents part of a transaction file containing the computer ID numbers and
either the total number of items sold to customers or the amount of new stock delivered to
the company in a particular week. The type of transaction is given a code of either S or D. S
means that the number of computers in stock needs to be reduced. D means that new stock
needs to be added.
The second set represents part of the master file used by the company. This shows the
computer ID numbers, the make of computer, the hard disk size and number in stock.

Using this data, explain the steps involved in updating the master file using this transaction
file for both types of transaction. You may assume that the transaction file has already been
validated and sorted.[8]
• First record in the transaction file / D20992 is read
• First record in the master file / D15609 is read
• These two records are compared
• If records don’t match, the computer writes the master file record to the new master file
• Records don’t match so the next record of the master file/ D20992 is read

35
 • As it matches, a transaction is carried out
• The transaction is D so Quantity is added to the number in stock in the master file
• Using Number of 145 from master file
• Using Quantity 40 from transaction file
• Number_in_stock is now 185
• Processed record is written to the new master file
• Next record, D43487, is read from transaction file and compared to the next master file
record, D43487
• As it matches, a transaction is carried out
• The transaction is S so Quantity is subtracted
• Using Number of 120 from master file
• Using Quantity 45 from transaction file
• Number_in_stock is now 75 and the processed record is written to the new master file
• This continues until the last record from the transaction file, record T49443, is read
• After processing the last record of the transaction file, T49443, all the remaining old master
file records are written to the new master file, in this case, one record, T88350

Many factors, including the accuracy of collected data, affect the quality of information.
Describe how the method of collecting data may affect the accuracy of the data.[6]
• In questionnaires and interviews the questions may not be very clear and the respondents
may misunderstand them
• The questions might be badly phrased… so that the respondent thinks they know the
answer the questioner wants...
• …this may result in similar answers from different respondents
• Interviews can/questionnaires cannot expand on what the question means leading to
higher/lower quality information
• Questions may be open-ended allowing the respondent to produce answers which cannot
be quantified
• In a multi-choice type question, there may not be a sufficient number of alternative
responses
• The respondents selected for the study may not be very representative
• There is the possibility that the people collecting the data may make errors when collecting
it
• People can make errors when entering the collected data into the computer
• If data is being collected automatically by sensors the computer/microprocessor/sensors
needs to be set up properly to accurately interpret the readings
• Observation – when people know they are being observed it may cause them to adopt
working patterns which are different to the way they work normally
• Examining documents – there may be too much information to quantify

36
2019:
Encryption can be used to protect data on a hard disk and in emails. Evaluate the need for
this encryption.[8]
Disk encryption:
Advantages
• Files encrypted by one user cannot be opened by another user if they do not possess
appropriate permissions
• After encryption a file remains encrypted regardless of where it is moved
• Encryption can be used on any files including executable files
• Users with permission to decrypt a file are able to work with the file without experiencing
any restrictions/difficulties
• Other users receive a restricted access notification when they attempt to access the
encrypted file
Disadvantages
• If the password is lost or reset it becomes impossible to gain access to files on the drive
• If the operating system fails it becomes impossible to gain access to files
• If the operating system has to be reinstalled it becomes impossible to gain access to
files...data can be lost irreversibly
Email encryption:
Advantages
• As modern technology becomes more sophisticated, so do hackers so sophisticated
encryption is essential
• Passwords on email accounts are not enough
• Email providers tend not to automatically encrypt email messages nor attachments
• Without encryption a person/malware could potentially read someone's emails
• The recipient’s email provider server may not be secured
• Without encryption, messages can be stored as plain text, making it easy for anyone to read
and understand
• When encrypting emails, the text stored in the message and files are scrambled up both in
storage and transit...
• ...the only way to unscramble and read the content is to use a decryption key
Disadvantages
• Hackers can still intercept and delete emails
• Encrypting emails to a new recipient using a private key requires the key to be sent which
can be intercepted by a hacker
• Managing digital certificates can become complex and time consuming

37
Mumbai Stores is a company which has a chain of shops. The company stores the customers’
reference number, and the value of the goods they have purchased, in a transaction file. Any
payments the customers have made on their account at the end of the month are also stored
in the same file.
Parts of the Transaction file and Master file are shown.
The Goods_bought field contains only the value of goods bought using the account’s credit
facilities.
The Master file shows the customers reference number, the money they owe from the
previous month (Old_balance) and the money they now owe (New_balance).
The New_balance has to be calculated by using the Old_balance, Goods_bought and any
Payment made. All these values are in rupees.

(a) Describe the processes that must happen to the Transaction file before the Master file can
be updated.[2]
• Transaction file is validated
• Transaction file must be sorted…
• …in same order as master file/sorted on Customer_ref_no

38
(b) Using this data, explain how the Master file is updated using the Transaction file shown.
You may assume that the only transaction being carried out is the calculation of the
New_balance.[6]
• First record in the transaction file read...belonging to 256431
• Reads first record in the old master file…belonging to 256431
• These two records are compared
• If records do not match computer writes master file record to new master file…next record
is read from master file and these two records are compared and process is repeated
• Records match so transaction is carried out
• Computer calculates the New_balance, Old_balance + Goods_bought – Payment…0 +
3800 – 3800 (0)
• Using Old_balance, 0 from master file
• Using Goods_bought 3800, Payment made, 3800 from transaction file
• Processed record is written to new master file
• Next record is read from transaction file…belonging to 319852
• then compared to next master file record... belonging to 319852
• This continues until the last record from the transaction file record is read …belonging to
943201
• After processing the last record of the transaction file…belonging to 943201…all the
remaining old master file records are written to the new master file…in this case, one record
963584.
(c) Each customer has a credit limit of 20000₹. Customers must make a payment of at least
2000₹ each month.
Using examples from the Transaction file, explain why it would be appropriate to use a range
check on one field and a limit check on another field.
Please note, the Customer_ref_no is stored as text.[5]
• Use a range check on the Payment field between 2000 and 20000
• As customers must make a payment of at least 2000₹ and customers have a credit limit of
20000₹
• Have a limit check on the Goods_bought field as they cannot be more than
20000₹…customers have a credit limit of 20000₹
• It is impossible to spend less than 0₹…so a lower limit to the range is unnecessary
• A limit check has only one limit but a range check has two – an upper and lower limit

Validation is often used to check that data entered into a computer is sensible. A customer
orders database contains details of the Customer ID number, the value of the order placed
and the date the order was placed. Any new order, when it is entered, needs to be validated.
Using these examples of database fields, analyse the use of the following different validation
rules – range check, type check, length check and format check.[8]

39
Max Five from:
• A range check is used to check that data is within the boundaries of a given range and could
be used on the value of the order placed / the date the order was placed
• Data must be greater than a lower limit and less than an upper limit / day must be greater
than 0 and less than 32 / month must be greater than 0 and less than 13 / year must be
greater than« and less than« (accept any reasonable example)
• A type check is used to check that data is of the correct data type and could be used on the
value of the order placed / individual components of the date the order was placed
• Value of order placed must be numeric / components of date must be numeric
• A format check is to check that the data is in the correct format and could be used on
Customer id number / date order placed
• Customer ID might be in the form of one letter followed by 6 digits / date order placed
might be 2 numbers followed by a dash followed by 2 numbers followed by a dash followed
by 4 numbers (accept any reasonable example)
• A length check is to check that data is of the correct length and could be used on the
Customer ID number / date order placed
• Any reasonable example of a length check
Max Five from:
• A range check would not be appropriate for the Customer ID number as it is likely to
consist of alphanumeric characters
• A range check would trap any values outside the range but might not pick up transposition
errors
• A type check would not be appropriate on Customer ID number as the values might not
solely consist of digits
• A type check would trap letters typed instead of numbers but might not pick up values
outside a range or transposition errors
• A format check would not be appropriate on value of order placed as the values in the
numeric part might vary in length considerably
• A format check would trap incorrect formats but might not pick up transposition errors
• A length check would not be appropriate on value of order placed as the values might vary
in length considerably
• A length check would check the correct length of the data item but would not pick up data
of the wrong format or transposition errors.

A headteacher is updating the school’s record-keeping system. For the new system he is
considering using off-the-shelf software. When the new system is running the secretary will
need to enter all the students’ data. This will require accurate entry of the data.
Describe the different methods of verification the secretary could use.[4]
• The secretary enters the data twice

40
 • The computer stores the data on its hard disk / SSD and compares it with the data that is
entered the second time …generates an error message if the second entry does not match
the first
• Alternatively two people type in the data
• The computer compares the two versions … freezing the keyboard if there is a difference
• Comparing the data on the screen against the original paper document checking for
mistakes
• Printing out a copy of the data and comparing the printout to the original paper document
checking for mistakes.

Evaluate the use of HTTPS in websites.[8]

Disadvantages
• HTTPS uses a lot of server resources ... requires processing power and memory for
encryption
• HTTPS introduces latencies/delays
• SSL connections take longer to set up with more roundtrips
• Browser caching does not work properly
• Modern sites will run slowly without browser caching
• Need to buy an SSL certificate issued by certificate authorities
• It is possible to make your own certificate but other users will not trust it so you need to
buy one
• Warnings can arise that despite using SSL a web page is partially serving insecure content
• The browser may not want users to think a site is totally secure but warning can be off-
putting to many users
• There are proxy caching problems
• Everything is encrypted including packet headers and content
• Any caching that might have happened between the points at which data is encrypted and
decrypted is blocked
Advantages
• Messages can’t be read by any third-party
• A certificate guarantees the information a browser is receiving originates at the expected
domain
• It’s a guarantee that when a user sends sensitive data, it’s being sent to the right place, and
not to a malicious third party
• HTTPS connections make man-in-the-middle attacks much more difficult to execute
• Search engines list HTTPS websites higher than sites without HTTPS
• The green padlock indicates that your site provider takes security seriously and this gives
users confidence

41
2018:
The secretary of a company is transferring workers’ records from paper to a new computer
database. She wishes to make sure the data in the database is accurate. To check the data
she is using verification and validation. Using an example, or otherwise, explain why she is
using validation as well as verification.[6]
• Verification is checking that data that has been/is being entered into a computer has been
copied correctly from the data source
• Validation is checking that the data entered is reasonable/sensible
• Neither method checks that data is accurate/correct
• Although verification helps to stop users from making mistakes when entering data it
cannot check that the data was originally correct
• Validation is needed because although the data might be copied correctly, the original data
might be invalid
• The date of birth might be in the form dd/mm/yyyy and the data might have been correctly
copied as 1994/12/31 but this is not in the correct format…a format check would have
picked this up
• Common errors when copying data are transcription and transposition errors
• Verification would pick up a transposition error but most validation checks (except a check
digit) would not
• Verification would pick up transcription errors but validation might not.

Jasmine is carrying out a study of the effect of pollution on her local countryside. She intends
to use data from direct data sources as well as indirect data sources. Describe what is meant
by direct and indirect data sources using examples from this scenario.[6]
• A direct data source is a source where data is collected for a specific purpose or task
• Examples of direct data sources are questionnaires or data logging
• An indirect data source is when data is obtained from a third party not necessarily related
to the current task
Direct data source
• It gives us data that is often called ‘original source data’
• Questionnaires could be distributed amongst farmers and local people asking about the
effects of pollution
• Interviews could be carried out with farmers and local people asking about the effects of
pollution
• Data logging – sensors could be used to gather pollution data that could be processed and
interpreted
Indirect data source
• Means data that was collected for a particular reason but is then used for another purpose

42
 • Could collect data from local government agencies which may have pollution data for the
local area
• Could collect data from local environment groups.

2017:
A health inspector, Josefine, is investigating the health of students. She wishes to study the
effect on them of traffic on roads passing close to the school. One road seems to be causing
more problems than others. She is going to collect data regarding the amount of traffic and
its effect on their health.
(a) Describe, with specific reference to the investigation, how she could gather data from
direct data sources.[6]
• She could give questionnaires to students who walk to school using that particular road
asking about their general health/number of days missed through illness
• She could give questionnaires to students who walk to school using other roads asking
about their general health/number of days missed through illness
• She could interview students who walk to school using that particular road asking about
their general health/number of days missed through illness
• She could interview students who walk to school using other roads asking about their
general health/number of days missed through illness
• She could observe/keep a count of traffic coming down the busy road
• She could observe the amount of traffic/keep a count of traffic coming down the other
roads
• She could use sensors to detect the flow of traffic going down the busy road
• She could use sensors to detect the flow of traffic going down the other roads
• She could give questionnaires to residents who live in that particular road asking about
their general health
• She could give questionnaires to residents who live in other roads asking about their
general health
• She could interview residents who live in that particular road asking about their general
health
• She could interview residents who live in other roads asking about their general health.

(b) Describe the drawbacks of gathering data from direct data sources.[5]
• Data gathering may be expensive as other companies may have to be hired to get it
• It may involve having to purchase equipment such as data loggers/computers/printers
• Compared to indirect data sources using direct data sources may be very expensive in
preparing and carrying out the gathering of data
• Costs can be incurred in producing the paper for questionnaires

43
 • It takes longer to gather data than to acquire data from an indirect data source
• By the time the project is complete/all the data is collected the data may be out of date
• The sample size may be small.
(c) Give reasons why the information that Josefine collects may be inaccurate.[4]
• In questionnaires and interviews the questions may not have been very clear and the
respondents may have misunderstood them
• The questions might have been badly phrased…so that the respondent thought they knew
the answer Josefine wanted – resulting in similar answers from different respondents
• Questions may have been open-ended allowing the respondent to produce answers which
could not be quantified
• In a multi-choice type question there may not have been a sufficient number of alternatives
• The respondents selected for the study may not have been very representative
• There is the possibility that Josefine may have made errors when collecting it
• Josefine may have made errors when entering the collected data into the computer
• If the data was collected automatically by sensors the computer/microprocessor may not
have been set up properly to accurately interpret the readings.

A space agency pays scientists whose job is to enable rockets to be sent to the moon. Describe
how batch and real-time processing would be used by the agency and its scientists.[8]
• Batch processing would be used by payroll department to pay wages
• Batch processing would be used if the scientists had collected a very large amount of data
offline and need to now process it all in one go
• Transaction file of hours worked is kept
• Master file of workers details/rate of pay per hour
• Transaction file is used with master file to update master file/produce payslips
• Jobs are set up so they can be run to completion without human interaction
• The input data are collected into batches and each batch is processed as a whole
• Batch processing can occur when the computing resources are less busy
• Batches can be stored up during working hours and then executed during the
evening/whenever the computer is idle
• Batch processing is particularly useful for operations that require the computer or a
peripheral device for an extended period of time
• Real-time processing would be suitable for controlling the rockets
• Real-time processing causes a response within specified time constraints
• Real-time responses are in the order of milliseconds, and sometimes microseconds
• Real-time means that the inputs are processed and produce an output which in turn affects
the input
• Controlling rockets often involves the use of sensors and control systems

44
 • A computer system used for real-time processing is often used 24 hours a day for the same
task
• Real-time data processing gives the scientists the ability to take immediate action for those
times when acting within seconds is significant
• If a rocket is off course for just a short period of time its speed is such it would be off
course by a large distance
• If the rocket veers off course the computer would immediately fire engines to correct it.

A school secretary has just been given some student data to enter into a school’s database of
student records. These include student numbers and dates of birth such as:
13542767 14/07/2000
11987643 13/10/2001
In order to ensure accuracy of the input, the data will be validated. Possible validation checks
which could be used are range checks, check digits and format checks. Analyse the
effectiveness of these checks in validating this data.[8]
• A range check could only be carried out on the student number if you knew the lowest
and highest number.
• Invalid numbers/non-existent numbers might be entered which are within the range so
would be accepted.
• A range check on each part of the date of birth could be carried out.
• Would prevent negative days/days greater than 31 being entered.
• Would prevent months less than 1 or greater than 12 being entered.
• Would prevent years less than 2000 or greater than 2001 from being entered.
• Would not prevent dates like 30/02/2000 or 31/06/2000 being entered.
• Check digit can only be carried out on long strings of numbers – Student number is not
really long enough.
• Check digit would pick up transposed numbers which none of the other checks would.
• Date of birth is not in correct format for a check digit to be used.
• Format check could be used on date of birth nn/nn/nnnn.
• Format check would not pick up nonsensical dates of birth such as 68/99/3000.
• Format check would pick up data entry errors such as a three digit day/month/single digit
day/month/two digit year.

45
A supermarket uses a computer to automatically update stock levels. Each record in the
Product file contains the fields shown.

When the Number_in_stock of a product item falls to the Reorder_level, that product must
be reordered. The Reorder_quantity is the number of items of the product that must be
reordered. The Supplier file contains the contact details of all the suppliers.

Only some of the records in the Product and Supplier files are shown.
Describe, using the Oaters record as an example, the steps the computer would follow to
update the Product file after a point of sale terminal reads the bar code for a packet of
Oaters.[7]
• The computer searches for the bar code number 5022476130067 in the product file
• When the matching record is found, the number in stock, 131, is reduced by one to 130
• The number in stock, 130, is now compared with the re-order level, 130
• If the number in stock is equal to the reorder level…
• … which it is, then the computer creates an order automatically
• The computer reads the reorder quantity, 250, needed for the product
• It reads the supplierID, B671841, for Oaters
• It searches the supplier file for the record corresponding to the supplier ID, B671841, read
from the Product file
• The order/e-mail is automatically sent to the supplier…
• …using the supplier’s contact details from the Supplier file, js@[Link]

46