2025 CCEA A-Level Digital Technology 2650 Practice Paper with Answers

(a) MAC stands for Media Access Control.
(b) A MAC address is a unique physical (hardware) address assigned to a device's network interface card by its manufacturer. Its purpose is to identify a specific device uniquely on a local network, so that data frames sent across the network can be correctly delivered to the intended device.

(a) 1 mark: 'Media Access Control' correctly given. (b) 1 mark: correctly describes a MAC address as a unique hardware/physical address assigned by the manufacturer; 1 mark: correctly describes its purpose (identifying a specific device on a local network for correct data delivery); [3]

A switched hub, or switch, receives data packets arriving on the network and examines the destination MAC address of each packet. It then forwards the packet only to the specific port (and therefore the specific device) that the packet is addressed to, rather than broadcasting the packet to every device connected to it. This targeted forwarding reduces unnecessary network traffic and the number of data collisions on the network, making the network more efficient than one using a basic, unswitched hub, which broadcasts every packet to all connected devices regardless of its intended destination.

1 mark: correctly describes the switch examining the destination MAC address/forwarding packets; 1 mark: correctly describes forwarding only to the intended device/port rather than broadcasting to all; 1 mark: correctly explains the resulting benefit (reduced traffic/collisions, improved efficiency); [3]

(a) A primary key is a field, or combination of fields, within a database table whose value uniquely identifies each individual record in that table. No two records in the table may share the same primary key value, and a primary key cannot be left null (empty).
(b) A foreign key is a field within one table that refers to, and must match the value of, the primary key of another (related) table. Its purpose is to create and enforce a link (relationship) between the two tables, allowing data to be connected across them without unnecessary duplication.

(a) 1 mark: correctly describes a primary key as uniquely identifying each record; 1 mark: correctly notes it cannot be null/duplicated. (b) 1 mark: correctly describes a foreign key as referencing the primary key of another table; 1 mark: correctly explains its purpose (creating/enforcing a relationship/link between tables); [4]

The knowledge base stores the facts and rules relevant to a specific subject domain (for example, symptoms and diagnoses in a medical expert system), built up from the knowledge of human experts in that field. It represents the expert system's specialist knowledge, separate from the reasoning process itself.

The inference engine is the part of the expert system that applies logical reasoning to the facts and rules stored in the knowledge base, combined with information provided by the user, in order to draw conclusions and generate a recommendation, diagnosis or decision. It effectively mimics the step-by-step reasoning process a human expert would use to reach a conclusion from the same facts and rules.

1 mark: knowledge base correctly described as storing facts/rules for the domain; 1 mark: correctly notes this knowledge is derived from human experts; 1 mark: inference engine correctly described as applying logical reasoning/rules to facts; 1 mark: correctly explains this generates a conclusion/recommendation, mimicking human expert reasoning; [4]

The Computer Misuse Act exists to protect computer systems and the data held on them from unauthorised access and interference. It makes it a criminal offence to: gain unauthorised access to computer material or systems (commonly known as hacking); gain unauthorised access to a computer system with the intent to commit or facilitate a further offence; and make unauthorised modifications to computer material, for example by creating or spreading a virus, or deleting or altering data without permission. Its purpose is to deter and provide a legal basis for prosecuting people who deliberately access or interfere with computer systems and data without authorisation.

1 mark: correctly identifies unauthorised access (hacking) as an offence covered; 1 mark: correctly identifies unauthorised access with intent to commit further offences as covered; 1 mark: correctly identifies unauthorised modification of data/programs as covered; 1 mark: correctly states the overall purpose (protecting systems/data from unauthorised access and interference); [4]

(a) Artificial intelligence (AI) refers to the ability of a computer system or machine to perform tasks that would normally require human intelligence, such as learning from experience, reasoning, solving problems, understanding language, or recognising patterns.
(b) The Turing test, proposed by Alan Turing, suggests that a machine can be considered to exhibit human-level intelligence if a human evaluator, communicating with both a human and a machine (without being told which is which), is unable to reliably tell which respondent is the machine, based purely on their conversational responses. This is significant because it provides a practical, observable, behaviour-based test for judging whether a machine's behaviour is indistinguishable from a human's, and therefore whether it could be considered intelligent, rather than requiring philosophers or computer scientists to first agree on a precise theoretical definition of what 'intelligence' actually is.

(a) 1 mark: AI correctly defined as a computer system performing tasks normally requiring human intelligence; 1 mark: at least one valid example of such a task given (learning/reasoning/problem-solving/language understanding/pattern recognition). (b) 1 mark: Turing test correctly described (human evaluator unable to distinguish machine from human respondent); 1 mark: correctly explains its significance (practical/behavioural benchmark avoiding need for a precise definition of intelligence); [4]

(a) In a client-server (server-based) network, a central, dedicated server manages the network's shared resources, such as files, printers and user accounts, and enforces security. Client computers on the network send requests to this server and receive the resources or services they need from it. In a peer-to-peer (P2P) network, by contrast, there is no dedicated central server; instead, all computers (peers) on the network are connected as equals, and each can share its own resources (such as files) directly with any other peer on the network, and can also access resources shared by other peers.
(b) One advantage of a server-based network over a peer-to-peer network is that it provides centralised control over network security and user access, and allows data to be backed up and managed in one central location (the server), rather than data being scattered across many individual peer computers, each managed separately and potentially inconsistently.

(a) 1 mark: server-based network correctly described (central server manages resources, clients request from it); 1 mark: further valid detail given (e.g. security/user account management); 1 mark: peer-to-peer network correctly described (computers connected as equals, sharing resources directly); 1 mark: further valid detail given (e.g. no dedicated central server). (b) 1 mark: valid advantage identified (centralised security/access control, or centralised backup/management); 1 mark: advantage correctly explained/developed; [6]

(a) In a star network topology, every device on the network is connected individually, by its own dedicated cable, to a central node, such as a switch or hub. All data transmitted between devices passes through this central node, which directs it to the correct destination device.
(b) In terms of reliability, star topology is generally more robust than bus topology at the level of individual devices: if a single cable or device fails in a star network, only that one device loses its connection, and the rest of the network continues to operate normally. In a bus topology, by contrast, all devices share a single central cable (the 'bus'); if this shared cable is damaged or develops a fault anywhere along its length, the entire network fails, since all devices depend on that same cable. However, a star network introduces its own single point of failure at the central node: if the central switch or hub itself fails, every device connected to it loses network connectivity simultaneously, which is a significant reliability risk that a simple bus topology does not have in quite the same concentrated way.

(a) 1 mark: correctly describes each device connected individually to a central node; 1 mark: correctly identifies the central node (switch/hub); 1 mark: correctly notes all data passes through the central node. (b) 1 mark: correctly explains star topology isolates failure of a single device/cable, unlike bus topology; 1 mark: correctly explains bus topology's single shared cable causes total network failure if damaged; 1 mark: correctly identifies the central node as a single point of failure/limitation of star topology; [6]

(a) An IP address is a unique logical address assigned to a device connected to a network, such as the internet. Its purpose is to identify and locate a specific device so that data being transmitted can be correctly routed to its intended destination, potentially across many interconnected networks.
(b) An IP address and a MAC address serve different, complementary purposes in delivering data correctly. The IP address is used to identify which network, and ultimately which device, data needs to reach, and is used by routers to direct (route) data across potentially many different interconnected networks (such as the internet) towards its final destination network. Once the data arrives at the correct local network, however, it must be delivered to the exact correct physical device on that network; this final delivery uses the MAC address, which uniquely identifies the specific network interface/device on that local network. Both addresses are therefore needed because they operate at different levels of the delivery process: the IP address enables data to be routed correctly between different networks, while the MAC address enables the final, precise delivery to the correct physical device once the data has reached the right local network.

(a) 1 mark: IP address correctly described as a unique logical address identifying a device; 1 mark: correctly links this to routing/locating the device on a network. (b) 1 mark: correctly explains the IP address's role in routing data between/across networks; 1 mark: correctly explains the MAC address's role in identifying the specific device within the final local network; 1 mark: correctly explains these operate at different levels (inter-network routing vs local device delivery); 1 mark: correctly concludes both are needed together for data to be fully and correctly delivered; [6]

(a) Communication protocols are needed so that different devices and systems, which may be made by different manufacturers and run different software, can successfully communicate with one another. A protocol is an agreed common set of rules governing how data is formatted, transmitted, received and checked for errors, ensuring that all devices involved in a communication interpret and handle the data in the same, compatible way.
(b) TCP/IP is a suite of two closely related protocols that work together to enable reliable communication across networks. The Internet Protocol (IP) is responsible for addressing data (using IP addresses) and routing data packets across networks to their correct destination. The Transmission Control Protocol (TCP) is responsible for breaking data down into smaller packets before it is sent, ensuring these packets are delivered reliably and in the correct order at the destination, and reassembling them into the original data; TCP also detects lost or corrupted packets and requests that they be resent, ensuring reliable overall data transfer.
(c) One other named communication protocol is Wi-Fi, a wireless communication standard that allows devices to connect to and communicate over a network without physical cables, by transmitting data using radio waves over short-to-medium distances.

(a) 1 mark: correctly explains protocols allow devices/systems from different manufacturers to communicate; 1 mark: correctly explains a protocol is an agreed set of rules for formatting/transmitting/checking data. (b) 1 mark: correctly describes IP's role (addressing/routing packets to their destination); 1 mark: correctly describes TCP's role (breaking data into packets, ensuring reliable/ordered delivery); 1 mark: correctly describes error detection/retransmission of lost packets. (c) 1 mark: a valid protocol named (other than TCP/IP, e.g. Wi-Fi/Bluetooth/Ethernet/VoIP/RFID); 1 mark: its purpose correctly described; [7]

(a) A parity bit is an extra bit added to a group of data bits before transmission, chosen so that the total number of 1-bits in the group (data bits plus the parity bit) is always even (if using even parity) or always odd (if using odd parity). When the data is received, the receiver counts the number of 1-bits in the received group and checks whether this count matches the agreed parity rule. If the received data does not have the expected (even or odd) parity, an error is detected, indicating that one or more bits have likely been corrupted during transmission.
(b) A checksum is a value calculated by the sender from the data being transmitted, for example by adding together numerical values representing the data. This checksum value is transmitted alongside the actual data. On receipt, the receiver performs the identical calculation on the data it has received, and compares its own calculated checksum with the checksum value that was transmitted; if the two values do not match, an error is detected, and the data can be flagged as corrupted (and potentially requested again).
One advantage a checksum has over a single parity bit is that, because it is calculated across a larger block of data using a more complex calculation, it is generally better able to detect multiple-bit errors within that block. A single parity bit, by contrast, can fail to detect certain error patterns — for example, if exactly two bits within the group are corrupted, the overall parity can remain unchanged, so the error would go undetected — making checksums generally more reliable overall at detecting transmission errors.

(a) 1 mark: correctly describes a parity bit added so the total number of 1-bits is even/odd; 1 mark: correctly describes the receiver checking the received parity against the expected parity; 1 mark: correctly explains a mismatch indicates an error/corrupted data. (b) 1 mark: correctly describes the sender calculating a checksum from the data; 1 mark: correctly describes the receiver recalculating and comparing the checksum; 1 mark: correctly explains a mismatch indicates an error; 1 mark: valid, correctly explained advantage of a checksum over a single parity bit (better detection of multiple-bit errors); [7]

(a) An expert system's structure typically includes a user interface, an inference engine and a knowledge base, working together. The user interface allows the user to interact with the system, typically by answering a structured series of questions or entering relevant data, and it presents the system's eventual output, recommendation or diagnosis back to the user. The knowledge base stores the specialist facts and rules relevant to the system's particular subject domain (for example, symptoms and possible diagnoses in a medical expert system), built up from the knowledge of human experts in that field. The inference engine applies logical reasoning to the facts and rules held in the knowledge base, combined with the information entered by the user through the interface, in order to work through the problem and reach a conclusion, recommendation or diagnosis, in a way intended to mimic the reasoning process a human expert would use.
(b) Heuristics are 'rules of thumb', or general guidelines derived from the experience of human experts, used by an expert system to make a reasonable, practical judgement or to narrow down the range of likely possibilities relatively quickly, in situations where there is no single fixed, certain rule that can be applied with complete confidence. This allows an expert system to still reach a plausible, useful conclusion even when working with uncertain, incomplete or ambiguous information, in a similar way to how an experienced human expert might rely on their own accumulated judgement in such situations.

(a) 1 mark: user interface correctly described (user input/output of recommendations); 1 mark: knowledge base correctly described (stores domain facts/rules from human experts); 1 mark: inference engine correctly described (applies logical reasoning to facts/rules); 1 mark: correctly explains the inference engine mimics human expert reasoning to reach a conclusion. (b) 1 mark: heuristics correctly described as 'rules of thumb'/general guidelines; 1 mark: correctly explains they are derived from human expert experience; 1 mark: correctly explains their purpose (reaching a plausible conclusion under uncertainty/incomplete information); [7]

(a) Robots used in a commercial situation such as a car manufacturing production line typically combine several key components of technology. Sensors are used to detect relevant information, such as the precise position of a component to be worked on, or the presence of an object in the robot's working area. Actuators (often electric motors) provide the physical movement needed to move the robotic arm and carry out the mechanical action required, such as welding a joint or applying paint. A control system, running pre-programmed software, directs the robot's movements and decisions, using the information received from its sensors to carry out its programmed task accurately. These components are typically combined within a robotic arm, fixed to or moving along the production line, which performs a repetitive, precise task, such as welding, spray painting or component assembly, automatically and continuously.
(b) The use of robotics in this commercial situation brings clear benefits: robots can operate continuously, without tiring, taking breaks, or needing to be paid overtime, and can perform highly repetitive tasks with a level of precision and consistency that is difficult for human workers to match over long periods, improving both productivity and the consistency of product quality. Robots can also safely work in hazardous conditions unsuitable for humans, such as amid welding sparks or paint fumes, improving workplace safety. However, there are also drawbacks: the initial cost of purchasing, installing and programming robotic equipment can be very high; the introduction of robots can lead to job losses among human workers who previously carried out the tasks now automated; and robots generally lack the flexibility and adaptability of human workers, meaning they can struggle to handle unexpected or highly varied situations without being reprogrammed.

(a) 1 mark: sensors correctly described (detecting position/presence of objects); 1 mark: actuators/motors correctly described (providing physical movement); 1 mark: control system/software correctly described (directing movement based on sensor input); 1 mark: correctly links these components to performing a repetitive, precise commercial task. (b) 1 mark: valid benefit(s) identified and explained (continuous operation/precision-consistency/hazardous environment safety); 1 mark: valid drawback(s) identified and explained (high cost/job losses/lack of flexibility); 1 mark: response shows a genuinely balanced evaluation covering both sides; [7]

(a) The Data Protection Act sets out a framework of principles governing how organisations must handle personal data relating to individuals. Its main features include requirements that personal data be processed fairly and lawfully; be collected only for specified, legitimate purposes and not further processed in a way incompatible with those purposes; be adequate and relevant, and not excessive, for the purpose for which it is held; be accurate and kept up to date where necessary; not be retained for longer than is necessary for its stated purpose; and be kept secure, with appropriate protection against unauthorised or unlawful processing, loss, damage or destruction. The Act also grants individuals certain rights in relation to their own personal data, including the right to access the data an organisation holds about them.
(b) One way the Data Protection Act may impact an organisation that holds personal data about its customers is by requiring it to implement appropriate technical and organisational security measures to protect that data from unauthorised access, loss or damage — for example, using encryption to protect stored data, restricting staff access to only the data they need for their role, and training staff in proper data handling procedures. The Act may also impact the organisation by requiring it to review and limit what personal data it collects and how long it retains it, ensuring data collection is genuinely necessary and for a clearly specified, legitimate purpose, which can require changes to existing data collection and storage practices and add administrative or compliance costs to the organisation's operations.

(a) 1 mark: correctly states data must be processed fairly/lawfully, for specified purposes; 1 mark: correctly states data must be adequate/relevant/accurate/not excessive; 1 mark: correctly states data must not be kept longer than necessary and must be kept secure; 1 mark: correctly notes individuals have rights over their own data (e.g. right of access). (b) 1 mark: valid impact identified (requirement to implement security measures, or to limit data collection/retention); 1 mark: impact explained with specific detail; 1 mark: correctly links this to a consequence for the organisation (cost/changed practices); [7]

Mobile phone communication is supported by a coordinated network of technology. Mobile phone masts transmit and receive radio signals to and from mobile devices within their surrounding geographical area, forming the basic connection point between a mobile device and the wider telephone network. Each mast's coverage area is known as a cell; by dividing a wider geographical region into many smaller cells, each served by its own mast, the network can reuse the same limited set of radio frequencies in different, non-adjacent cells without those signals interfering with one another, allowing many more users to be served overall than a single, very large coverage area could support.

As a mobile device (such as a phone in a moving car) travels from the coverage area of one cell into the coverage area of a neighbouring cell during an active call or data connection, a handoff takes place: the connection is automatically transferred from the mast serving the original cell to the mast serving the new cell, without the user's call or connection being dropped. This process is coordinated by the base station controller, which manages and coordinates a number of mobile phone masts within a wider region, controlling functions such as handoffs between the masts under its control, and allocating the available radio channels to calls and data connections as needed.

1 mark: mobile phone masts correctly described (transmitting/receiving radio signals to/from devices); 1 mark: cells correctly described (the coverage area of a mast); 1 mark: correctly explains why dividing coverage into cells allows frequency reuse; 1 mark: handoff correctly described (transfer of an active connection between cells/masts); 1 mark: correctly explains handoff occurs without the connection being dropped as the device moves; 1 mark: base station controller correctly described as managing/coordinating multiple masts; 1 mark: correctly describes at least one specific function of the base station controller (handoffs/channel allocation); 1 mark: overall coherent, technically accurate description linking all four named elements together; [8]

(a) Cloud computing refers to the delivery of computing services, such as data storage, processing power and software applications, over the internet. These services are hosted on remote servers owned and managed by a third-party provider, rather than being run on a business's own local hardware and infrastructure.
(b) One service cloud computing can provide to businesses is data storage: files and data can be stored remotely on the cloud provider's servers, and accessed over the internet from any location with a suitable internet connection, rather than being stored only on local hardware at a single site. A second service is remotely hosted applications (virtualised software): businesses can run software applications that are hosted on the cloud provider's servers and accessed via the internet, often through a web browser, without needing to purchase, install and maintain the full software themselves on each local computer.
(c) One business benefit of using cloud computing is reduced upfront capital cost: rather than purchasing, installing and maintaining its own expensive physical servers and infrastructure, a business typically pays the cloud provider a subscription or usage-based fee, and can easily increase or decrease the resources it uses as its needs change, without needing to invest in new hardware itself.

(a) 1 mark: cloud computing correctly described as delivering computing services over the internet; 1 mark: correctly notes these are hosted on remote, third-party servers rather than local hardware. (b) 1 mark: first valid service named (e.g. data storage/email/backup); 1 mark: first service correctly described; 1 mark: second valid, distinct service named (e.g. remotely hosted applications/virtualised software); 1 mark: second service correctly described. (c) 1 mark: valid business benefit named (reduced capital cost/scalability); 1 mark: benefit correctly explained; [8]

(i) 1NF: The data already has atomic (single-valued) attributes with no repeating groups within a row, so 1NF requires identifying a key that uniquely identifies each record. Since a student cannot book more than one lesson on the same date, the composite key (StudentID, LessonDate) uniquely identifies each row: Lesson(StudentID, StudentName, InstructorID, InstructorName, LessonDate, LessonTime, VehicleReg), with composite primary key (StudentID, LessonDate).

(ii) 2NF: 2NF requires 1NF plus no partial dependency (no non-key attribute depending on only part of a composite key). StudentName depends only on StudentID, which is only part of the composite key (StudentID, LessonDate), not on the whole key — this is a partial dependency, so StudentName is moved to a new table:
Student(StudentID [PK], StudentName)
Lesson(StudentID [PK, FK to Student], LessonDate [PK], InstructorID, InstructorName, LessonTime, VehicleReg)

(iii) 3NF: 3NF requires 2NF plus no transitive dependency (no non-key attribute depending on another non-key attribute rather than directly on the primary key). In the Lesson table, InstructorName depends on InstructorID, not directly on the (StudentID, LessonDate) key — this is a transitive dependency, so InstructorName is moved to its own table:
Student(StudentID [PK], StudentName)
Instructor(InstructorID [PK], InstructorName)
Lesson(StudentID [PK, FK to Student], LessonDate [PK], InstructorID [FK to Instructor], LessonTime, VehicleReg)

(iv) The ER model has three entities: Student, Instructor and Lesson. Student has a one-to-many relationship with Lesson (one student can book many lessons; each lesson belongs to exactly one student). Instructor has a one-to-many relationship with Lesson (one instructor can teach many lessons; each lesson has exactly one instructor). There is no direct many-to-many relationship between Student and Instructor in this model — although a student may, over time, have lessons with many different instructors, and an instructor may teach many different students, this many-to-many relationship is correctly resolved by the Lesson entity, which acts as a linking (associative) entity connected to both Student and Instructor by one-to-many relationships.

(i) 1 mark: correctly identifies/justifies a suitable primary key (composite StudentID+LessonDate) for the flat table; 1 mark: table correctly shown with atomic attributes/no repeating groups (1NF achieved). (ii) 1 mark: correctly identifies StudentName as a partial dependency (depends only on part of the composite key); 1 mark: correctly creates a separate Student table (StudentID PK, StudentName); 1 mark: correctly retains the Lesson table with StudentID as a foreign key. (iii) 1 mark: correctly identifies InstructorName as a transitive dependency (via InstructorID); 1 mark: correctly creates a separate Instructor table (InstructorID PK, InstructorName); 1 mark: correctly retains the Lesson table with InstructorID as a foreign key; 1 mark: overall three correctly structured 3NF tables with appropriate PKs/FKs. (iv) 1 mark: three entities correctly shown (Student, Instructor, Lesson); 1 mark: Student-Lesson relationship correctly shown as one-to-many; 1 mark: Instructor-Lesson relationship correctly shown as one-to-many; 1 mark: relationships correctly labelled/notated (e.g. PK/FK links or cardinality shown); 1 mark: correctly avoids any direct many-to-many relationship, with Lesson explicitly recognised as resolving the Student-Instructor many-to-many link; [14]

The SQL command uses CREATE TABLE, followed by the table name and a bracketed list of field definitions, each giving the field name and its data type, with PRIMARY KEY used to designate the primary key field:

CREATE TABLE Instructor (InstructorID TEXT PRIMARY KEY, InstructorName TEXT);

1 mark: CREATE TABLE keyword and correct table name 'Instructor'; 1 mark: InstructorID field correctly defined with an appropriate text data type; 1 mark: InstructorID correctly designated as the PRIMARY KEY; 1 mark: InstructorName field correctly defined with an appropriate text data type; [4] (case-insensitive keywords accepted; correct clause order required)

The SQL command uses INSERT INTO, followed by the table name and the list of fields being populated, then VALUES followed by the corresponding data values in the same order, with text values enclosed in quotation marks:

INSERT INTO Instructor (InstructorID, InstructorName) VALUES ('I03', 'A. Wilson');

1 mark: INSERT INTO keyword and correct table name 'Instructor'; 1 mark: correct field list given (InstructorID, InstructorName) in matching order; 1 mark: VALUES keyword used with correct values in matching order; 1 mark: text values correctly enclosed in quotation marks; [4] (case-insensitive keywords accepted; correct clause order and quoting required for full marks)

The SQL command uses UPDATE, followed by the table name, then SET to specify the field and its new value, and WHERE to specify the condition identifying which record(s) to update:

UPDATE Instructor SET InstructorName = 'R. Smyth' WHERE InstructorID = 'I01';

1 mark: UPDATE keyword and correct table name 'Instructor'; 1 mark: SET clause correctly used with InstructorName set to the new value in quotes; 1 mark: WHERE clause correctly used to restrict the update to InstructorID 'I01'; [3] (case-insensitive keywords accepted; correct clause order and quoting required for full marks)

The SQL command uses DELETE FROM, followed by the table name, then WHERE to specify the condition(s) identifying which record(s) to delete, combining two conditions with AND since both must be true to identify the correct single record:

DELETE FROM Lesson WHERE StudentID = 'S002' AND LessonDate = '2025-01-11';

1 mark: DELETE FROM keyword and correct table name 'Lesson'; 1 mark: WHERE clause correctly used with both StudentID and LessonDate conditions correctly given in quotes; 1 mark: AND correctly used to combine both conditions; [3] (case-insensitive keywords accepted; correct clause order and quoting required for full marks)

The SQL command uses SELECT, followed by the list of fields to be retrieved, then FROM to specify the table, and WHERE to specify the condition restricting which records are returned:

SELECT StudentName, LessonDate FROM LessonView WHERE InstructorID = 'I01';

1 mark: SELECT keyword with the correct fields (StudentName, LessonDate) specified; 1 mark: FROM keyword with the correct table name 'LessonView'; 1 mark: WHERE clause correctly used to restrict to InstructorID 'I01'; [3] (case-insensitive keywords accepted; correct clause order and quoting required for full marks)

(a) A data dictionary entry for a database field typically includes components such as: the field name; the data type of the field (e.g. text, number, date); the field's length or size; any validation rule applied to the field (e.g. a range check); and a description of the field's purpose. Any two of these would be valid.
(b) Query By Example (QBE) allows users to construct database queries visually or graphically, typically by selecting the fields they want and entering example search criteria into a grid-based interface, without needing to learn or write SQL syntax directly. This makes QBE generally more accessible and easier to use for non-technical users than writing SQL. However, QBE is generally less flexible and less powerful than SQL when constructing more complex queries, such as those involving complex joins between multiple tables or requiring precise control over the query's logic; experienced users can typically achieve this greater precision and complexity more effectively by writing SQL directly.

(a) 1 mark each for any two valid data dictionary components (field name/data type/length/validation rule/description), up to 2 marks. (b) 1 mark: correctly describes QBE as a visual/graphical query method not requiring SQL syntax, with an accessibility benefit stated; 1 mark: correctly identifies a limitation of QBE relative to SQL (less flexible/powerful for complex queries); [4]

Expert systems can bring genuine advantages to medical diagnosis. Unlike a human doctor, an expert system applies its stored medical knowledge and rules completely consistently every time, without being affected by fatigue, time pressure or personal bias, and it can incorporate an extremely large and detailed knowledge base drawn from the combined expertise of many specialists, potentially covering rarer conditions that an individual doctor may only rarely encounter in their own career. This can make expert systems a valuable decision-support tool, particularly in settings where access to specialist human expertise is limited, helping to identify possible diagnoses that might otherwise be missed and supporting more junior or general practitioners.

However, expert systems also have significant limitations and risks compared with a human doctor. A human doctor can draw on intuition, experience and clinical judgement to interpret unusual, ambiguous or atypical presentations of a condition, whereas an expert system's reasoning is entirely bound by the rules and facts explicitly programmed into its knowledge base, and it may fail to reach a correct conclusion for cases that fall outside, or do not neatly fit, that knowledge base. An expert system also lacks a human doctor's ability to communicate empathetically with a patient, take into account contextual or emotional factors relevant to a diagnosis, or exercise the kind of holistic clinical judgement a doctor builds up over years of varied practical experience. There is also a risk that a knowledge base can become outdated if not actively and regularly maintained as medical knowledge advances, and a risk that clinicians could become over-reliant on an expert system's output without applying appropriate independent human oversight and judgement.

Overall, expert systems are most effectively used as a supportive decision-aid alongside, rather than as a full replacement for, the judgement of a qualified human doctor, combining the consistency and breadth of the expert system's knowledge with the adaptability, intuition and holistic judgement that only an experienced human clinician can currently provide.

Level 3 (5-6 marks): Thorough, balanced evaluation covering multiple, well-developed advantages AND disadvantages of expert systems compared with a human doctor, reaching a clear, well-reasoned overall judgement; excellent, precise technical terminology; fluent, well-organised prose. Level 2 (3-4 marks): Sound evaluation covering some advantages and disadvantages with reasonable technical terminology, but limited in balance, depth or overall judgement. Level 1 (1-2 marks): Basic identification of a small number of points with limited discussion or comparison; poor use of specialist vocabulary. [6]

Both the Computer Misuse Act and the Data Protection Act make important contributions to protecting organisations and individuals from computer-related crime and misuse of personal data. The Computer Misuse Act provides a clear legal basis for prosecuting individuals who gain unauthorised access to computer systems or make unauthorised modifications to data, such as spreading a virus; simply having this offence clearly defined in law acts as a deterrent to some potential offenders, and gives organisations and law enforcement a clear legal route to pursue when an attack occurs. Similarly, the Data Protection Act sets out clear, enforceable principles obliging organisations to handle personal data fairly, securely and only for legitimate purposes, and gives individuals meaningful legal rights over data held about them, encouraging organisations to take data protection seriously and invest in appropriate security measures.

However, both Acts also have real limitations in practice. Offences under the Computer Misuse Act, such as hacking, can be very difficult to detect, and even more difficult to attribute to a specific individual with sufficient evidence for a prosecution, particularly when attacks originate from outside the UK and are carried out anonymously using techniques designed to hide the attacker's identity; this significantly limits how effectively the Act can be enforced in practice, even though the offence itself is clearly defined in law. More broadly, both pieces of legislation rely on offenders being detected and successfully prosecuted, and on organisations genuinely implementing the security measures and data handling practices required to comply with the law; the law itself cannot guarantee that an organisation's technical security measures are actually effective, or that a determined and skilled attacker will be caught. Technology and attack methods also continue to evolve rapidly, and there is always a risk that legislation, once written, can struggle to keep pace with genuinely new types of computer misuse or new ways personal data can be exploited.

Overall, while both Acts provide an important and necessary legal framework and deterrent, and give victims and regulators a route to pursue action, their real-world effectiveness in fully protecting organisations and individuals also depends heavily on practical enforcement capability, international cooperation, and organisations' own genuine efforts to implement strong security and data protection practices — legislation alone cannot guarantee protection.

Level 3 (5-6 marks): Thorough, balanced evaluation of BOTH Acts, covering well-developed strengths AND limitations with specific detail, reaching a clear, well-reasoned overall judgement; excellent, precise technical/legal terminology; fluent, well-organised prose. Level 2 (3-4 marks): Sound evaluation of both Acts with some strengths and limitations identified, but limited in balance or depth. Level 1 (1-2 marks): Basic identification of a small number of points about the Acts with limited discussion or comparison; poor use of specialist vocabulary. [6]

Wireless transmission media offer clear benefits for a company's internal network: they remove the need for physical cabling to every device, making installation more flexible and often cheaper, and they readily support mobile and portable devices (such as laptops and smartphones) moving around the workplace. However, wireless signals travel through the air and can potentially be intercepted by any unauthorised device within range, meaning strong encryption and access controls are essential to maintain adequate security; even with these measures, wireless networks are often considered inherently more vulnerable to interception than a fully wired alternative. Wireless bandwidth is also generally lower, and more variable and susceptible to interference (for example from other wireless devices, thick walls, or distance from the access point), than a dedicated wired connection.

Fibre optic transmission media, by contrast, offer very high bandwidth, capable of transmitting extremely large volumes of data at high speed over long distances with very little signal loss or degradation. Fibre optic cables are also generally more secure than wireless transmission, since intercepting a signal from within a fibre cable typically requires direct physical access to the cable itself, which is far more difficult to achieve undetected than simply intercepting a wireless signal from within range. However, fibre optic cabling is more expensive to purchase and install than either wireless or copper cabling, and, unlike wireless, it requires a physical cable to be run to every connected device, making it far less suited to supporting mobile or frequently relocated devices.

For a company's internal network, the most appropriate solution is likely to combine both: fibre optic cabling for the high-bandwidth, security-critical core of the network (such as connections between servers and switches), with wireless access used to flexibly and conveniently extend network access to mobile devices and less security-critical areas, provided it is properly secured with strong encryption.

Level 3 (5-6 marks): Thorough, balanced evaluation of BOTH wireless AND fibre optic media, covering security AND bandwidth for each, with well-developed detail, reaching a clear, well-reasoned overall recommendation appropriate to a company's network; excellent, precise technical terminology; fluent, well-organised prose. Level 2 (3-4 marks): Sound evaluation of both media types with some coverage of security and bandwidth, but limited in balance or depth. Level 1 (1-2 marks): Basic identification of a small number of points about wireless/fibre optic media with limited discussion or comparison; poor use of specialist vocabulary. [6]

In terms of cost-effectiveness, introducing robotics onto a car manufacturing production line requires a very high initial capital investment, to purchase the robotic equipment itself and to install and programme it correctly for the specific tasks required. However, once operational, robots generally have lower ongoing labour costs than an equivalent number of human workers performing the same repetitive tasks, since they do not require wages, breaks or holiday pay, and can operate continuously across multiple shifts. For a high-volume production line manufacturing large numbers of vehicles over a long period, this combination of high upfront cost but lower ongoing running cost and increased output can make robotics genuinely cost-effective over the medium-to-long term, even though the initial investment is substantial.

In terms of product quality and consistency, robots can perform highly repetitive tasks, such as welding or spray painting, with a level of precision that does not vary due to tiredness, distraction or human error in the way a human worker's performance might vary over a long shift. This generally results in a very high and highly consistent standard of product quality across every vehicle produced on the line. However, robots are typically far less able than a skilled, experienced human worker to exercise fine judgement or adapt smoothly to unusual or unexpected variations in a task, meaning quality could actually suffer on aspects of production that genuinely require this kind of human adaptability, unless the robot has been very carefully programmed to handle the specific range of situations it will encounter.

Overall, robotics tends to be most cost-effective and most beneficial for product quality/consistency on high-volume, highly repetitive tasks within car manufacturing, while tasks still requiring fine human judgement or frequent adaptation may remain more effectively performed, or closely overseen, by skilled human workers.

Level 3 (5-6 marks): Thorough, balanced evaluation covering BOTH cost-effectiveness AND product quality/consistency, with well-developed detail on advantages and limitations for each, reaching a clear, well-reasoned overall conclusion; excellent, precise technical terminology; fluent, well-organised prose. Level 2 (3-4 marks): Sound evaluation covering both cost-effectiveness and quality/consistency, but limited in balance or depth. Level 1 (1-2 marks): Basic identification of a small number of points with limited discussion; poor use of specialist vocabulary. [6]