OCR GCSE Computer Science Computer systems (01), June 2025: Question 4

29 marks · Medium difficulty · Short Answer

Explain network types, topologies, performance factors, cloud storage drawbacks, DNS URL resolution, IPv4 address validity, and Data Protection Act requirements for a youth centre network.

Practise this question

Question

Question 4 displays multiple sub-questions regarding a youth centre's computer network. Part (a) asks for two reasons the network is a LAN not a WAN. Part (b) asks to describe a mesh topology and give one benefit and one drawback compared to a star topology. Part (c) asks for benefits of adding Wi-Fi, and includes a table to explain how bandwidth and number of concurrent users affect network performance. Part (d) asks for drawbacks of cloud storage. Part (e) asks for a connection device (router), includes a tick-box table to identify four IPv4 addresses as valid or invalid, and asks to describe the process of DNS resolving a URL to an IP address. Part (f) asks for relevant legislation (Data Protection Act) and the steps to follow.
Question text

4 A youth centre is creating a network with 20 computers in a single building that will be connected

in a Local Area Network (LAN).

(a) Identify two reasons why this network will be a LAN and not a Wide Area Network (WAN).

1 …

2 …

[2]

(b) The network design connects the computers in a mesh topology.

(i) Describe what is meant by a mesh topology.

… [2]

(ii) Describe one benefit and one drawback of the network using a mesh topology instead of a star

topology.

Benefit …

Drawback …

9 [4]

(c) The network design originally only had wired connections. The design is updated to include

wireless connections via Wi-Fi.

(i) Explain the benefits to the youth centre of also providing Wi-Fi connections.

… [3]

(ii) The decision to use wired and/or wireless connections can affect the performance of the network.

Complete the table by explaining how each factor can affect the performance of a network.

Factor How it affects performance

Bandwidth

Number of users

accessing the …

network at the

same time …

[4]

(d) The youth centre is going to store data about users and events using cloud storage.

Describe the drawbacks to the youth centre of storing the data on the cloud.

… [5]

(e) Users will have access to the internet.

(i) Identify one device that will be required to allow the LAN to connect to the internet.

… [1]

(ii) The computers will be allocated an IPv4 address.

Tick (✓) one box on each row to identify if the IPv4 address is valid or invalid.

IPv4 Valid Invalid

address (✓) (✓)

192.154.21.2

258.0.0.3

56.1.2.66.1

251.58.3.7

[4]

(iii) When a user wants to access a website they enter the URL into the address bar of a web

browser.

Describe the steps that take place to convert the URL into the website’s IP address.

… [4]

(f) Identify one piece of legislation that the youth centre will need to follow when storing users’ data

and describe the steps they need to take to meet the requirements of this legislation.

Legislation …

Steps the youth centre needs to follow …

[4]

Mark scheme

Show the mark scheme The mark scheme outlines answers for parts 4(a) to 4(f). Part (a) awards marks for small geographic location, owned hardware, and not connecting other networks. Part (b)(i) awards marks for interconnected devices without central control; (b)(ii) details benefits like fault tolerance and scalability, and drawbacks like cabling complexity and security/control issues. Part (c)(i) covers Wi-Fi benefits such as portability and connecting mobile devices; (c)(ii) covers bandwidth and user congestion. Part (d) accepts reliance on internet, recurring costs, and loss of data control/security. Part (e) accepts router/modem, marks 192.154.21.2 and 251.58.3.7 as valid while 258.0.0.3 and 56.1.2.66.1 as invalid, and details the DNS resolution process. Part (f) names the Data Protection Act 2018 and gives compliant storage steps.

4 (a) 1 mark each to max 2 2 Mark any two correct

• Small geographical location // single building points as long as not

• No use of external infrastructure // All hardware will be owned/managed by youth centre contradicted.

• Dedicated hardware // The hardware is not shared/used by anyone else/any other business

• It is not connecting networks (like a WAN does)

4 (b) (i) 1 mark each to max 2 2 MP1 BOD each device is

• (Partial mesh) means all devices are connected to one or more devices // (Full mesh) means connected to other devices

all devices are connected to every other device // all devices are

• No need for central management / switch / device / node // All devices are equal // connected

Decentralised MP2 do not accept no

• Multiple routes/paths (between devices) central server

4 (b) (ii) 1 mark each to max 2 for drawback max 2 for benefit e.g. 4 1 mark for a point 1 for

11 expansion/reason/benefit.

Benefits:

• No purchase/cost of central switch / device Any of the MPs can be the

• … lower cost to install/maintain network // no need to setup / connect to the central device benefit/drawback and can

be the expansion as long

• More connections/paths between devices // alternate routes as they follow on.

• … no single point of failure // if a connection breaks can still connect

• … more robust structure Do not accept

faster/slower transmission

• More scalable // can have more devices/connections/nodes/computers speeds – dependent on

• … easier to add devices media and many other

factors.

• … can add / remove nodes without impacting other nodes/speed

MP3 and MP4 can be in a

• Decrease in latency

single statement e.g. ‘If

• … fewer collisions one connection breaks the

nodes can still connect

• Can be setup over a larger area // can provide a more stable connection through another route’

• … each device acts as repeater

Drawbacks:

• Large number of / more connections/wires

• … can involve redundant connections

• … this is impractical

• Reduced central management/control/oversight of the network/transmission

• … less control over transfer/security of the network

• Less secure BOD example less secure

• … more routes/points/devices for data interception/attack/unauthorised access

• Difficult to find an error

• … because of the multiple routes where an error could occur

• Mesh network uses more power

• … more nodes are involved in each transmission

4 (c) (i) 1 mark each to max 3 e.g. 3 MP1 is for easier to add

• Easier to add more devices/users 12 more devices to the

• Can have more devices/connections/users // more scalable network.

• … without cost of purchase/install additional wired connections MP2 is there can be more

• Devices are not fixed to one spot // devices can be moved // can connect from anywhere in connections/nodes/devices

(wireless) range than on a wired.

• …allowing people to use them where they are needed // can use where there is no physical ‘more devices can be

connection added easily’ is MP1 on its

• Reduces risk of (additional) trailing wires own.

• Less potential damage to equipment/wires

• Connect wider range / more types of device // by example e.g. mobile phones/tablets

• … that don’t have ports / wired connections // that only have wireless connections

• It allows a backup network if the wired network fails

• (Due to each node acting as a repeater in the mesh) the network will have a greater range

4 (c) (ii) 1 mark per bullet to max 2 for each factor 4 Allow reverse of each.

Factor How it affects the performance

Do not award references to

• More bandwidth = faster network/transmission BOD better Internet speed alone.

Bandwidth performance

• …because more data is transferred simultaneously/per second Points need to reference

Number of • More users = slower network/transmission BOD worse performance more/less data in correct

context.

users • …because more data is transferred simultaneously // more traffic //

accessing the the bandwidth is being shared/used // more bandwidth used // BOD

network at the more congestion / collisions

same time

4 (d) 1 mark each to max 5 e.g. 5 MP1 needs more than high

• Can be expensive for large amounts of data / long term / hosting // may be ongoing cost, it needs identification

subscription // no control over changing costs of ongoing, cost for hosting

• May be limited amount of storage etc.

• No control over security // Need to rely on provider for security

• May be hacked/stolen/intercepted/affected by a virus MP3 just poor/low security

• May lose (personal) data // May lose access to data is NE

• May go against DPA/legislation // Data may be misused (by provider)

• May not be clear where in the world the data is stored Accept data may be sold

as example of misuse.

• Limited/No control over access

• Company/cloud could go down 13

• No control over backup // May not have (automatic) backups …

• … data is not retrievable

• Need internet access // no internet access means no data

• … access speed depends on network/connection speed

• Concerns over ownership of the data

• Need to remember login details // may forget/lose login details

• Users may need training

4 (e) (i) 1 mark for router/modem 1

4 (e) (ii) 1 mark for each row. 4 Do not award rows with 2

ticks.

IP address Valid (✓) Invalid

(✓) Allow Xs in place of ticks in

✓ either/both columns.

192.154.21.2

258.0.0.3 ✓

56.1.2.66.1 ✓

✓

251.58.3.7

4 (e) (iii) 1 mark each to max 4 4 MP3 – award for the use of

• Browser checks cache for matching IP address the DNS converting URL to

• URL/domain is sent to DNS 14 IP

• DNS looks for URL/domain to find matching IP

• …in table/database/files/lists (of URL/domain and IPs) MP5 accept another/larger

• If not found the request is transferred to higher-level DNS for higher-level

• DNS returns IP address to computer/browser

• An error is returned/sent if the IP address cannot be found MP6 needs to be

computer/browser, do not

award user on its own.

4 (f) 1 mark for legislation Data Protection Act (2018) // DPA // GDPR // Data protection 4 If no legislation, wrong

legislation, unclear

1 mark each for steps to max 3 e.g. legislation still award up to

• Identify data protection officer max 3 marks for

• Keep data secure/safe (from unauthorised access) description of DPA.

• ... by example // installing firewall // usernames and passwords // access rights // physical

security // encrypt Accept answers listing

• Do not share/sell (without consent) what needs to be done e.g.

• Don’t store without consent data must be up-to-date

• Only keep relevant data (without the specific step

• … do not collect data from users that is not required that will be followed to do

this)?

• Do not store the data for longer than needed

• Make sure the data remains accurate / up-to-date

MP2 is stopping

• Only use for purpose collected // Data must not be misused unauthorised access.

• … state purpose for collection MP4 is the company

• Do not store/share with countries with lower levels of protection actively giving the data

• Change/delete data when requested … willingly to someone else.

• … permanently/securely

• Provide data for users when they request to see it

• Notify individuals of data breaches

• Must use data lawfully/fairly

• Staff need to be trained in principles

How to answer it

Youth Centre Networks, Cloud Storage & Data Law

📋 WHAT THIS QUESTION TESTS

Core Revision Topics:

  • LAN vs WAN: Defining geographical range, infrastructure ownership, and connection boundaries.
  • Network Topologies: Architecture, benefits, and drawbacks of a Mesh vs Star topology.
  • Transmission Media & Performance: Factors impacting throughput (Wi-Fi mobility, bandwidth, concurrent users).
  • Cloud Storage: Business considerations, dependency, security implications, and ongoing costs.
  • Addressing & Protocols: Hardware devices (routers), valid syntax rules for IPv4, and step-by-step DNS URL-to-IP resolution.
  • Legislation: The Data Protection Act (2018) / GDPR principles in organisational practice.
PART (a) • 2 MARKS

LAN vs WAN Distinction

Identifying reasons why a network is a Local Area Network

✅ Acceptable Answers (Any 2)

  • It covers a small geographical location (e.g. contained within a single building).
  • All hardware is owned and managed by the youth centre (no external/telecommunication infrastructure used).
  • Dedicated hardware that is not shared with any third party.
  • It is a single network and does not connect separate networks together across a wide area.

❌ Common Errors

  • Vague statements like "Because it only has 20 computers" (LANs can have hundreds or thousands of devices).
  • Saying "It doesn't use the Internet" (LANs frequently connect to the Internet).
🎯 Examiner Insight: Keep it concise. Focus on geographical scale and hardware ownership. Award 1 mark for each clear point.
PART (b)(i) • 2 MARKS

Mesh Topology Definition

Describing what is meant by a mesh topology

✅ Correct Answer (2 Marks)

  • Mark 1: Devices are connected directly to one or more other devices (partial mesh) OR every device is connected to every single other device (full mesh).
  • Mark 2: There is no central device (e.g. no central switch or central controlling node) / it is decentralised / there are multiple routes/paths for data between devices.

❌ Examiner Pitfall

  • Do NOT say: "There is no central server." A server is a host role, not a network switch/hub! The examiner specifically rejects "no central server" for Mark 2.
PART (b)(ii) • 4 MARKS

Mesh vs Star Topology: Benefit & Drawback

Comparing a mesh topology against a star topology (Point + Expansion)

✅ 1 Benefit (Point + Expansion) [2 Marks]

Option A (Fault Tolerance):

  • Point: There are multiple pathways/routes between devices.
  • Expansion: If a single cable or connection fails, data can be rerouted so the network continues functioning (no single point of failure).

Option B (Hardware/Cost of Central Node):

  • Point: No need to buy a central switch/hub.
  • Expansion: Reduces the cost and maintenance overhead of central hardware.

❌ 1 Drawback (Point + Expansion) [2 Marks]

Option A (Cabling & Setup Complexity):

  • Point: Requires a large number of wires / redundant connections.
  • Expansion: This is expensive, impractical, and complex to install and maintain.

Option B (Security & Oversight):

  • Point: Decentralised management makes traffic monitoring harder.
  • Expansion: Data travels through other nodes, creating more interception points.
🧠 Exam Technique: Each mark requires a linked chain: Identification [1 mark] → Expansion/Justification [1 mark]. Do not just state "It is faster" or "It is slower"—speed depends heavily on media and traffic, so standalone speed comments get zero marks.
PART (c)(i) • 3 MARKS

Adding Wireless (Wi-Fi) to the Network

Explaining the operational benefits to the youth centre

✅ Valid Points (Choose Any 3)

  • Mobility: Users can move freely around the youth centre and access the network anywhere within Wi-Fi signal range.
  • Device Compatibility: Allows connection of mobile phones, tablets, and lightweight laptops that do not have RJ-45 Ethernet ports.
  • Scalability: Easier and cheaper to add new guest users/devices without having to install additional physical Ethernet cables and wall sockets.
  • Health & Safety: Reduces trailing cables across floors, eliminating tripping hazards.
  • Redundancy: Can act as a fallback connection if a physical cable gets damaged.

💡 Examiner Guidance

Context matters! The question mentions a youth centre. Pointing out that attendees can connect their smartphones/tablets directly addresses the scenario context.

PART (c)(ii) • 4 MARKS

Factors Affecting Network Performance

Linking factors directly to data transmission throughput

Factor How it affects performance (2 marks each)
Bandwidth

Higher bandwidth allows more data to be transferred per second / simultaneously [1 mark].

This results in faster transmission speeds and overall smoother performance (e.g. quicker downloads/streaming) [1 mark].

Number of users accessing the network at the same time

As more users access the network, the available total bandwidth must be shared between them / increases data traffic [1 mark].

This causes network congestion, packet collisions, and delays, resulting in slower transfer speeds for each user [1 mark].

❌ Examiner Trap: Do not just state "Bandwidth is how fast the internet is." Bandwidth is capacity (volume of data transmitted per unit of time), not the physical propagation speed of electrical/light signals!
PART (d) • 5 MARKS

Drawbacks of Cloud Storage

Evaluating remote data storage risks for the youth centre (Max 5 marks)

✅ Five Distinct Drawbacks

  1. Internet Dependency: Constant, reliable internet is mandatory; if the connection goes down, data cannot be accessed.
  2. Ongoing Costs: Requires recurring subscription fees over time which can increase, rather than a one-off local storage hardware cost.
  3. Loss of Security Control: The youth centre has no direct control over physical servers and must trust the third party’s security protocols.
  4. Data Breaches & Hacking: Cloud servers are high-value targets for cyberattacks, potentially exposing sensitive youth member data.
  5. Backup & Service Availability: If the hosting company suffers downtime or ceases trading, data may be unretrievable.

❌ What Not to Write

  • "It has low security" → Too vague (NE - Not Enough). Cloud providers often have high security, but the centre has no direct control over it.
  • "It costs a lot of money" → Must specify that it is an ongoing/subscription cost or unpredictable price hikes.
PART (e)(i) & (e)(ii) • 5 MARKS

Hardware & IPv4 Address Validation

Part (e)(i): Connecting LAN to the Internet [1 Mark]

Required Device: Router (or Modem / Router-Modem ).

Part (e)(ii): IPv4 Address Validation Table [4 Marks]

IPv4 Address Valid (✓) Invalid (✓) Reasoning Rule
192.154.21.2 ✓ 4 octets; each octet is between 0 and 255.
258.0.0.3 ✓ First number is 258 (exceeds the 8-bit maximum of 255).
56.1.2.66.1 ✓ Contains 5 octets (IPv4 uses exactly 4 numbers separated by dots).
251.58.3.7 ✓ 4 octets; all numbers are within the 0–255 range.

📐 IPv4 Format Checklist

  • Rule 1: Exactly 4 octets separated by dots (3 dots total). Total of 32 bits.
  • Rule 2: Each octet is an 8-bit integer with range: 0 ≤ value ≤ 255 (since 2⁸ = 256 combinations: 0 to 255).
PART (e)(iii) • 4 MARKS

DNS Process: Converting URL to IP Address

Chronological step-by-step resolution

💡 The Step-by-Step Resolution Chain

  1. Step 1: The browser first checks its local cache to see if the IP address for that domain is already stored.
  2. Step 2: If not cached, the browser sends the URL/domain name to a DNS server (Domain Name Server).
  3. Step 3: The DNS server queries its database/lookup table matching the domain to its corresponding IP address.
  4. Step 4: If not found locally, the query is passed along to higher-level / root DNS servers.
  5. Step 5: The resolved IP address is returned to the client's browser/computer (or an error is returned if unreachable).

🧠 Exam Technique

Always specify where the IP address goes at the end: state "returns the IP to the computer / browser". Saying "returns the IP address to the user" on its own may lose the mark because human users cannot directly process raw IP socket calls—the browser does!

PART (f) • 4 MARKS

Legislation and Compliance

Data protection legislation when holding user information

Legislation Name [1 Mark]

Data Protection Act (2018) / DPA / General Data Protection Regulation (GDPR).

✅ Practical Steps Youth Centre Must Take (Any 3)

  • Appoint a Data Protection Officer (DPO) to oversee compliance and data policies.
  • Implement security controls: Use encryption, firewalls, strong passwords, and role-based access rights to protect records from unauthorised access.
  • Consent & Purpose: Obtain explicit consent; only use the data for the specific stated youth centre purposes (never sell/share without permission).
  • Data Minimisation: Collect and hold only data that is strictly relevant and necessary.
  • Retention: Do not store data longer than necessary; securely delete records when users leave.
  • Accuracy: Keep records up to date and provide a mechanism for users to view or correct their personal data.
  • Breach Notification: Have a defined protocol to notify authorities and victims in the event of a security breach.

🎯 Examiner Insight

Even if a student incorrectly names the legislation, they can still achieve the up to 3 marks available for describing correct, practical steps required by data protection regulations!

Topics

1.3 Computer networks, connections and protocols · 1.6 Ethical, legal, cultural and environmental impacts of digital technology · 1.3.1 Networks and topologies · 1.3.2 Wired and wireless networks, protocols and layers · 1.6.1 Ethical, legal, cultural and environmental impact

Question and mark scheme from the OCR GCSE Computer Science examination, Computer systems (01), June 2025. QuestionVault is an independent revision resource; questions remain the copyright of the awarding body.