OCR GCSE Computer Science Computer systems (01), June 2025: Question 4
29 marks · Medium difficulty · Short Answer
Explain network types, topologies, performance factors, cloud storage drawbacks, DNS URL resolution, IPv4 address validity, and Data Protection Act requirements for a youth centre network.
Practise this questionQuestion
Question text
4 A youth centre is creating a network with 20 computers in a single building that will be connected
in a Local Area Network (LAN).
(a) Identify two reasons why this network will be a LAN and not a Wide Area Network (WAN).
1 …
2 …
[2]
(b) The network design connects the computers in a mesh topology.
(i) Describe what is meant by a mesh topology.
… [2]
(ii) Describe one benefit and one drawback of the network using a mesh topology instead of a star
topology.
Benefit …
Drawback …
9 [4]
(c) The network design originally only had wired connections. The design is updated to include
wireless connections via Wi-Fi.
(i) Explain the benefits to the youth centre of also providing Wi-Fi connections.
… [3]
(ii) The decision to use wired and/or wireless connections can affect the performance of the network.
Complete the table by explaining how each factor can affect the performance of a network.
Factor How it affects performance
Bandwidth
Number of users
accessing the …
network at the
same time …
[4]
(d) The youth centre is going to store data about users and events using cloud storage.
Describe the drawbacks to the youth centre of storing the data on the cloud.
… [5]
(e) Users will have access to the internet.
(i) Identify one device that will be required to allow the LAN to connect to the internet.
… [1]
(ii) The computers will be allocated an IPv4 address.
Tick (✓) one box on each row to identify if the IPv4 address is valid or invalid.
IPv4 Valid Invalid
address (✓) (✓)
192.154.21.2
258.0.0.3
56.1.2.66.1
251.58.3.7
[4]
(iii) When a user wants to access a website they enter the URL into the address bar of a web
browser.
Describe the steps that take place to convert the URL into the website’s IP address.
… [4]
(f) Identify one piece of legislation that the youth centre will need to follow when storing users’ data
and describe the steps they need to take to meet the requirements of this legislation.
Legislation …
Steps the youth centre needs to follow …
[4]
Mark scheme
Show the mark scheme
4 (a) 1 mark each to max 2 2 Mark any two correct
• Small geographical location // single building points as long as not
• No use of external infrastructure // All hardware will be owned/managed by youth centre contradicted.
• Dedicated hardware // The hardware is not shared/used by anyone else/any other business
• It is not connecting networks (like a WAN does)
4 (b) (i) 1 mark each to max 2 2 MP1 BOD each device is
• (Partial mesh) means all devices are connected to one or more devices // (Full mesh) means connected to other devices
all devices are connected to every other device // all devices are
• No need for central management / switch / device / node // All devices are equal // connected
Decentralised MP2 do not accept no
• Multiple routes/paths (between devices) central server
4 (b) (ii) 1 mark each to max 2 for drawback max 2 for benefit e.g. 4 1 mark for a point 1 for
11 expansion/reason/benefit.
Benefits:
• No purchase/cost of central switch / device Any of the MPs can be the
• … lower cost to install/maintain network // no need to setup / connect to the central device benefit/drawback and can
be the expansion as long
• More connections/paths between devices // alternate routes as they follow on.
• … no single point of failure // if a connection breaks can still connect
• … more robust structure Do not accept
faster/slower transmission
• More scalable // can have more devices/connections/nodes/computers speeds – dependent on
• … easier to add devices media and many other
factors.
• … can add / remove nodes without impacting other nodes/speed
MP3 and MP4 can be in a
• Decrease in latency
single statement e.g. ‘If
• … fewer collisions one connection breaks the
nodes can still connect
• Can be setup over a larger area // can provide a more stable connection through another route’
• … each device acts as repeater
Drawbacks:
• Large number of / more connections/wires
• … can involve redundant connections
• … this is impractical
• Reduced central management/control/oversight of the network/transmission
• … less control over transfer/security of the network
• Less secure BOD example less secure
• … more routes/points/devices for data interception/attack/unauthorised access
• Difficult to find an error
• … because of the multiple routes where an error could occur
• Mesh network uses more power
• … more nodes are involved in each transmission
4 (c) (i) 1 mark each to max 3 e.g. 3 MP1 is for easier to add
• Easier to add more devices/users 12 more devices to the
• Can have more devices/connections/users // more scalable network.
• … without cost of purchase/install additional wired connections MP2 is there can be more
• Devices are not fixed to one spot // devices can be moved // can connect from anywhere in connections/nodes/devices
(wireless) range than on a wired.
• …allowing people to use them where they are needed // can use where there is no physical ‘more devices can be
connection added easily’ is MP1 on its
• Reduces risk of (additional) trailing wires own.
• Less potential damage to equipment/wires
• Connect wider range / more types of device // by example e.g. mobile phones/tablets
• … that don’t have ports / wired connections // that only have wireless connections
• It allows a backup network if the wired network fails
• (Due to each node acting as a repeater in the mesh) the network will have a greater range
4 (c) (ii) 1 mark per bullet to max 2 for each factor 4 Allow reverse of each.
Factor How it affects the performance
Do not award references to
• More bandwidth = faster network/transmission BOD better Internet speed alone.
Bandwidth performance
• …because more data is transferred simultaneously/per second Points need to reference
Number of • More users = slower network/transmission BOD worse performance more/less data in correct
context.
users • …because more data is transferred simultaneously // more traffic //
accessing the the bandwidth is being shared/used // more bandwidth used // BOD
network at the more congestion / collisions
same time
4 (d) 1 mark each to max 5 e.g. 5 MP1 needs more than high
• Can be expensive for large amounts of data / long term / hosting // may be ongoing cost, it needs identification
subscription // no control over changing costs of ongoing, cost for hosting
• May be limited amount of storage etc.
• No control over security // Need to rely on provider for security
• May be hacked/stolen/intercepted/affected by a virus MP3 just poor/low security
• May lose (personal) data // May lose access to data is NE
• May go against DPA/legislation // Data may be misused (by provider)
• May not be clear where in the world the data is stored Accept data may be sold
as example of misuse.
• Limited/No control over access
• Company/cloud could go down 13
• No control over backup // May not have (automatic) backups …
• … data is not retrievable
• Need internet access // no internet access means no data
• … access speed depends on network/connection speed
• Concerns over ownership of the data
• Need to remember login details // may forget/lose login details
• Users may need training
4 (e) (i) 1 mark for router/modem 1
4 (e) (ii) 1 mark for each row. 4 Do not award rows with 2
ticks.
IP address Valid (✓) Invalid
(✓) Allow Xs in place of ticks in
✓ either/both columns.
192.154.21.2
258.0.0.3 ✓
56.1.2.66.1 ✓
✓
251.58.3.7
4 (e) (iii) 1 mark each to max 4 4 MP3 – award for the use of
• Browser checks cache for matching IP address the DNS converting URL to
• URL/domain is sent to DNS 14 IP
• DNS looks for URL/domain to find matching IP
• …in table/database/files/lists (of URL/domain and IPs) MP5 accept another/larger
• If not found the request is transferred to higher-level DNS for higher-level
• DNS returns IP address to computer/browser
• An error is returned/sent if the IP address cannot be found MP6 needs to be
computer/browser, do not
award user on its own.
4 (f) 1 mark for legislation Data Protection Act (2018) // DPA // GDPR // Data protection 4 If no legislation, wrong
legislation, unclear
1 mark each for steps to max 3 e.g. legislation still award up to
• Identify data protection officer max 3 marks for
• Keep data secure/safe (from unauthorised access) description of DPA.
• ... by example // installing firewall // usernames and passwords // access rights // physical
security // encrypt Accept answers listing
• Do not share/sell (without consent) what needs to be done e.g.
• Don’t store without consent data must be up-to-date
• Only keep relevant data (without the specific step
• … do not collect data from users that is not required that will be followed to do
this)?
• Do not store the data for longer than needed
• Make sure the data remains accurate / up-to-date
MP2 is stopping
• Only use for purpose collected // Data must not be misused unauthorised access.
• … state purpose for collection MP4 is the company
• Do not store/share with countries with lower levels of protection actively giving the data
• Change/delete data when requested … willingly to someone else.
• … permanently/securely
• Provide data for users when they request to see it
• Notify individuals of data breaches
• Must use data lawfully/fairly
• Staff need to be trained in principles
How to answer it
Youth Centre Networks, Cloud Storage & Data Law
Core Revision Topics:
- LAN vs WAN: Defining geographical range, infrastructure ownership, and connection boundaries.
- Network Topologies: Architecture, benefits, and drawbacks of a Mesh vs Star topology.
- Transmission Media & Performance: Factors impacting throughput (Wi-Fi mobility, bandwidth, concurrent users).
- Cloud Storage: Business considerations, dependency, security implications, and ongoing costs.
- Addressing & Protocols: Hardware devices (routers), valid syntax rules for IPv4, and step-by-step DNS URL-to-IP resolution.
- Legislation: The Data Protection Act (2018) / GDPR principles in organisational practice.
LAN vs WAN Distinction
Identifying reasons why a network is a Local Area Network
✅ Acceptable Answers (Any 2)
- It covers a small geographical location (e.g. contained within a single building).
- All hardware is owned and managed by the youth centre (no external/telecommunication infrastructure used).
- Dedicated hardware that is not shared with any third party.
- It is a single network and does not connect separate networks together across a wide area.
❌ Common Errors
- Vague statements like "Because it only has 20 computers" (LANs can have hundreds or thousands of devices).
- Saying "It doesn't use the Internet" (LANs frequently connect to the Internet).
Mesh Topology Definition
Describing what is meant by a mesh topology
✅ Correct Answer (2 Marks)
- Mark 1: Devices are connected directly to one or more other devices (partial mesh) OR every device is connected to every single other device (full mesh).
- Mark 2: There is no central device (e.g. no central switch or central controlling node) / it is decentralised / there are multiple routes/paths for data between devices.
❌ Examiner Pitfall
- Do NOT say: "There is no central server." A server is a host role, not a network switch/hub! The examiner specifically rejects "no central server" for Mark 2.
Mesh vs Star Topology: Benefit & Drawback
Comparing a mesh topology against a star topology (Point + Expansion)
✅ 1 Benefit (Point + Expansion) [2 Marks]
Option A (Fault Tolerance):
- Point: There are multiple pathways/routes between devices.
- Expansion: If a single cable or connection fails, data can be rerouted so the network continues functioning (no single point of failure).
Option B (Hardware/Cost of Central Node):
- Point: No need to buy a central switch/hub.
- Expansion: Reduces the cost and maintenance overhead of central hardware.
❌ 1 Drawback (Point + Expansion) [2 Marks]
Option A (Cabling & Setup Complexity):
- Point: Requires a large number of wires / redundant connections.
- Expansion: This is expensive, impractical, and complex to install and maintain.
Option B (Security & Oversight):
- Point: Decentralised management makes traffic monitoring harder.
- Expansion: Data travels through other nodes, creating more interception points.
Adding Wireless (Wi-Fi) to the Network
Explaining the operational benefits to the youth centre
✅ Valid Points (Choose Any 3)
- Mobility: Users can move freely around the youth centre and access the network anywhere within Wi-Fi signal range.
- Device Compatibility: Allows connection of mobile phones, tablets, and lightweight laptops that do not have RJ-45 Ethernet ports.
- Scalability: Easier and cheaper to add new guest users/devices without having to install additional physical Ethernet cables and wall sockets.
- Health & Safety: Reduces trailing cables across floors, eliminating tripping hazards.
- Redundancy: Can act as a fallback connection if a physical cable gets damaged.
💡 Examiner Guidance
Context matters! The question mentions a youth centre. Pointing out that attendees can connect their smartphones/tablets directly addresses the scenario context.
Factors Affecting Network Performance
Linking factors directly to data transmission throughput
| Factor | How it affects performance (2 marks each) |
|---|---|
| Bandwidth | Higher bandwidth allows more data to be transferred per second / simultaneously [1 mark]. This results in faster transmission speeds and overall smoother performance (e.g. quicker downloads/streaming) [1 mark]. |
| Number of users accessing the network at the same time | As more users access the network, the available total bandwidth must be shared between them / increases data traffic [1 mark]. This causes network congestion, packet collisions, and delays, resulting in slower transfer speeds for each user [1 mark]. |
Drawbacks of Cloud Storage
Evaluating remote data storage risks for the youth centre (Max 5 marks)
✅ Five Distinct Drawbacks
- Internet Dependency: Constant, reliable internet is mandatory; if the connection goes down, data cannot be accessed.
- Ongoing Costs: Requires recurring subscription fees over time which can increase, rather than a one-off local storage hardware cost.
- Loss of Security Control: The youth centre has no direct control over physical servers and must trust the third party’s security protocols.
- Data Breaches & Hacking: Cloud servers are high-value targets for cyberattacks, potentially exposing sensitive youth member data.
- Backup & Service Availability: If the hosting company suffers downtime or ceases trading, data may be unretrievable.
❌ What Not to Write
- "It has low security" → Too vague (NE - Not Enough). Cloud providers often have high security, but the centre has no direct control over it.
- "It costs a lot of money" → Must specify that it is an ongoing/subscription cost or unpredictable price hikes.
Hardware & IPv4 Address Validation
Part (e)(i): Connecting LAN to the Internet [1 Mark]
Required Device: Router (or Modem / Router-Modem ).
Part (e)(ii): IPv4 Address Validation Table [4 Marks]
| IPv4 Address | Valid (✓) | Invalid (✓) | Reasoning Rule |
|---|---|---|---|
| 192.154.21.2 | ✓ | 4 octets; each octet is between 0 and 255. | |
| 258.0.0.3 | ✓ | First number is 258 (exceeds the 8-bit maximum of 255). | |
| 56.1.2.66.1 | ✓ | Contains 5 octets (IPv4 uses exactly 4 numbers separated by dots). | |
| 251.58.3.7 | ✓ | 4 octets; all numbers are within the 0–255 range. |
📐 IPv4 Format Checklist
- Rule 1: Exactly 4 octets separated by dots (3 dots total). Total of 32 bits.
- Rule 2: Each octet is an 8-bit integer with range: 0 ≤ value ≤ 255 (since 2⁸ = 256 combinations: 0 to 255).
DNS Process: Converting URL to IP Address
Chronological step-by-step resolution
💡 The Step-by-Step Resolution Chain
- Step 1: The browser first checks its local cache to see if the IP address for that domain is already stored.
- Step 2: If not cached, the browser sends the URL/domain name to a DNS server (Domain Name Server).
- Step 3: The DNS server queries its database/lookup table matching the domain to its corresponding IP address.
- Step 4: If not found locally, the query is passed along to higher-level / root DNS servers.
- Step 5: The resolved IP address is returned to the client's browser/computer (or an error is returned if unreachable).
🧠 Exam Technique
Always specify where the IP address goes at the end: state "returns the IP to the computer / browser". Saying "returns the IP address to the user" on its own may lose the mark because human users cannot directly process raw IP socket calls—the browser does!
Legislation and Compliance
Data protection legislation when holding user information
Legislation Name [1 Mark]
Data Protection Act (2018) / DPA / General Data Protection Regulation (GDPR).
✅ Practical Steps Youth Centre Must Take (Any 3)
- Appoint a Data Protection Officer (DPO) to oversee compliance and data policies.
- Implement security controls: Use encryption, firewalls, strong passwords, and role-based access rights to protect records from unauthorised access.
- Consent & Purpose: Obtain explicit consent; only use the data for the specific stated youth centre purposes (never sell/share without permission).
- Data Minimisation: Collect and hold only data that is strictly relevant and necessary.
- Retention: Do not store data longer than necessary; securely delete records when users leave.
- Accuracy: Keep records up to date and provide a mechanism for users to view or correct their personal data.
- Breach Notification: Have a defined protocol to notify authorities and victims in the event of a security breach.
🎯 Examiner Insight
Even if a student incorrectly names the legislation, they can still achieve the up to 3 marks available for describing correct, practical steps required by data protection regulations!
Topics
1.3 Computer networks, connections and protocols · 1.6 Ethical, legal, cultural and environmental impacts of digital technology · 1.3.1 Networks and topologies · 1.3.2 Wired and wireless networks, protocols and layers · 1.6.1 Ethical, legal, cultural and environmental impact
Question and mark scheme from the OCR GCSE Computer Science examination, Computer systems (01), June 2025. QuestionVault is an independent revision resource; questions remain the copyright of the awarding body.