Cambridge International AS & A Level

INFORMATION TECHNOLOGY 9626/32

Paper 3 Advanced Theory February/March 2024
MARK SCHEME
Maximum Mark: 70

Published

This mark scheme is published as an aid to teachers and candidates, to indicate the requirements of the
examination. It shows the basis on which Examiners were instructed to award marks. It does not indicate the
details of the discussions that took place at an Examiners’ meeting bef ore marking began, which woul d have
considered the acceptability of alternative answers.

Mark schemes should be read in conjunction with the question paper and the Principal Examiner Report f or
Teachers.

Cambridge International will not enter into discussions about these mark schemes.

Cambridge International is publishing the mark schemes f or the February/March 2024 series f or most
Cambridge IGCSE, Cambridge International A and AS Level components, and some Cambridge O Level
components.

This document consists of 10 printed pages.

© Cambridge University Press & Assessment 2024 [Turn over

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Generic Marking Principles

These general marking principles must be applied by all examiners when marking candidate answers.
They should be applied alongside the specific content of the mark scheme or generic level
descriptions for a question. Each question paper and mark scheme will also comply with these
marking principles.

GENERIC MARKING PRINCIPLE 1:

Marks must be awarded in line with:

• the specific content of the mark scheme or the generic level descriptors for the question
• the specific skills defined in the mark scheme or in the generic level descriptors for the question
• the standard of response required by a candidate as exemplified by the standardisation scripts.

GENERIC MARKING PRINCIPLE 2:

Marks awarded are always whole marks (not half marks, or other fractions).

GENERIC MARKING PRINCIPLE 3:

Marks must be awarded positively:

• marks are awarded for correct/valid answers, as defined in the mark scheme. However, credit
is given for valid answers which go beyond the scope of the syllabus and mark scheme,
referring to your Team Leader as appropriate
• marks are awarded when candidates clearly demonstrate what they know and can do
• marks are not deducted for errors
• marks are not deducted for omissions
• answers should only be judged on the quality of spelling, punctuation and grammar when these
features are specifically assessed by the question as indicated by the mark scheme. The
meaning, however, should be unambiguous.

GENERIC MARKING PRINCIPLE 4:

Rules must be applied consistently, e.g. in situations where candidates have not followed
instructions or in the application of generic level descriptors.

GENERIC MARKING PRINCIPLE 5:

Marks should be awarded using the full range of marks defined in the mark scheme for the question
(however; the use of the full mark range may be limited according to the quality of the candidate
responses seen).

GENERIC MARKING PRINCIPLE 6:

Marks awarded are based solely on the requirements as defined in the mark scheme. Marks should
not be awarded with grade thresholds or grade descriptors in mind.

© Cambridge University Press & Assessment 2024 Page 2 of 10

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Annotations to be used for marking:

• Full annotation is required using those annotations shown here. A few others are available but
these are the essential ones.
• Ticks shown on response must equal the marks given – and vice versa.

Annotation Name Reason/comments

Tick Placed next/close to a correct point that has been awarded a

mark. The number of ticks must equal the number of marks give
– and, conversely, the number of marks must equal the number
of ticks shown.

Cross Placed next/close to an incorrect/wrong point.

Too vague Placed next a point considered not good enough to be awarded
a mark.

Benefit of the Placed next a point considered just good enough to be awarded
doubt a mark. It shows that the examiner has considered the point
carefully and given a mark despite the point not being exactly as
required.
Use of BOD also requires a TICK next to it. Only ticks indicate
awarded marks, BOD is an additional note that helps reviewers
of the marking.

Seen Placed on blank pages to show they have been seen.

Placed on all blank responses to show they have been seen and
there is nothing there.

Read Placed at the end of response to show that the whole response
has been read if no other annotations are relevant/used.
Use this if you have e.g. stopped marking in the middle of a
(long) response because e.g. the max marks have been
awarded. It is most useful on additional pages/answers sheets. It
indicates to supervisors/checkers that you have read the whole
response.

Repeat Placed next a point considered to be the same as a point

already awarded.

Placed next a point considered to be repeating the question.

Caret Placed next a point considered to be missing a vital piece of

information so is not awarded a mark.

Not answered Used for responses that clearly do not answer the question.
(the) question

MAX Used to indicate that the maximum mark for the response has
been awarded. Place after the last tick i.e. where the maximum
was reached.

© Cambridge University Press & Assessment 2024 Page 3 of 10

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Question Answer Marks

1 Six from e.g.: 6

• Used to bootstrap other wireless connections/Wi-Fi/Bluetooth (by

exchanging setup credentials)
• Used in games to customise objects/figures/characters (with e.g.
personal data/enter online games)
• Used in tags to automatically program/amend settings/command
smartphones to carry out tasks/access a website
• Used as identity tags/documentation in e.g. passports/ID cards
• Used in access/login cards/car key systems
• Used in social networking to share contacts/images/messages
• Used in contactless payment systems in mobile devices/smartphones.

Question Answer Marks

2(a) Two from: 2

• Used to exit/break out of a switch/loop

• When exiting a loop the code in the switch/loop stops
• Any code outside/after a switch/loop is then executed.

2(b) Two from: 2

• Functions are (JavaScript) objects with properties

• Declared/initiated by the function statement
• Used to save a section of code for later/repeated use
• Set of statements (in JS code) that perform a task/calculation (1st )
– Must have/with input/return output (1)
• (Only) invoked/executed/run when called/invoked by other code.

2(c) Two from: 2

• Used to explain (JavaScript) code

• Used to stop/prevent code being executed (when testing alternative code)
• Used to make code more understandable/allows (future) programmers to
follow/debug/understand code
• Single line comments begin with //
• Multi line comments begin with /* and end with */

© Cambridge University Press & Assessment 2024 Page 4 of 10

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Question Answer Marks

3 Six from: 6
One for at least four correctly identified stages:

• List of stages i.e. Initiation, Planning, Documentation, Development,

Support/maintenance

Max two valid descriptions of activity in INITIATION e.g.

• Create idea/vision for project
• Discuss return on investment (ROI)
• Identify team members are identified
• Determine time/resources that are needed
• Carry out feasibility study carried out/ determine if the project can be
done

Max two valid descriptions of activity in PLANNING by e.g.

• Developers working with client/stakeholders/end-users
• Specifications are written e.g. User/system/requirement specifications
• Risks are considered/estimated
• Product features are determined

Max two valid descriptions of activity in DEVELOPMENT e.g.:

• Development based on specifications
• Occurs in sprints/iterations/incremental phases
• Working software available at end of this phase
• Working software has minimal functionality which will be built on in each
sprint
• Each iteration is tested

Max two valid descriptions of activity in DOCUMENTATION e.g.:

• Production of user documentation
• Deployment to end-users
• Handover with training to end-users
• Software monitored for errors/problems

Max two valid descriptions of activity in SUPPORT/MAINTENANCE e.g.:

• Software withdrawn/decommissioned/end-of-life
• Support for software stops
• End-users notified of impending withdrawal of software
• Software replaced by new release/version.

© Cambridge University Press & Assessment 2024 Page 5 of 10

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Question Answer Marks

4 Six from: 6

• (Lossy) compression of images reduces the amount data needed to

represent the image while allowing the image to be reconstructed
• (Lossy) compression of images reduces the file size
• allows more images to be stored within a fixed amount of disk
space/computer storage
• allows transfer of (whole) image over networks/internet to be completed
faster/in shorter space of time
• image to be attached to email message without exceeding ISP max file
size limit
• allows image to be posted on social media sites which are optimised for
mobile devices/data transfer over mobile communication systems
• no fear of unauthorised use/stolen because image is degraded/has
compression artefacts/effects (of lossy) compression/smaller file size
allows commercial/copyright images to be posted on social media/web
sites without
• better user experience/not discouraging viewers (by reducing loading
time of web pages)
• Compression artefacts can be used by artists to enhance the visual
impact of images.

Question Answer Marks

5(a) Three from: 3

Max three from:
• (Orientation) is a camera property that is set in a keyframe
• Surface sets the target for the camera on the object surface
• Provides a sense of gravity for the object
• Space sets the target for the camera at the centre of the object.

OR

May be interpreted as ‘rotation which is a layer property’

Max three from:
• Sets the x, y, and z rotation angles around a fixed point (the origin) in a
layer
• (Rotation) around the x-axis is the roll, yaw, angle.
• (Rotation) around the y-axis is the inclination, pitch, angle.
• (Rotation) around the z-axis is the azimuth, heading, angle.

5(b) Three from: 3

• (Sets the visibility of the objects/layers so) other layers in the display can
be seen underneath.
• Can be set to different percentages (of transparency/opacity) to change
the visibility of layers underneath
• Adjusted in keyframes to affect following frames
• Can be adjusted so that some colours are removed/green screen effects
• Can set a ‘transparency track’ in keyframes so transparency/opacity
percentage changes between keyframes.

© Cambridge University Press & Assessment 2024 Page 6 of 10

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Question Answer Marks

6 Six from: 6

i.e. process, data store, data source, duplicate data source (the only ones in
the syllabus), also allow arrow (and its purpose),and other valid DFD
symbols.

Symbols from the syllabus:

Max three for DFD Symbols, max two per symbol:

• Drawing of DFD Symbol (1st)
– correct stated/statements of purpose matched to the symbol (1)

Question Answer Marks

7 Six from: 6

• Access control ensures that users are who they say they are/confirms the
identity of the user/authenticates the user
• Ensures users have the appropriate access to data
• Provides selective access to data/company controls who has access to
what data
• distribution of data is controlled/known
• (Company) managers/staff/IT staff/users know who has/can have/is
allowed access and who is not allowed access
• Can be adapted (automatically) in response to changing
conditions/change of staff (1st )
– so that new employees can have access (1)
– employees/staff who leave can no longer access data (1)
• Can be adapted (automatically) in response to data breaches/analysis of
risks (1st )
– so that relevant employees/staff/users are isolated from the data (1)
• Access control can be based on attribute of user within company (1 st )
– so that they can only access data appropriate for their job/task/role
(1)
– so that they can only access data depending on the location/time of
access (1).

© Cambridge University Press & Assessment 2024 Page 7 of 10

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Question Answer Marks

8 Eight from: 8

One for
• valid description of cryptocurrency e.g.: a digital currency in which
transactions are verified and recorded by a decentralised system using
cryptography

Benefits:
Max six from:

• Cannot be counterfeited so is not devalued by forgers

• Transactions cannot be reversed by the sender for arbitrary
reasons/without consent/assistance of recipient
• Transactions can be anonymous so finances cannot be tracked/traced
• Cost-effective option for immigrants who have left their homes to find
work and wish to send payments to their families in other countries
• Requires a private key/cryptographic password unique to each user for
access so central government/organisation/corporation/bank cannot
seize/freeze assets
• Unaffected by government defaults on loans/bank collapses
• Uses a “push” model prompting cryptocurrency holder to send exactly the
amount to the seller without any other form of information
• Not bound by exchange rates so no cost when transferring between
countries
• No need to change currency for transactions between countries
• No transaction charges resulting in lower costs to senders/recipients
• Transactions take place at the same speed regardless of where the
sender and receiver are located.

Drawbacks:
Max six from:
• Not backed by a government/central bank so subject to risks e.g. price
volatility and regulatory intervention
• Risk of centralised intervention/not be legal in some countries
• Subject to volatility/significant price swings (as markets develop)/can lose
a lot money quickly
• Small part of the global financial ecosystem so few retailers/organisations
accept it
• Cannot easily be convert into cash/hard currency
• Some governments have banned the use of cryptocurrencies
• Risk of software errors affecting the chains leading to roll back/loss of
transactions/value
• Significant contribution to climate change due to power consumption.

Max six if bullets/list of points.

© Cambridge University Press & Assessment 2024 Page 8 of 10

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Question Answer Marks

9 Six from: 6

• (Bot/malware/software application) installed on system without knowledge

of owner/user
• Bots set up as clients on system to communicate with controller device
(on another device/peer-to-peer )
• Use internet to communicate with remote server
• Can execute/run other malware to access files/gather data and send back
to controller
• Can carry out Denial-of-Service (DoS) attacks on servers/preventing
legitimate use of files/data/services
• Can send (spam/unwanted/fraudulent) disguised emails from infected
devices/zombie computing devices with attached data/files/request for
login credentials/financial details which can be used to gain access to
system
• Can distribute/direct spyware to gather user credentials/details/data and
send to controller
• Can use system resources and reduce its performance
• Can compromise legitimate file/data storage systems so that data/files
are damaged/lost.

Question Answer Marks

10 Six from: 6

• Carried out by the developers on the development site

• Carry out review of the requirements specification
• Carry out review of the design specification
• Create/develop full test plans
• Create/source test data
• Carry out the test plan(s)
• Record/log errors/defects/problems discovered during testing
• Determine the cause of errors/defects/problems
• Correct errors/detects/problems
• Retest/repeat testing/iterative testing until errors/defects/problems are
fixed/solved
• Uses both white and black box testing.

© Cambridge University Press & Assessment 2024 Page 9 of 10

9626/32 Cambridge International AS & A Level – Mark Scheme February/March 2024
PUBLISHED

Question Answer Marks

11 Eight available. 8

One from:
• Valid definition of virtual server e.g. virtualisation/emulation/software
instance(s) of (different/multiple) (network) servers running on the same
physical hardware of a server.

Max six from:

Benefits:
• Companies can move their web hosting from own local physical servers
to cloud-based virtual-servers
– reducing their costs/maintenance/use of space
• Physical hardware requirements are reduced as components/physical
hardware shared by many virtual servers with reduction in costs/use of
physical space/ maintenance
• Set up/duplication/deployment of virtual servers is faster as physical
hardware is already running/available/configured
• Reduced down time taken for updates/upgrades in server/website
software/hardware as new version can be set up and switched into use
without interfering with old version
• Backup/copying/restoration from failure of virtual servers/switching to
backup/use of image-based backups is quicker/easier than restoring a
physical server as physical hardware is already available/no time taken
for restoring from tapes/disks

Max six from:

Drawbacks:

• Data/web accounts may be at greater security risk due to sharing of

hardware
• High power computing requirements to run all virtual servers at peak
performance else user experience is not optimal
• Failure of physical component/hardware affects all virtual servers so
hosted websites are all offline
• Larger data storage facilities required as every virtual server is self -
contained and has to have all OS/software for its exclusive use
• Larger RAM requirement as each virtual server runs in/must have its own
separate memory allocation
• High bandwidth connections required to service all virtual servers at
optimal performance levels.

Max six if bullets/list of points.

© Cambridge University Press & Assessment 2024 Page 10 of 10