Mark Scheme 1 — BTEC IT Unit 1

RA10

Mark Schemes
BTEC Level 3 National Extended Certificate in IT

Mark Scheme — Predicted Paper 2

Unit 1: Information Technology Systems

BTEC Level 3 National Extended Certificate in Information Technology

Paper Reference	RA10/IT/U1/PP2
Total marks	90
Series	Practice Paper — January 2027

This mark scheme has been prepared by RA10 for use with Predicted Paper 2. It follows the Pearson BTEC Level 3 mark scheme conventions for Unit 1 (AAQ 2025, Issue 5).

Using this mark scheme:
For short-answer questions, award the marks specified. "Accept any other appropriate/alternative response" means equivalent correct answers should be credited.
For levels-based questions, use the Level Descriptors holistically alongside the indicative content. Indicative content is not a checklist.

For revision purposes only. Not an official Pearson qualification document.

Question 1 — Storage & Online (22 marks total)

(a)(i)Give two storage devices that could be used.2 marks

Award one mark for each correct storage device, up to a maximum of two marks.

External hard drive (1)
USB memory stick (1)
Memory/SD card (1)
Network-attached storage (NAS) (1)
Cloud storage (1)

Accept any other appropriate storage device

(a)(ii)Give two output devices that will be needed.2 marks

Award one mark for each correct output device, up to a maximum of two marks.

Monitor/screen (1)
Printer (1)
Speakers (1)
Projector (1)

Accept any other appropriate output device

(b)(i)Explain two benefits of storing records in the cloud.4 marks

Award one mark for identification and one mark for a linked justification/expansion, up to a maximum of four marks.

Accessible anywhere (1) — staff can reach files from any device with an internet connection (1)
Automatic backup (1) — data is preserved if local devices fail (1)
Scalable (1) — storage can grow or shrink to meet demand (1)
Reduces local hardware cost (1) — no need to buy/maintain on-site servers (1)

Accept any other appropriate/alternative response

(b)(ii)Explain two drawbacks of storing records in the cloud.4 marks

Award one mark for identification and one mark for a linked justification/expansion, up to a maximum of four marks.

Requires reliable internet (1) — no connection means no access to data (1)
Ongoing subscription cost (1) — fees continue over time (1)
Security/privacy concerns (1) — data is held by a third party (1)
Speed of transfer (1) — large files depend on connection bandwidth (1)

Accept any other appropriate/alternative response

(c)Describe how backup and recovery procedures protect the shop's data.4 marks

Award one mark for identification and one mark for a linked justification/expansion, up to a maximum of four marks.

Regular backups copy data (1) so it can be recovered if the original is lost/corrupted (1)
Backups are stored separately/off-site (1) so they survive hardware failure or disaster (1)
Recovery procedures restore data (1) minimising downtime (1)
Automated/scheduled backups (1) reduce the risk of human error (1)

Accept any other appropriate/alternative response

(d)Discuss physical access control techniques that can protect the shop's computer equipment and data.6 marks — Levels

Indicative Content (not prescriptive — reward any well-developed point)

Locks on server room doors (key/code/badge) — restrict physical access to hardware
CCTV / security cameras — deter and record unauthorised entry
Biometric door entry (fingerprint) — only authorised staff can enter
Security guards / reception sign-in — control visitors
Locked cabinets/cages for servers and storage devices
Alarms — alert to unauthorised access attempts

Level	Mark	Descriptor
0	0	No rewardable material.
1	1–3	Identifies one or two physical measures with limited explanation. (AO2)
2	4–5	Explains several physical access controls and how they prevent unauthorised access to hardware/data. (AO2/AO3a)
3	6	Thoroughly discusses a range of physical controls (locks, CCTV, biometrics, sign-in, alarms) with clear explanation of how each protects the system, contextualised. (AO2/AO3a)

Question 1 Total: 22 marks

Question 2 — Branch Network (23 marks total)

(a)Give two types of application software that might be installed.2 marks

Award one mark for each correct type of application software, up to a maximum of two marks.

Word processing software (1)
Spreadsheet software (1)
Database software (1)
Presentation software (1)
Email client (1)
Accounting/business software (1)
Web browser (1)

Accept any other appropriate application software type

(b)(i)Explain two benefits of using a WAN to connect the branches.4 marks

Award one mark for identification and one mark for a linked justification/expansion, up to a maximum of four marks.

Connect branches to head office (1) — branches communicate/share data with the main office over distance (1)
Centralised data (1) — all branches access the same central records in real time (1)
Centralised backup/management (1) — data backed up and systems managed centrally (1)
Shared resources across sites (1) — e.g. shared systems/email across the organisation (1)

Accept any other appropriate/alternative response

(b)(ii)Explain two benefits of using a VPN.4 marks

Award one mark for identification and one mark for a linked justification/expansion, up to a maximum of four marks.

Secure remote access (1) — employees connect to the office network safely from anywhere (1)
Encrypted connection (1) — data is protected from interception while in transit (1)
Private tunnel over the internet (1) — traffic is hidden from unauthorised users (1)
Cost-effective (1) — uses the public internet rather than dedicated leased lines (1)

Accept any other appropriate/alternative response

(c)Explain two acceptable behaviours that should be included in the Acceptable Use Policy.4 marks

Award one mark for identification and one mark for a linked justification/expansion, up to a maximum of four marks.

Do not visit inappropriate/offensive websites (1) — avoids malware and misuse of company systems (1)
Do not download unauthorised software (1) — prevents malware and licence breaches (1)
Do not share passwords (1) — protects accounts from unauthorised access (1)
Use systems only for authorised work purposes (1) — protects productivity and data (1)

Accept any other appropriate acceptable behaviour

(d)Draw a flowchart to show the process for logging into the system securely. Include: start, entering a username, entering a password, a security check, access to the system, and logout.9 marks — Levels

Indicative Content (not prescriptive — reward any well-developed point)

Start symbol shown
Username entry step
Password entry step (masked)
A decision/check step (are the details correct?)
Access granted outcome
Access denied / retry path
Logout/end step
Correct flow arrows and annotations

Level	Mark	Descriptor
0	0	No rewardable material.
1	1–3	Basic flowchart showing a few of the main steps with limited logical flow or annotations. (AO2)
2	4–6	Good flowchart showing most of the correct steps in sequence with sensible flow and some annotations. (AO2/AO3a)
3	7–9	Comprehensive, logically correct flowchart showing all key steps (start, username, password, check, access, logout) with a decision/retry path and clear arrows/annotations. (AO2/AO3a)

Question 2 Total: 23 marks

Question 3 — Systems & Data (21 marks total)

(a)Draw a diagram to show how the network is set up and how Felix connects when working remotely. The diagram must include devices and systems that are used, connection types and annotations.6 marks

Award up to six marks for a correct annotated diagram.

Central server shown (1)
Desktop computers shown connecting to the server (1)
Printer (and managers' offices) shown (1)
The mobile worker's laptop and smartphone shown (1)
PAN between laptop and smartphone shown (1)
Connection over the internet to the office server shown with annotations (1)

(b)Explain one factor that affects the use and selection of online systems.2 marks

Award one mark for identification and one mark for a linked justification/expansion, up to a maximum of two marks.

Cost (1) — subscription fees vs free options must suit the budget (1)
Security (1) — how well the system protects client data (1)
Ease of use (1) — staff must be able to use it effectively (1)
Reliability/uptime (1) — the system must be available when needed (1)
Features/functionality (1) — must meet the specific needs of the work (1)
Device compatibility (1) — must work on the devices staff use (1)

Accept any other appropriate factor

(c)Explain two methods of ensuring the accuracy of the data entered into the accounting system.4 marks

Award one mark for identification and one mark for a linked justification/expansion, up to a maximum of four marks.

Validation (1) — checks data is sensible/valid before it is accepted (1)
Verification (1) — checks data matches the original (e.g. double entry, confirmation) (1)
Drop-down lists / input masks (1) — restrict what can be entered (1)
Proofreading (1) — a person checks for mistakes (1)

Accept any other appropriate method

(d)Evaluate the privacy implications for the firm when working with client financial data.9 marks — Levels

Indicative Content (not prescriptive — reward any well-developed point)

Must comply with UK GDPR / Data Protection Act — client data is personal data
Need lawful basis for processing; obtain client consent where required
Data must be kept secure and confidential (encryption, access controls)
Restrict access to authorised staff only (least privilege)
Clients have rights — access, rectification, erasure, objection to processing
Staff training on privacy and ethical handling of client data
Clear privacy notice explaining how data is used
Data minimisation — collect only what is necessary
Consequences of breach — fines, legal action, reputational damage, loss of trust

Level	Mark	Descriptor
0	0	No rewardable material.
1	1–3	Basic understanding of privacy. Mentions one or two considerations with limited application to client data. (AO2)
2	4–6	Good application. Discusses several privacy implications (GDPR, consent, access control, client rights) with some development in context. (AO2/AO3a)
3	7–9	Comprehensive evaluation. Thorough discussion of legal (GDPR), ethical and practical privacy implications of handling client data, including consent, data minimisation, security, client rights and consequences of breach, with a balanced judgement. (AO2/AO3a/AO3b)

Question 3 Total: 21 marks

Question 4 — Emerging Tech (24 marks total)

(a)Describe how the company can use one emerging technology.3 marks

Award up to three marks for an accurate description of how the organisation can use one emerging technology.

Identifies a technology (e.g. AI, IoT, augmented reality, voice assistants) (1)
Describes how it is applied in the organisation (1)
Explains the intended benefit to the organisation (1)

Accept any appropriate emerging technology correctly described

(b)Evaluate how different emerging technologies could benefit the company.9 marks — Levels

Indicative Content (not prescriptive — reward any well-developed point)

Artificial intelligence — automate tasks, analyse data, improve decisions
Internet of Things (IoT) — connected sensors for monitoring and automation
Closed-loop, sensor-driven systems — gather real-time data
Augmented/virtual reality — training, design, marketing
Voice assistants — hands-free control and customer service
Cost and implementation considerations
Impact on staff, customers and working practices
Security and privacy implications

Level	Mark	Descriptor
0	0	No rewardable material.
1	1–3	Basic understanding. Names one or two emerging technologies with limited application. (AO2)
2	4–6	Good evaluation. Describes several emerging technologies and how they could benefit the organisation, with some development. (AO2/AO3a)
3	7–9	Comprehensive evaluation. Thorough discussion of a range of emerging technologies weighing benefits against cost, security and workforce impact, with a justified view. (AO2/AO3a/AO3b)

(c)Evaluate the performance and efficiency of a web server compared to a file server.12 marks — Levels

Indicative Content (not prescriptive — reward any well-developed point)

Web server — serves web pages over the internet; enables public access
File server — stores and shares files on a local network; controlled centrally
Performance: web server optimised for concurrent HTTP requests; file server for file I/O throughput
Efficiency: web server caches content and handles many simultaneous clients; file server provides centralised storage
Security: web server exposed to the internet (needs strong protection); file server on the internal network is more contained
Accessibility: web server accessible remotely; file server typically LAN/remote access only
Suitability depends on need — serving content publicly vs internal file sharing
Cost and management considerations of each

Level	Mark	Descriptor
0	0	No rewardable material.
1	1–4	Basic understanding of web server and/or file server. Limited comparison, mostly descriptive. (AO2)
2	5–8	Good evaluation comparing performance and efficiency of web server vs file server with several points developed in context. (AO2/AO3a)
3	9–12	Comprehensive evaluation. Thorough, balanced comparison covering performance, efficiency, security, accessibility and suitability, clearly contextualised, with a justified conclusion. (AO2/AO3a/AO3b)

Question 4 Total: 24 marks Paper Total: 90 marks