🔥 Most Repeated — Introduction to Computing

CSS Computer Science (Optional) — Paper-I, Section-A, Topic I. These 9 question-patterns were identified by reviewing actual FPSC Computer Science past papers (2016, 2017, 2018, 2019, 2022, 2024) and pulling out the themes that recur across multiple years — either the exact same question or the same underlying concept asked with different scenario details. Wording below is paraphrased/summarized from the official papers for study purposes; year tags show where each pattern was drawn from.

Q1. Categories of Computers — Which Suits an Individual User

Appeared: 2016, Q2(b)

Determine which computer category (supercomputer, mainframe, minicomputer, microcomputer) suits an individual user, with justification.

Solution:

Conclusion: A microcomputer (desktop/laptop) suits an individual user.

Justification: it is affordable for a single owner, its processing power is more than adequate for everyday tasks (documents, browsing, media, light programming), it is portable and single-user by design (no need to share resources like a mainframe or supercomputer does), and its running/maintenance costs are negligible compared to institutional-grade machines.

---

Q2. Curbing Cybercrime — Technical Countermeasures

Appeared: 2017, Q2(a)

The internet era has given rise to the problem of cybercrimes. What technical means would you suggest to curb this problem?

Solution:

Cybercrime is any criminal activity carried out using computers or networks — hacking, phishing, identity theft, malware distribution, financial fraud, and cyberbullying are common forms. Effective technical countermeasures include:

• Firewalls — filter incoming/outgoing traffic against defined security rules, blocking unauthorized access
• Antivirus / anti-malware software — detects and removes malicious code before it executes
• Encryption — protects data both at rest (stored files, databases) and in transit (TLS/SSL for web traffic), so intercepted data is unreadable
• Intrusion Detection/Prevention Systems (IDS/IPS) — monitor network traffic for suspicious patterns and can block attacks in real time
• Multi-factor authentication (MFA) — a stolen password alone is not enough to gain access
• Regular patching and updates — closes known vulnerabilities before attackers can exploit them
• Network segmentation — limits how far an attacker can move if one part of the network is breached
• Secure coding practices — prevents vulnerabilities like SQL injection and buffer overflows at the source
• Backups and disaster recovery plans — neutralize the impact of ransomware
• Digital forensics readiness — logging and monitoring so incidents can be investigated and attackers traced

Exam angle: examiners want technical means specifically — mention legal/international cooperation only as a brief closing point, not as the core of the answer.

---

Q3. Virus vs Trojan vs Worm

Appeared: 2022, Q2(b)

Discuss the difference between a computer virus, a trojan, and a worm.

Solution:

One-line summary: a virus needs a host file and user action; a worm spreads by itself over a network with no host needed; a trojan tricks the user by posing as something useful, then delivers its real payload once run.

---

Q4. Volatile vs Non-Volatile Memory

Appeared: 2016, Q3(b)

Explain and differentiate between volatile and non-volatile memory with examples.

Solution:

Why it matters: a computer keeps running programs in RAM for speed, but must save anything it needs to keep to non-volatile storage — which is exactly why unsaved work is lost in a power failure but saved files survive a reboot.

---

Q5. Difference Between Related Disciplines (CS, SE, IT, IS, CE, Bioinformatics)

Appeared: 2019, Q2(b)

Write the differences between Computer Science, Software Engineering, Information Technology, Information Systems, Computer Engineering, and Bioinformatics.

Solution:

Memory hook: CS = theory, SE = process/engineering discipline, IT = keeping infrastructure running, IS = business + tech bridge, CE = hardware design, Bioinformatics = computing applied to biology.

---

Q6. Von Neumann vs Harvard Architecture

Appeared: 2017, Q2(b)

Compare Harvard and Von-Neumann computer architectures, discussing their capabilities.

Solution:

Exam angle: note that most modern general-purpose CPUs are Von Neumann at the main-memory level but borrow Harvard-style separation for L1 cache — a strong answer mentions this hybrid reality.

---

Q7. Number System Conversions (Binary → Decimal, Octal, Hexadecimal)

Appeared: 2016, Q4(b)

Convert the binary numbers 100, 10100, and 100101 to decimal, octal, and hexadecimal.

Solution:

Method:

• To decimal: sum each bit × its positional power of 2 (from the right, starting at 2^0). E.g. 100101 = 1×32 + 0×16 + 0×8 + 1×4 + 0×2 + 1×1 = 37
• To octal: group bits in 3s from the right (pad with leading zeros if needed), convert each group to its octal digit. E.g. 100101 → 100 101 → 4, 5 → 45
• To hexadecimal: group bits in 4s from the right (pad with leading zeros if needed), convert each group to its hex digit. E.g. 100101 → 0010 0101 → 2, 5 → 25

---

Q8. Software Licensing — BSD 3-Clause License

Appeared: 2022, Q2(a)

Give a detailed note on a revised BSD 3-clause license. Also name 5 software using this license.

Solution:

The BSD 3-clause license is a permissive open-source license (unlike "copyleft" licenses such as the GPL, it does not require derivative works to also be open-sourced). Its three conditions are:

1. Redistributed source code must retain the original copyright notice, list of conditions, and disclaimer.
2. Redistributed binary form must reproduce the same copyright notice, conditions, and disclaimer in the documentation/materials provided with the distribution.
3. Neither the name of the copyright holder nor its contributors may be used to endorse or promote derived products without prior written permission.

Because it imposes almost no restrictions on reuse (commercial use, modification, and closed-source redistribution are all allowed), it is popular for infrastructure software that vendors want widely adopted.

5 examples of BSD-licensed / BSD-style-licensed software: FreeBSD, NetBSD, OpenBSD, PostgreSQL, and Nginx (2-clause BSD).

---

Q9. Preserving Digital Evidence from a Crime Scene

Appeared: 2018, Q2(b) — related theme also in 2024, Q2(b–c) on virus program structure

How can digital evidence be preserved from a crime scene? Discuss with examples of digital devices commonly used today.

Solution:

• Maintain chain of custody: document who collected, handled, and accessed the evidence, and when, so it is admissible in court.
• Use write-blockers: hardware/software that prevents any write operation to the original storage device during acquisition, guaranteeing the original is never altered.
• Create a forensic image: take a bit-by-bit copy of the storage media (not just a file copy), then compute a cryptographic hash (MD5/SHA-256) of both original and image — matching hashes prove the copy is identical and untampered.
• Work only on the copy, never the original device, for all subsequent analysis.
• Device-specific handling:
  • Smartphones: place in a Faraday bag immediately to block remote wipe/network signals.
  • Hard disks/SSDs: image using a write-blocker; SSDs need extra care since TRIM can alter data even when "read-only."
  • Cloud-stored data: cannot be physically seized — requires a legal preservation request to the service provider.
• Secure storage: keep original evidence in a controlled, logged environment to prevent tampering after seizure.

Exam angle: the two ideas graders look for specifically are (1) never work on the original — always image first, and (2) hashing as the mechanism that proves integrity.

---

Q10. Cloud Computing for Large File Sharing

Appeared: 2026, Q2(a)

Your team needs to share large files quickly but email limits attachments. What computing method should they use and how will it solve the issue?

Solution:

Cloud computing / cloud storage (Google Drive, OneDrive, Dropbox, or a dedicated large-file-transfer service) is the appropriate method.

• Definition: cloud computing delivers storage, computing power, and services over the internet from remote servers, rather than relying on local hardware, and is accessible on demand from anywhere.
• How it solves the issue: instead of attaching the file directly to an email — which imposes hard size limits (typically ~25MB) — the file is uploaded once to cloud storage, and a shareable link (with optional permission/expiry controls) is sent by email instead of the file itself. The recipient then downloads directly from the provider's servers, completely bypassing the attachment limit.
• Added benefits: version history, simultaneous multi-user collaboration, and access from any internet-connected device.
• Alternative technical means (for a fuller answer): FTP/SFTP servers, or a Content Delivery Network (CDN) for very large media files.

---

Q11. Phishing — Risk of an Email Requesting Banking Details

Appeared: 2026, Q2(b)

You receive an email asking for your banking details. What kind of risk or security issue this might be? How to respond?

Solution:

This is a phishing attack — a form of social engineering where an attacker impersonates a trustworthy entity (a bank, a service provider) to trick the victim into revealing sensitive credentials.

• Risk category: social engineering / identity theft / financial fraud.
• Warning signs: urgent or threatening language, a spoofed/mismatched sender address, a generic greeting, suspicious links, and requests for information a legitimate bank would never ask for by email.
• Correct response:
  • Do not click any links or reply with the requested information.
  • Verify independently by contacting the bank through its official phone number or website — never through contact details given in the suspicious email.
  • Report the email (most clients have a "Report Phishing" option) and delete it; report to the bank's fraud department.
  • Do not open any attachments.
  • If details were already shared, contact the bank immediately to freeze/monitor the account and change all related passwords.

Exam angle: name the attack type explicitly ("phishing") — describing only the symptoms without naming the concept is a common way marks are lost on this question.

---

Q12. Computer Hardware Components for an Office Upgrade

Appeared: 2026, Q2(c)

Your office plans to upgrade hardware but employees don't know what components matter. Which computer hardware components would you explain to help them choose better systems?

Solution:

Guidance: match components to actual workload — office/document work should prioritize RAM and SSD; design/engineering workloads should prioritize CPU, GPU, and RAM.

---

Frequency Note

Papers reviewed for this topic: 2016, 2017, 2018, 2019, 2022, 2024, 2026. Security/ethics themes (cybercrime, malware types, phishing, digital forensics, licensing) and computer classification/architecture/hardware/memory fundamentals are the two clusters that recur most; number-system conversion appears reliably as a smaller, guaranteed-marks sub-question.

---

2026 Past Paper MCQs (Part-I)

1. A company wants to upgrade its storage media for fastest possible data access. Which one is the best option?

   A) HDD B) Optical Drive C) Solid State Drive (SSD) D) None of these

   Why: SSDs have no moving parts and offer the fastest random-access speeds among the options listed.

2. A programmer is developing software and needs to consider ethical challenges. What is a major concern?

   A) Data encryption B) Plagiarism C) User interface D) None of these

   Why: copying code/design without attribution is the classic software-ethics concern here — data encryption and UI are technical/design concerns, not ethical ones.

3. How does the history of computing influence modern computer architecture?

   A) By dictating hardware design B) By shaping software development C) By influencing both hardware and software D) None of these

   Why: architectural lessons (e.g., the Von Neumann bottleneck) shaped both later hardware designs and the software paradigms built around them.