This is the final part of my walk-through of the June 2025 Paper 1 (0417/12). Rather than just listing answers, I want to explain the thinking behind each topic, because that's what separates a Grade C from a Grade A in the exam. The three areas here — web security, transferring files, and how an ATM processes a withdrawal — come up in some form almost every series, so they're well worth nailing.
📄 You can find the original question paper and mark scheme on the Cambridge International past papers page. I've paraphrased the questions below and explained the answers in my own words rather than reproducing the official text.
Securing websites with SSL
One question on this paper asked candidates to explain what SSL is, how a user can tell it's in use, and to weigh up the pros and cons of finding a site through a search engine.
What you actually need to understand. SSL (Secure Sockets Layer) is a security protocol — a set of rules computers follow to communicate safely. When you connect to a secure website, SSL sets up an encrypted link between your browser and the web server before any real data is exchanged. Encryption scrambles the data so that even if it's intercepted as it travels across the internet, it can't be read. This is what protects things like passwords and card numbers from being captured in transit.
A small detail that impresses examiners: SSL has largely been succeeded by TLS (Transport Layer Security), but the term "SSL" is still used loosely, and 0417 accepts it. Mentioning that you know the difference shows real understanding.
How a user spots it. Two signs: the address begins with HTTPS (the "S" is for secure) rather than HTTP, and the browser shows a padlock icon in the address bar.
The misconception that loses marks. Students often describe SSL as "a website" or "an app." It's neither — it's a protocol working in the background. A subtler trap is assuming the padlock means a site is trustworthy. It only means the connection is encrypted; a scam site can still have HTTPS. Knowing that distinction is genuinely useful beyond the exam.
On search engines — the balanced answer is the key. Strengths: they're fast, you can search by keywords without knowing the exact web address, and they make unfamiliar sites easy to find. Weaknesses: you can be overwhelmed by results, many are irrelevant if your search terms are vague, sponsored results push adverts to the top, and refining a poor query wastes time. A 5-mark question wants you to give both sides and say something about each — a one-sided list caps your marks.
✏️ Practice it: "A user is worried about entering bank details on a website. Explain how SSL protects the data they send, and describe one limitation the user should still be aware of."
Transferring files between two computers
Another question asked for several ways a student could move files from a college computer to their home computer, and then specifically how they could do it using the cloud.
The principle to grasp. The "best" method depends on file size, distance, and what equipment is available — there's rarely one right answer, so examiners accept any sensible options. Realistic choices include emailing the file to yourself as an attachment, copying it to a USB flash drive, using a portable external hard drive or SSD, or burning it to a rewritable optical disc. Each has trade-offs: email is convenient but has size limits; a USB stick is fast and portable but easy to lose; an external drive handles large files well but is bulkier.
The misconception that loses marks. Suggesting a short-range technology like Bluetooth for a college-to-home transfer. The two computers aren't near each other, so close-proximity methods don't make sense. Always sanity-check that your answer fits the scenario.
Using the cloud — think in steps. The marks here are for the process, in order: at college, log in to a cloud storage account (such as Google Drive or OneDrive) and upload the project file; then at home, log in to the same account and download it. Two things make a cloud answer complete: you need an account and an internet connection at both ends. State those and you've covered the method properly.
✏️ Practice it: "A teacher needs to share a 2 GB video with students who are working from home. Suggest the most suitable transfer method and justify your choice."
How an ATM processes a cash withdrawal
The final question asked for the processing an ATM carries out after the customer's card has been inserted.
Why this trips people up. The word that matters is processing. Weak answers say "the ATM gives you money" — that's the outcome, not the process. Examiners want the ordered sequence of checks and actions happening behind the scenes, so think of it like an algorithm.
The sequence, in order. Once the card is read, the ATM contacts the bank's computer over a network. The customer enters their PIN, and the system validates the PIN along with the card itself — checking it isn't expired, stolen, or blocked. If those pass, it accesses the customer's account, then checks the requested amount against the available balance and the daily withdrawal limit. Only if every check succeeds does it authorise and dispense the cash, update the account balance, return the card, and optionally print a receipt.
Notice how each step is a decision or action — that ordered, keyword-rich style is exactly what scores. If a check fails (wrong PIN, insufficient funds, over the daily limit), the transaction is refused, which is worth knowing for "what if" follow-ups.
✏️ Practice it: "Describe what happens at an ATM if a customer enters an incorrect PIN three times, and explain why the system is designed this way."
Quick recap
- SSL/TLS encrypts the link between browser and server — spot it by HTTPS and the padlock, but remember the padlock only proves encryption, not honesty.
- File transfer has no single right answer — match the method to file size and distance, and give the cloud process in steps (account + internet at both ends).
- ATM withdrawals are a sequence of validation checks ending in dispensing cash and updating the account — describe the process, not just the result.
