📁 Paper 2 · 3.4 Computer Systems
3.4.3b Utility Software
AQA 8525 · GCSE Computer Science · ~10 min read
Notes
──
Video
──
Worksheet
──
Quiz

What Is Utility Software?

Utility software is a category of system software designed to help configure, maintain, and optimise a computer. Unlike the OS (which manages all hardware and software) or application software (which serves users directly), utility programs perform specific maintenance tasks in the background or on demand.

Antivirus Software

Antivirus software detects, prevents, and removes malware (malicious software). It works using several techniques:

TechniqueHow it works
Signature scanningCompares files against a database of known malware signatures (patterns). Fast but requires frequent database updates to catch new threats.
Heuristic analysisAnalyses program behaviour for suspicious patterns (e.g. trying to modify system files). Can detect new (zero-day) threats not yet in the database.
SandboxingRuns suspicious files in an isolated environment to observe behaviour before allowing them to execute on the real system.
Real-time monitoringContinuously checks files as they are accessed, downloaded, or executed.

Disk Defragmentation

Over time, files stored on a HDD become fragmented — stored in non-contiguous sectors. The read/write head must move to multiple locations to read a single file, slowing access.

Defragmentation rearranges the data so files are stored in contiguous sectors, reducing head movement and improving read speed.

⚠️ Defragmentation is not needed for SSDs. SSDs have no moving parts and access all locations in equal time. Running a defragmenter on an SSD wastes write cycles and reduces the SSD's lifespan.

Backup Software

Backup software copies data to a secondary location to protect against data loss. There are three types of backup:

Full backup

Copies all data every time. Simplest to restore from — only one backup set needed.

Slowest to create

Most storage space needed

Incremental backup

Backs up only files changed since the last backup (whether full or incremental).

Fastest to create

Slowest to restore — needs full + all incrementals

Differential backup

Backs up files changed since the last full backup (grows each time).

Medium speed

Restore needs full + latest differential only

File Compression Tools

File compression tools (e.g. WinZip, 7-Zip) reduce file sizes to save storage space and speed up file transfers. They may use lossless compression (ZIP, GZIP) so the original files are perfectly recoverable after decompression.

Other Utilities

UtilityPurpose
Disk cleanupRemoves temporary files, browser cache, and redundant system files to free up disk space
System monitoringDisplays real-time information about CPU usage, RAM usage, disk activity, and network traffic (e.g. Task Manager in Windows)
Encryption softwareEncrypts files or entire drives (e.g. BitLocker) to protect data at rest from unauthorised access
FirewallMonitors network traffic; blocks unauthorised inbound/outbound connections based on rules
Exam tip: For backup questions: full backup = everything, most space, simplest restore; incremental = fastest to make, slowest to restore (needs all pieces); differential = middle ground (needs full + one differential to restore). A common 4-mark question is to compare incremental and differential backup strategies.
⚠️ Common Mistakes
  • Confusing incremental and differential: incremental backs up changes since the LAST BACKUP; differential backs up changes since the LAST FULL BACKUP
  • Running disk defragmenter on an SSD — harmful, not helpful
  • Thinking antivirus only uses signature scanning — heuristic analysis is also key for new (zero-day) threats
Video coming soon

Key points

  • Utility software: maintenance programs — antivirus, defragmenter, backup, compression, cleanup
  • Antivirus: signature scanning (database) + heuristic analysis (behaviour detection for new threats)
  • Defragmentation: rearranges HDD files to contiguous sectors; NOT for SSDs
  • Full backup: all data, most space, simplest restore; Incremental: only changes since last backup; Differential: changes since last full backup
  • Restore complexity: Full = easiest; Incremental = hardest; Differential = middle
Click slide or press arrow keys to navigate
✍️

Worksheet — 3.4.3b Utility Software

8 questions · 23 marks

Q1Describe how antivirus software uses signature scanning to detect malware.[2]
✅ Mark scheme
Mark scheme
Antivirus software compares files against a database of known malware signatures (identifying patterns/code sequences) [1]; if a match is found, the file is flagged as malicious [1].
Q2What is heuristic analysis and why is it useful for detecting new malware?[2]
✅ Mark scheme
Mark scheme
Heuristic analysis examines a program's behaviour for suspicious patterns (e.g. trying to modify system files, access the registry, spread to other files) [1]; it can detect new/unknown malware that has not yet been added to the signature database [1].
Q3Explain why a HDD's performance might slow down over time and how disk defragmentation helps.[3]
✅ Mark scheme
Mark scheme
Files become fragmented — stored in non-contiguous sectors as files are written, deleted, and rewritten over time [1]; the read/write head must physically move to multiple locations to read a single file, increasing access time [1]; defragmentation rearranges file fragments so each file is stored in contiguous sectors, reducing head movement and improving read speed [1].
Q4Compare full backup and incremental backup, including their relative advantages and disadvantages.[4]
✅ Mark scheme
Mark scheme
Full backup copies all data every time [1]; advantage: simple to restore (only one backup set needed); disadvantage: slow to create and uses maximum storage space [1]; incremental backup copies only files changed since the last backup [1]; advantage: fast to create, uses less space; disadvantage: slower to restore (need the full backup + every incremental backup since) [1].
Q5A company runs a full backup every Monday. On Tuesday, Wednesday, and Thursday they run differential backups. On Friday the system fails. Describe exactly which backup files are needed to restore the data.[2]
✅ Mark scheme
Mark scheme
Monday's full backup [1]; and Thursday's differential backup only (differential contains all changes since Monday) [1]. (No need for Tuesday's or Wednesday's differential)
Q6Explain why running a disk defragmenter on an SSD is not recommended.[2]
✅ Mark scheme
Mark scheme
SSDs access all memory locations equally fast regardless of physical position, so fragmentation does not slow them down [1]; defragmenting an SSD performs unnecessary write operations, reducing the drive's lifespan (SSDs have a limited number of write cycles) [1].
Q7Give two utilities a system administrator might use to maintain a school's computer network, and explain what each does.[4]
✅ Mark scheme
Mark scheme
Any two from (1 mark utility + 1 mark explanation): Antivirus — scans for and removes malware to protect computers [2]; Backup software — creates copies of data to protect against loss [2]; Firewall — monitors and filters network traffic to block unauthorised access [2]; Disk cleanup — removes temporary files to free storage space [2]; Encryption software — encrypts sensitive student data to prevent unauthorised access [2].
Q8A small business performs a full backup on Sunday and incremental backups Monday–Saturday. On Saturday afternoon, the server crashes. Describe how the business would restore all data, and evaluate whether incremental backup was the best strategy for them.[4]
✅ Mark scheme
Mark scheme
Restore requires: Sunday's full backup + Monday + Tuesday + Wednesday + Thursday + Friday + Saturday's incrementals (all 7 files) [1]; advantage: quick to create each day, uses little storage [1]; disadvantage: slow and complex to restore as all incremental files since Sunday are needed [1]; evaluation: incremental is good for space and daily speed but the business should consider differential if fast recovery is critical [1].
Check your answers above.
Topic Quiz
Q 1 of 10
You scored
out of 10
Card 1 of 5
Click to flip
🎉
All done!
TermDefinition
🎯

Mini Test — 3.4.3b Utility Software

Timed exam conditions.

  • 8 questions · 10 minutes
  • 5 MCQ + 3 short answer
← 3.4.3a System Software
37 of 57 · AQA 8525
3.4.4a OS Functions →