AP Computer Science Principles Practice 5: Computing Innovations is the computational thinking practice where you investigate how computing innovations work and what they do to people, data, and society. You explain how computing systems function, how data turns into knowledge, what impacts an innovation creates, and how legal and ethical factors shape the way computing is used.

This practice shows up only on the multiple-choice section. None of its subskills appear on the Create performance task. That makes Practice 5 a reading and reasoning practice rather than a coding or writing one.

Quick facts:

Five subskills: 5.A, 5.B, 5.C, 5.D, 5.E
All five appear on the MCQ section
None appear on the FRQ or Create performance task
Closely tied to Big Idea 5 (Impact of Computing), but also pulls from Big Idea 2 (Data) and Big Idea 4 (Computer Systems and Networks)

more resources to help you study

cheatsheets score calculator

What Practice 5: Computing Innovations Means

A computing innovation is anything that includes a program as an essential part. That covers physical devices (a smart home gadget), software (a phone app), and concepts (an algorithm that recommends videos).

To "investigate computing innovations" means you look at one and answer questions like these:

How does the system actually move and process information?
What new knowledge does the data behind it reveal?
Who benefits and who is harmed by it?
What happens when it collects data about people?
Is the way it is being used legal and ethical?

You are not building the innovation here. You are analyzing it.

What This Practice Requires

Each subskill asks for a specific type of analysis.

5.A: Explain how computing systems work. Describe how parts of a system handle and transmit data. A common example is how the Internet uses packets, where each packet carries data plus metadata used for routing.

5.B: Explain how knowledge can be generated from data. Show how analyzing data or metadata produces new information. You should know the difference between data (the actual content, like pixel color values) and metadata (data about data, like the date and location a photo was taken).

5.C: Describe the impact of a computing innovation. Identify realistic benefits and harms. Impacts can be intended or unintended, and they can affect individuals, communities, or whole societies.

5.D: Describe the impact of gathering data. Explain what happens when an innovation collects and stores data, especially privacy concerns. Storing personal information creates risk if unauthorized people access it.

5.E: Evaluate the use of computing based on legal and ethical factors. Judge a computing scenario against legal and ethical standards. This includes security practices like multifactor authentication, and threats like phishing, where a fake message tricks a user into giving up a password.

Skills You Need for This Practice

You can build these without writing any code.

Tell data and metadata apart. Data is the content; metadata describes the content. Pick the right one for a given goal.
Trace how information flows through a system. For the Internet, that means packets, routing, and reassembly.
Separate benefits from harms, and intended from unintended effects. A single innovation usually has both.
Spot privacy risks in data collection. Ask what is stored, who can reach it, and what happens if it leaks.
Match scenarios to security concepts. Know phishing, multifactor authentication, encryption, and malware well enough to identify them in a story.
Read carefully and eliminate. Many Practice 5 questions ask for the LEAST likely or the BEST answer, so wrong answers are often true but off-target.

How It Shows Up on the AP Exam

Practice 5 lives entirely on the multiple-choice section. There is no Create task component for any of its subskills.

Two MCQ question types connect strongly to this practice:

Single-select questions that present a scenario and ask about impact, data, or ethics.
Single-select questions with a reading passage about a computing innovation. The exam includes a set of these, where you read a short description of an innovation and answer questions about how it works and what it does.

Practice 5 is concentrated in Big Idea 5 (Impact of Computing), which carries a large share of the MCQ section. You will also see 5.A and 5.B questions tied to Big Idea 2 (Data) and Big Idea 4 (Computer Systems and Networks).

Watch for these question stems:

"Which of the following best explains how..."
"Which is the most likely data privacy concern..."
"Which is LEAST likely to be a benefit..."
"Which of the following is NOT an example of..."

Examples Across the Course

These show how Practice 5 reaches into different parts of the course.

Networks and 5.A (Big Idea 4). A question about how data is assembled into packets for transmission. The correct idea: each packet holds data plus metadata used for routing. This connects Practice 5 to how the Internet works.

Photos and 5.B (Big Idea 2). A digital photo stores pixel color data plus metadata like date and location. To estimate whether a photo was taken at a particular public event, you analyze the metadata, not the pixel data. That is data turning into knowledge.

Customer phone system and 5.C, 5.D (Big Idea 5). A retail chain upgrades a voice-based call system that stores customer information in a database. A benefit question (5.C) asks which gain is least likely, such as guaranteeing a human representative for every call. A privacy question (5.D) flags the real risk: stored personal data could be exposed if an unauthorized person reaches the database.

Smart home device and 5.E (Big Idea 5). A user registers a device with an email and password. A phishing attack would be a fake email from the "manufacturer" asking the user to confirm the password through a link. This tests legal and ethical evaluation through a security lens.

School technology policy and 5.C (Big Idea 5). A policy that gives every enrolled student a laptop or tablet has a positive effect on the digital divide, while policies that assume students already own devices do not.

How to Practice Practice 5: Computing Innovations

Practical advice, not official rules:

Build a security vocabulary sheet. Define phishing, multifactor authentication, encryption, malware, and keylogging in your own words. Many 5.E questions just test recognition.
Practice the data versus metadata sort. For any scenario, write down what counts as data and what counts as metadata, then decide which answers the goal.
List both sides of every innovation. When you read about any app or device, jot one benefit and one harm. This trains 5.C and 5.D thinking fast.
Read passage questions twice. For the computing innovation reading passages, read the passage once for the big picture, then return to it for each question.
Underline the qualifier. Circle words like BEST, LEAST, NOT, and most likely. These flip how you choose the answer.
Eliminate true-but-irrelevant choices. On impact and ethics questions, several options are plausible. Keep the one that matches the exact goal in the stem.

Common Mistakes

Confusing data and metadata. Picking pixel data when the question needs location metadata, or the reverse.
Mixing up attack types. Calling a phishing scenario a software vulnerability, or confusing it with a denial of service flood. Phishing relies on tricking the user, not breaking the code.
Treating a lockout as multifactor authentication. Locking an account after failed attempts is a security step, but it is not a second factor.
Ignoring unintended impacts. Assuming an innovation only does what it was designed to do.
Missing the qualifier word. Answering "most likely benefit" when the question actually asked for the LEAST likely one.
Overthinking the system. For 5.A, the simplest accurate description of how data moves is usually correct.

Quick Review

5.A explains how computing systems work, like packets carrying data plus routing metadata.
5.B explains how knowledge comes from data, including the difference between data and metadata.
5.C describes the impacts of an innovation, both benefits and harms, intended and unintended.
5.D describes the impact of gathering data, especially privacy risks from stored personal information.
5.E evaluates computing on legal and ethical factors, including phishing and multifactor authentication.
All five are tested on the MCQ section only, with no FRQ or Create task role.
Practice 5 is strongest in Big Idea 5 but reaches into Big Idea 2 and Big Idea 4.
Read carefully, watch qualifier words, and separate true answers from the answer that fits the goal.