Vulnerability

Term

Jump to a topic

See every item in the sequence

Definition

A weakness in software, hardware or process that an attacker could exploit.

Example: An unpatched library is a vulnerability.

Found in: syllabus, sample exam and familiarisation guidelines, school notes.

Where you'll use it in the test

Syllabus area: Y12 Secure Software Architecture.

Question types it can appear in

Multiple choice: Pick the option that matches the definition or example.
Short answer: Define, outline or explain it and tie it to the scenario.
Fill in the blanks: Choose this term to complete a statement or table.

Where it has appeared in the paper

Secure Software Architecture (Part A, B). Part letters follow each paper’s own layout.

How to use it

A model sentence

General advice, built from the definition and example above

“A weakness in software, hardware or process that an attacker could exploit.” Then apply it: An unpatched library is a vulnerability.

In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.

Command words used with it

From the linked past questions

Classify: Arrange or include in classes or categories. (Sample exam Q8 (2 marks): SAST and DAST)
Analyse: Identify components and the relationship between them; draw out and relate implications. (Sample exam Q8 (2 marks): SAST and DAST)

Official worked answer

Sample exam Q8 (2 marks): SAST and DAST (2 marks): official criteria and sample answer

Criteria

2: Correctly classifies all the strategies. 1: Correctly classifies THREE strategies, which must include ONE SAST and ONE DAST.

Sample answer

SAST: (2) and (5). DAST: (1), (3) and (4).

Open the question page

Go deeper

Flashcard: Vulnerability in Secure Software Architecture (Year 12) · study that set
Memorise: Fundamental software development steps for secure code
Notes: Apply and evaluate strategies used by software developers to manage the security of… (Secure Software Architecture (Year 12))
Notes: Code security strategies: code review, SAST, DAST, vulnerability assessment, pen testing (Secure Software Architecture (Year 12))
Notes: Test and evaluate the security and resilience of software by determining… (Secure Software Architecture (Year 12))
Master answer: fam-q11b (2 marks, short answer (explain)) (Master model answers: Secure Software Architecture)
Full term page: every question, note and marking comment for Vulnerability

Check yourself

Explain “Vulnerability” in one sentence, give an example, and name a question type that could test it.

Reveal the answer