Software Engineering › Learn step by step › Y12 Secure Software Architecture
Item 186 of 426 · Year 12: Secure Software Architecture, 9 of 57
Authentication
Term Key terms bank
Jump to a topic
- Exam format, question types and command words (46)
- Year 11: Programming Fundamentals (69)
- Year 11: The Object-Oriented Paradigm (33)
- Year 11: Programming Mechatronics (29)
- Year 12: Secure Software Architecture (57)
- Year 12: Programming for the Web (59)
- Year 12: Software Automation (35)
- Year 12: The Software Engineering Project (47)
- Diagrams and modelling tools (18)
- Python, SQL, pseudocode and CSS patterns (33)
Definition
Proving that a user, device or system is who it claims to be (passwords, multi-factor, certificates).
Example: Login with a password and a one-time code is authentication.
Found in: syllabus, sample exam and familiarisation guidelines, school notes, past SDD papers.
Proving who you are.
Where you'll use it in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Multiple choice: 2025 Q6: 'Ensuring that parties exchanging information are who they claim to be'
- Fill in the blanks: Choose this term to complete a statement or table.
- Matching or table: Match it to its description, example or category.
- Short answer: Define, outline or explain it and tie it to the scenario.
Where it has appeared in the paper
Programming for the Web (Part A); Secure Software Architecture (Part A, B). Part letters follow each paper’s own layout.
Related past questions
- 2025 HSC Q6 (1 mark): Web protocols Programming for the Web (Part A) · 1 mark
- 2025 HSC Q23c (3 marks): Fundamental software design security concepts Secure Software Architecture (Part A) · 3 marks
- Sample exam Q19 (4 marks): Authentication and authorisation Secure Software Architecture (Part B) · 4 marks
How to use it
A model sentence
“Proving that a user, device or system is who it claims to be (passwords, multi-factor, certificates).” Then apply it: Login with a password and a one-time code is authentication.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
Official worked answer
Sample exam Q19 (4 marks): Authentication and authorisation (4 marks): official criteria and sample answer
Criteria
4: Explains how authentication AND authorisation could be applied. 3: Explains how authentication OR authorisation could be applied, OR outlines how both could be applied. 2: Outlines some features of authentication and/or authorisation. 1: Some relevant information.
Sample answer
Authentication ensures that only staff and students with valid usernames and passwords, which should be encrypted in storage (eg using hashing), can access the app. Authorisation controls access to specific features of the app based on user roles or groups. Teachers may have permissions to upload, assign and track homework, while students can only download tasks and upload completed work. By organising users into specific roles or groups, the app restricts access to appropriate functionality, ensuring that each user can only perform actions relevant to their role or group.
Go deeper
- Flashcard: Authentication in Secure Software Architecture (Year 12) · study that set
- Memorise: Fundamental software design security concepts (six words)
- Key terms bank entry: Authentication
- Master answer: sample-q19 (4 marks, short answer (explain, max 75 words)) (Master model answers: Secure Software Architecture)
- Notes: Design, develop and implement secure code to minimise vulnerabilities in user action… (Secure Software Architecture (Year 12))
- Master answer: sdd2023-q23 (5 marks, short answer / extended) (Master model answers: Secure Software Architecture)
- Full term page: every question, note and marking comment for Authentication
Check yourself
Explain “Authentication” in one sentence, give an example, and name a question type that could test it.
Reveal the answer
Proving that a user, device or system is who it claims to be (passwords, multi-factor, certificates).
Example: Login with a password and a one-time code is authentication.
Could be tested as: Multiple choice, Fill in the blanks, Matching or table, Short answer.
Quick multiple choice
Which of these is an example of BROKEN authentication?
- Storing passwords as salted hashes
- Locking the account after five failed attempts
- Allowing the password '1234' and unlimited login attempts
- Requiring multi-factor authentication
Show the answer
C
Weak password rules and unlimited guessing make authentication easy to break. The other options are good controls.
Source: original (written for this study pack; not a NESA question). Open it in the multiple-choice bank.