Software Engineering › Learn step by step › Y12 Secure Software Architecture
Item 193 of 426 · Year 12: Secure Software Architecture, 16 of 57
Sandboxing
Term Key terms bank
Jump to a topic
- Exam format, question types and command words (46)
- Year 11: Programming Fundamentals (69)
- Year 11: The Object-Oriented Paradigm (33)
- Year 11: Programming Mechatronics (29)
- Year 12: Secure Software Architecture (57)
- Year 12: Programming for the Web (59)
- Year 12: Software Automation (35)
- Year 12: The Software Engineering Project (47)
- Diagrams and modelling tools (18)
- Python, SQL, pseudocode and CSS patterns (33)
Definition
Running code in an isolated, restricted environment so that if it is malicious or faulty it cannot affect the rest of the system.
Example: A browser tab runs in a sandbox so a bad page cannot read your files.
Found in: syllabus, sample exam and familiarisation guidelines, school notes.
Isolated environment that limits what code can do.
Where you'll use it in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Short answer: Discuss sandboxing (familiarisation Q6)
- Multiple choice: Pick the option that matches the definition or example.
- Fill in the blanks: Choose this term to complete a statement or table.
Where it has appeared in the paper
Secure Software Architecture (Part C). Part letters follow each paper’s own layout.
Related past questions
- Familiarisation Q6 (3 marks): Sandboxing Secure Software Architecture (Part C) · 3 marks
How to use it
A model sentence
“Running code in an isolated, restricted environment so that if it is malicious or faulty it cannot affect the rest of the system.” Then apply it: A browser tab runs in a sandbox so a bad page cannot read your files.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
No linked question shows the command word for this term. Across the past short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.
Official worked answer
Familiarisation Q6 (3 marks): Sandboxing (3 marks): official criteria and sample answer
Criteria
3: Thorough discussion of the use of sandboxing in the operating system. 2: Some understanding of the advantages and/or disadvantages. 1: Identifies a feature of sandboxing.
Sample answer
Sandboxing allows each application to be isolated so that it cannot pose a security risk by accessing system resources or other applications. However, it requires more resources as each application requires its own container. It may also be less convenient for users to access resources such as the device's camera or files as the sandbox will either prevent access or make it more difficult.
Go deeper
- Flashcard: Sandboxing in Secure Software Architecture (Year 12) · study that set
- Memorise: Cryptography and sandboxing in 'security by design'
- Key terms bank entry: Sandboxing
- Master answer: fam-q6 (3 marks, short answer (discuss)) (Master model answers: Secure Software Architecture)
- Notes: Cryptography and sandboxing in 'security by design' (Secure Software Architecture (Year 12))
- Notes: Use and explain the contribution of cryptography and sandboxing to the ‘security by… (Secure Software Architecture (Year 12))
- Full term page: every question, note and marking comment for Sandboxing
Check yourself
Explain “Sandboxing” in one sentence, give an example, and name a question type that could test it.
Reveal the answer
Running code in an isolated, restricted environment so that if it is malicious or faulty it cannot affect the rest of the system.
Example: A browser tab runs in a sandbox so a bad page cannot read your files.
Could be tested as: Short answer, Multiple choice, Fill in the blanks.
Quick multiple choice
What is the main security benefit of sandboxing?
- Running untrusted code in an isolated environment so it cannot affect the rest of the system
- Making the code run faster
- Encrypting the code so it cannot be read
- Automatically fixing syntax errors
Show the answer
A
A sandbox restricts what code can access (files, memory, network), limiting damage if the code is malicious or faulty.
Source: original (written for this study pack; not a NESA question). Open it in the multiple-choice bank.