Software Engineering › Learn step by step › Y12 Secure Software Architecture
Item 207 of 426 · Year 12: Secure Software Architecture, 30 of 57
Penetration testing
Term Key terms bank
Jump to a topic
- Exam format, question types and command words (46)
- Year 11: Programming Fundamentals (69)
- Year 11: The Object-Oriented Paradigm (33)
- Year 11: Programming Mechatronics (29)
- Year 12: Secure Software Architecture (57)
- Year 12: Programming for the Web (59)
- Year 12: Software Automation (35)
- Year 12: The Software Engineering Project (47)
- Diagrams and modelling tools (18)
- Python, SQL, pseudocode and CSS patterns (33)
Definition
Authorised, simulated attacks on a system by testers to see whether weaknesses can really be exploited.
Example: An ethical hacker tries to break into the login.
Found in: syllabus, school notes.
Authorised simulated attack that exploits weaknesses.
Where you'll use it in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Multiple choice: Pick the option that matches the definition or example.
- Short answer: Define, outline or explain it and tie it to the scenario.
- Matching or table: Match it to its description, example or category.
How to use it
A model sentence
“Authorised, simulated attacks on a system by testers to see whether weaknesses can really be exploited.” Then apply it: An ethical hacker tries to break into the login.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
No linked question shows the command word for this term. Across the past short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.
Go deeper
- Flashcard: Penetration testing in Secure Software Architecture (Year 12) · study that set
- Memorise: Test and evaluate security and resilience
- Key terms bank entry: Penetration testing
- Notes: Test and evaluate security and resilience (Secure Software Architecture (Year 12))
- Notes: Code security strategies: code review, SAST, DAST, vulnerability assessment, pen testing (Secure Software Architecture (Year 12))
- Notes: Interpret and apply fundamental software development steps to develop secure code,… (Secure Software Architecture (Year 12))
- Full term page: every question, note and marking comment for Penetration testing
Check yourself
Explain “Penetration testing” in one sentence, give an example, and name a question type that could test it.
Reveal the answer
Authorised, simulated attacks on a system by testers to see whether weaknesses can really be exploited.
Example: An ethical hacker tries to break into the login.
Could be tested as: Multiple choice, Short answer, Matching or table.
Quick multiple choice
What is the purpose of penetration testing?
- Checking spelling in the user interface
- Measuring how fast pages load
- Authorised, simulated attacks to find exploitable weaknesses
- Backing up the database
Show the answer
C
Penetration testers act like attackers (with permission) to show which vulnerabilities can actually be exploited.
Source: original (written for this study pack; not a NESA question). Open it in the multiple-choice bank.