Session management

Term Key terms bank

Jump to a topic

See every item in the sequence

Definition

Creating, tracking and ending a user's session securely (session ID or token, timeouts, logout), which supports both security and a smooth user experience.

Example: 2025 Q20 marker note: relate session management to code efficiency and to user experience; describe, don't just identify.

Found in: syllabus, 2025 HSC marking guidelines, school notes.

Short version to memorise (key terms bank)

Tracking a user's state across requests with a session ID.

Where you'll use it in the test

Syllabus area: Y12 Secure Software Architecture.

Question types it can appear in

Short answer: Describe session management and efficiency (2025 Q20)
Multiple choice: Pick the option that matches the definition or example.

Where it has appeared in the paper

Secure Software Architecture (Part A). Part letters follow each paper’s own layout.

How to use it

A model sentence

General advice, built from the definition and example above

“Creating, tracking and ending a user's session securely (session ID or token, timeouts, logout), which supports both security and a smooth user experience.” Then apply it: 2025 Q20 marker note: relate session management to code efficiency and to user experience; describe, don't just identify.

In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.

Command words used with it

From the linked past questions

Describe: Provide characteristics and features. (2025 HSC Q20 (3 marks): Session management)

Official worked answer

2025 HSC Q20 (3 marks): Session management (3 marks): official criteria and sample answer

Criteria

3: Describes how session management can affect code execution efficiency. 2: Identifies some features of session management. 1: Some relevant information.

Sample answer

Efficient session management limits memory consumption by restricting session data size and lifetime. Excessive reading, writing or storing large objects increases input/output operations and slows code execution for the user. Removing sessions when they are no longer required is essential to prevent unnecessary resource consumption.

Open the question page

Go deeper

Flashcard: Session management in Secure Software Architecture (Year 12) · study that set
Memorise: Defensive data input handling: validation, sanitisation, error handling
Key terms bank entry: Session management
Master answer: hsc2025-q20 (3 marks, short answer (describe)) (Master model answers: Secure Software Architecture)
Notes: Design, develop, and implement code that considers efficient execution for the user,… (Secure Software Architecture (Year 12))
Notes: Design, develop and implement secure code to minimise vulnerabilities in user action… (Secure Software Architecture (Year 12))
Full term page: every question, note and marking comment for Session management

Check yourself

Explain “Session management” in one sentence, give an example, and name a question type that could test it.

Reveal the answer