TK Study

Software Engineering › Past questions

Past questions

113 questions.

Filter

Year: 2025 · 2024 · 2023 · 2022 · 2021

Topic: Secure Software Architecture (Year 12) · Programming for the Web (Year 12) · Software Automation (Year 12) · The Software Engineering Project (Year 12)

Type: Short answer · Pseudocode · Python / code · SQL · Design / diagram · Extended response

2025 1 mark Short answer The Software Engineering Project (Year 12) Implementation methods

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: implementation methods (mapping grid: SE-12-07)]

Marking criteria

1: Identifies the correct answer.

Sample answer

Pilot

Question page · Practise and get marked

2025 1 mark Short answer The Software Engineering Project (Year 12) Software development approaches

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: software development approaches, two dropdowns]

Marking criteria

1: Identifies the correct item from each dropdown.

Sample answer

Dropdown 1: Waterfall. Dropdown 2: Agile.

Question page · Practise and get marked

2025 1 mark Short answer Software Automation (Year 12) Machine learning training

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: machine learning training]

Marking criteria

1: Identifies the correct answer.

Sample answer

Supervised learning

Question page · Practise and get marked

2025 1 mark Short answer The Software Engineering Project (Year 12) Optimisation

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: language-dependent optimisation]

Marking criteria

1: Identifies the correct answer.

Sample answer

Language-dependent code optimisation

Question page · Practise and get marked

2025 1 mark Short answer Secure Software Architecture (Year 12) API vulnerabilities

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: API vulnerabilities]

Marking criteria

1: Identifies the correct answer.

Sample answer

Exposure of more data than intended

Question page · Practise and get marked

2025 1 mark Short answer Programming for the Web (Year 12) Web protocols

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: web protocols (authentication)]

Marking criteria

1: Identifies the correct answer.

Sample answer

Ensuring that parties exchanging information are who they claim to be

Question page · Practise and get marked

2025 1 mark Short answer Programming for the Web (Year 12) CSS code fragment

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: a CSS code fragment (the question showed code; the code is not extractable)]

Marking criteria

1: Identifies the correct answer.

Sample answer

Blue background, white text, border around the heading

Question page · Practise and get marked

2025 1 mark Short answer Secure Software Architecture (Year 12) User action controls

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: user action controls]

Marking criteria

1: Identifies the correct answer.

Sample answer

Race conditions

Question page · Practise and get marked

2025 1 mark Short answer Programming for the Web (Year 12) ORM and SQL

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

Match each characteristic to ORM, SQL, or both: (1) Code is focused on object manipulation; (2) Tables can be joined to enhance searching; (3) Programmers can choose the language used to access the database. [Characteristics as printed in the MG answer table; the question's introductory wording is not published.]

Marking criteria

1: Correctly matches each characteristic to the appropriate approach.

Sample answer

(1) ORM only. (2) Both ORM and SQL. (3) ORM only.

Question page · Practise and get marked

2025 1 mark Short answer Secure Software Architecture (Year 12) Regulatory compliance

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

Identify ALL the items that are the goals of regulatory compliance in relation to software development. Options: Limiting the need for software updates; Protecting sensitive data from unauthorised access; Allowing developers to bypass security features when needed; Reducing the testing time required during software development; Ensuring software applications meet legal and industry standards.

Marking criteria

1: Identifies ALL the items that are the goals of regulatory compliance.

Sample answer

Protecting sensitive data from unauthorised access; Ensuring software applications meet legal and industry standards.

Question page · Practise and get marked

2025 1 mark Short answer Software Automation (Year 12) DevOps

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

Identify ALL the items that are key principles of DevOps. Options: Rapid feedback; Freedom from bias; Procedural fairness; Automation of repetitive tasks; Collaboration and shared ownership.

Marking criteria

1: Identifies ALL the items that are key principles of DevOps.

Sample answer

Rapid feedback; Automation of repetitive tasks; Collaboration and shared ownership.

Question page · Practise and get marked

2025 2 marks Short answer Software Automation (Year 12) Logistic regression

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

Six scenarios, each ticked true or false. The ticked (correct) scenarios were: Identifying whether a received email is spam; Determining the outcome of a two-party election; Working out if someone will be admitted to a university course. NOT ticked: Calculating house prices based on land size; Investigating the relationship between height and weight; Estimating the rate at which a contagious illness will spread. [Question stem not published; topic is logistic regression per the mapping grid.]

Marking criteria

2: True or false correct for all SIX check boxes. 1: Correct for FOUR of the six.

Sample answer

True: spam, two-party election outcome, university admission (all yes/no classification). False: house prices, height v weight, spread rate (continuous values: linear/polynomial regression).

Question page · Practise and get marked

2025 2 marks Short answer Secure Software Architecture (Year 12) SAST and DAST

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: identify the timing and source-code access for each of SAST and DAST]

Marking criteria

2: Correctly identifies the timing and source code access for each strategy. 1: Correct for ONE strategy, OR correct timing for each strategy.

Question page · Practise and get marked

2025 1 mark Short answer The Software Engineering Project (Year 12) Data structures

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: data structures, dropdowns]

Marking criteria

1: Identifies the correct item from each dropdown.

Question page · Practise and get marked

2025 3 marks Short answer The Software Engineering Project (Year 12) Data dictionary

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: complete a data dictionary using dropdowns]

Marking criteria

3: ALL dropdowns correct. 2: FIVE correct. 1: THREE correct.

Question page · Practise and get marked

2025 3 marks Short answer The Software Engineering Project (Year 12) Testing and debugging

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: outline TWO software debugging tools (criteria wording: 'Outlines TWO relevant software debugging tools')]

Marking criteria

3: Outlines TWO relevant software debugging tools. 2: Outlines ONE tool, OR identifies TWO tools. 1: Some relevant information.

Sample answer

Breakpoints can be added to specific lines of code to halt program execution, allowing the programmer to check the value of specific variables or to step through the program line by line. Debugging output statements can be added to the code to indicate that a certain section of code has been reached or to show the contents of a variable.

Question page · Practise and get marked

2025 3 marks Short answer Programming for the Web (Year 12) Progressive web apps

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

A weather app is to be designed to display real-time updates such as: rain commencing within the next 10 minutes; weather event warnings and warning cancellations; location specific weather conditions. (a) Compare the use of a progressive web app (PWA) with an interactive website, for delivering this weather app. (3 marks)

Marking criteria

3: Compares the use of a PWA with an interactive website for the weather app. 2: Outlines features of a PWA and/or interactive website. 1: Identifies a feature of a PWA or an interactive website.

Sample answer

Both PWAs and interactive websites are platform-independent, allowing users to access the app on any device with a browser. PWAs can pre-cache updates to enable offline updates when a stable internet connection is not available but may not provide real time updates for the most recent changes to weather or warnings. Meanwhile, interactive websites require a constant internet connection to provide any updates.

Question page · Practise and get marked

2025 3 marks Short answer Programming for the Web (Year 12) Load times

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

(b) Outline TWO ways, other than the use of a PWA, to minimise the load time of this weather app. (3 marks)

Marking criteria

3: Outlines TWO ways, other than a PWA, to minimise load time. 2: Outlines ONE way, OR identifies TWO ways. 1: Some relevant information.

Sample answer

One way would be to provide the option to select lower resolution images or text only display. Another way would be to utilise caching as this would provide high speed access to commonly requested weather data.

Question page · Practise and get marked

2025 3 marks Short answer Secure Software Architecture (Year 12) Privacy by design

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

(c) Describe ONE way that the 'privacy by design' approach could be implemented in this weather app. (3 marks)

Marking criteria

3: Describes ONE way privacy by design could be implemented in the weather app. 2: Outlines ONE feature of privacy by design. 1: Identifies a feature of privacy by design.

Sample answer

Embedded within the design of the weather app would be a process for regularly deleting identifiable data. For example, the app would likely record a person's live location to deliver relevant weather details. The privacy by design approach would incorporate a regular process to delete these locations from cache.

Question page · Practise and get marked

2025 3 marks Pseudocode The Software Engineering Project (Year 12) Algorithm design

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: pseudocode RiskRating: the sample answer sums an array Risks of 10 values, then sets Rating to High if Total > 35, Low if Total < 20, otherwise Medium, and displays it]

Marking criteria

3: Substantially correct pseudocode algorithm. 2: Addresses some aspects of the problem. 1: Some understanding of the problem or pseudocode.

Sample answer

BEGIN RiskRating Total = 0 index = 0 REPEAT Total = Total + Risks[index] index = index + 1 UNTIL index = 10 IF Total > 35 THEN Rating = "High" ELSE IF Total < 20 THEN Rating = "Low" ELSE Rating = "Medium" ENDIF ENDIF Display Rating END RiskRating (NESA also accepts a CASEWHERE version: CASEWHERE Total is > 35: Rating = "High" < 20: Rating = "Low" OTHERWISE: Rating = "Medium" END CASE; and an IF / ELSEIF / ELSE version.)

Question page · Practise and get marked

2025 3 marks Short answer Programming for the Web (Year 12) Big data and web architecture

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

A streaming service has exclusive rights to broadcast a live event each Sunday afternoon. Explain how the streaming service can use metadata and data mining to prevent technical difficulties during the broadcast of this weekly event. (3 marks)

Marking criteria

3: Explains how metadata and data mining can be used to prevent technical difficulties during the broadcast. 2: Outlines how metadata AND/OR data mining can be used. 1: Identifies a feature of metadata or data mining.

Sample answer

Metadata describes the content, structure and meaning of raw data, enabling more effective, accurate and efficient data mining. Data mining identifies user preferences and viewing patterns from large datasets, helping streaming services personalise recommendations and identify times of predicted high demand. Streaming service management uses this along with real-time user data to balance server loads and deliver smooth playback experiences.

Question page · Practise and get marked

2025 3 marks Python / code Secure Software Architecture (Year 12) Developing secure code (Python)

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

In an organisation, temporary passwords are automatically generated for new user accounts. Each password is created from the first three letters of the username followed by '123'. For example, the username 'NESA' will have the password 'NES123'. When a user logs in for the first time, they are asked for their username and password. They receive a welcome message or an error message, depending on whether the password entered follows the rules of new user accounts. Write a Python program that asks a new user for their username and password, and then checks whether the password rule has been followed. (3 marks)

Marking criteria

3: Correct code for the problem. 2: Partially correct code that includes a correct selection structure OR password creation. 1: Some understanding of the scenario and Python.

Sample answer

uName = input('What is your username?') password = input('What is your password?') passwordP1 = uName[:3] passwordP1= passwordP1 + '123' if passwordP1 == password: print ('Welcome!') else: print ('Incorrect password entered')

Question page · Practise and get marked

2025 3 marks Short answer Secure Software Architecture (Year 12) Session management

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

Describe how session management can affect the efficiency of code execution for the user. (3 marks)

Marking criteria

3: Describes how session management can affect code execution efficiency. 2: Identifies some features of session management. 1: Some relevant information.

Sample answer

Efficient session management limits memory consumption by restricting session data size and lifetime. Excessive reading, writing or storing large objects increases input/output operations and slows code execution for the user. Removing sessions when they are no longer required is essential to prevent unnecessary resource consumption.

Question page · Practise and get marked

2025 4 marks SQL Programming for the Web (Year 12) SQL queries

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

Below is the Issues table for a technical support company. FixTime, in minutes, is the time taken to complete each job. [table image not extractable: columns include JobID, Category, Status, FixTime] Construct a SQL query that displays: the number of pending software jobs; the number of pending hardware jobs; the number of escalated software jobs; the number of escalated hardware jobs. List the results in order from the highest to lowest, based on the number of jobs. (4 marks)

Marking criteria

4: Correct SQL query that extracts 'Pending' and 'Escalated' jobs for the 'Software' and 'Hardware' categories, counts the jobs for each status in each category, and outputs results in descending order. 3: Addresses most requirements. 2: Some understanding of the problem. 1: Some understanding of SQL or the problem.

Sample answer

SELECT Category, Status, COUNT(JobID) AS Jobs FROM Issues WHERE (Status = 'Pending' OR Status = 'Escalated') GROUP BY Status, Category ORDER BY Jobs DESC

Question page · Practise and get marked

2025 3 marks Design / diagram The Software Engineering Project (Year 12) Modelling tools

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

An animal classification tool is to be developed. The classes to be used are shown below. [classes shown in an image: not extractable] Construct a class diagram that shows inheritance and removes redundant attributes for each class. Additional classes may be included if required. You do NOT need to show the nature of the relationships between the classes. (3 marks)

Marking criteria

3: Correct class diagram that shows inheritance and removes redundant attributes from each class. 2: Some understanding of the problem. 1: Some relevant information.

Question page · Practise and get marked

2025 3 marks Short answer Secure Software Architecture (Year 12) Social and ethical issues

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

A food delivery service offers prepackaged meals tailored to different dietary preferences, for example, vegetarian and gluten-free. It has developed a website for customers to place orders. The website is ready for testing and feedback. The website includes: a menu that dynamically updates based on meal availability; user accounts where customers can track deliveries and manage subscriptions; a backend that processes orders and payments, updates stock and communicates with the delivery team. (a) Outline potential social and ethical issues associated with the use of this website. (3 marks)

Marking criteria

3: Outlines relevant social and ethical issues. 2: Outlines ONE social or ethical issue OR identifies relevant issues. 1: Identifies ONE relevant issue.

Sample answer

The website will need to ensure payment and address data is appropriately secured and accessible only to authorised personnel. It also needs to ensure that pages can be viewed in a wide variety of languages and that the information about dishes displayed is accurate and representative of the product.

Question page · Practise and get marked

2025 3 marks Short answer Programming for the Web (Year 12) Server-side web programming

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

(b) Explain why server-side web programming would be needed to develop this website. Support your answer with examples from the website. (3 marks)

Marking criteria

3: Explains why server-side web programming is needed, with examples from the scenario. 2: Outlines some features, with examples. 1: Identifies a feature and/or relevant examples.

Sample answer

Server-side development will need to be used to provide dynamic information to the front-end (website). There are many dynamic aspects to the website, including the menu which changes along with subscription information and order tracking information. Server-side scripting will need to be written to read the relevant information from storage (most likely, a database) and then provide this information to the front-end.

Question page · Practise and get marked

2025 3 marks Short answer Secure Software Architecture (Year 12) Fundamental software design security concepts

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: fundamental software design security concepts; correct response for each of several items]

Marking criteria

3: ALL items correct. 2: THREE items correct. 1: ONE item correct.

Question page · Practise and get marked

2025 5 marks Extended response Software Automation (Year 12) Safety of workers (impact of automation)

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

A construction company introduces a safety monitoring system that uses artificial intelligence. Cameras and wearable sensors track worker movements and environmental conditions. The system detects unsafe behaviours through artificial intelligence, such as: standing too close to operating machinery; entering restricted zones; failure to wear personal protective equipment (PPE). Alerts are sent in real-time to site supervisors, and long-term data is stored for further analysis. Discuss the possible impact of this monitoring system on workers. (5 marks)

Marking criteria

5: Comprehensive discussion of the impact on workers with reference to the scenario. 4: Outlines both positive AND negative ways. 3: Outlines some ways. 2: Outlines ONE way OR identifies some ways. 1: Some relevant information.

Sample answer

The AI monitoring system can improve safety on site by reducing human error through real-time alerts and remote monitoring. It can also help supervisors track workers' compliance with PPE requirements and identify risky behaviours, potentially preventing accidents. However, some workers might feel their privacy is invaded, especially if the wearables continue monitoring during breaks or in private areas like bathrooms. There's also a risk of the system misidentifying safe behaviour as unsafe, leading to unnecessary alerts or stress which could cause distractions at critical times. Additionally, the long-term data collection could be used to improve training, but workers may worry about how the data is stored or used.

Question page · Practise and get marked

2025 5 marks Extended response Software Automation (Year 12) Patterns in human behaviour; neural networks (virtual personal assistant)

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

An airline introduces a virtual personal assistant as an initial support contact point for cancelled flights, missed connections, or lost luggage. The virtual personal assistant uses a neural network to: analyse support queries to direct customers to the appropriate department; recommend appropriate tone and wording to be used by the human customer support representative; assess data such as support turnaround time, customer ratings, and repeat contacts. Explain how the neural network supports the virtual personal assistant. Include ONE positive and ONE negative impact of using the virtual personal assistant. (5 marks)

Marking criteria

5: Explains how the neural network supports the VPA AND includes one positive AND one negative impact. 4: Explains how the NN supports the VPA OR outlines how it supports the VPA and includes one positive AND one negative impact. 3: Outlines features of a neural network AND/OR impacts. 2: Outlines a feature of a neural network OR an impact, OR identifies features/impacts. 1: Some relevant information.

Sample answer

Neural networks recognise natural language patterns to categorise common support queries, such as lost luggage, and use nodes to assist with processing. They assess language tone to gauge frustration or urgency, allowing the virtual personal assistant to recommend specific phrasing for customer service staff. For instance, calming language may be suggested for distressed customers. By tracking customer ratings and turnaround times, the neural network uses weightings to refine recommendations to prioritise high-frequency queries or improve suggestions for poorly rated interactions. While this system streamlines support processes and improves response accuracy, it may also impact the role of customer service staff. As the neural network learns from interactions, staff may rely more on its recommendations, potentially reducing their familiarity with emerging query trends or response strategies. Customers may come to expect faster, more precise service, raising the standard for human interactions.

Question page · Practise and get marked

2025 5 marks Python / code The Software Engineering Project (Year 12) Design, construct and implement a solution (Python)

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

[Exact question wording is not published as a paper (online exam). Task as shown by the NESA marking guidelines/mapping grid: Python program: generate 15 unique random numbers from 1 to 25 and print a 5 by 5 grid, with an X in each grid position whose number is in the list and a blank otherwise. Task inferred from the MG sample answer; the exact stem is not published as text]

Marking criteria

5: Correct Python program that creates a list of unique randomly generated numbers; processes the list correctly; uses selection and looping structures; provides correctly formatted output; uses inbuilt Python functions. 4: Substantially correct, most requirements. 3: Some requirements. 2: One requirement. 1: Some understanding of the problem.

Sample answer

import random

randList = [] for x in range(15): nextInt = random.randint(1,25) while nextInt in randList: nextInt = random.randint(1,25) randList.append(nextInt)

pos = 0 while pos < 25: if pos in randList: print ("| X", end=" ") else: print ("| ", end=" ") pos = pos + 1 if (pos % 5 == 0): print("| \n")

Question page · Practise and get marked

2025 6 marks Extended response Software Automation (Year 12) Bias in AI (human bias and data set source bias)

NESA 2025 HSC Software Engineering exam (online) - Marking Guidelines

Watch the video and then answer the question. Explain how human bias could affect the usefulness of artificial intelligence (AI) solutions. Support your answer with reference to the video. (6 marks) [The video is the stimulus; per the sample answer it covers a photo library / male physicists example and a game where people draw shoes.]

Marking criteria

6: Explains how human bias could affect the usefulness of AI solutions AND supports with reference to the video. 5: Describes how, and refers to a scenario(s) in the video. 4: Outlines how human bias could affect AI solutions and refers to the video. 2-3: Identifies some sources/examples of human bias AND/OR effects on AI AND/OR outlines how AI learns. 1: Some relevant information.

Sample answer

AI develops its ability by analysing vast amounts of data. The quality of these data can be influenced by human bias, and in turn, affect the usefulness of AI solutions.

Human bias may be explicit or implicit. Explicit biases are intentional. For example, a researcher may favour male physicists and only collect pictures of male physicists for training an AI solution, as shown in the video. Implicit biases operate unconsciously and may be shaped by social and cultural factors. Whether the bias was explicit or implicit, the choice of male physicists would suggest to the AI solution that physicists are male.

Human bias can occur in various stages of the development of AI solutions. As shown in the photo library example, training data needs to be diverse and representative, otherwise AI solutions may produce inaccurate or unhelpful responses. The process of labelling training data may also introduce biases as people may have different interpretations of the same data. The video shows that if most people draw shoes in particular ways, certain types of shoes will not be recognised as a shoe.

Question page · Practise and get marked

2025 1 mark Short answer The Software Engineering Project (Year 12) Software development steps

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Which of the following should take place during the requirements definition step when developing a software solution? A. Identifying algorithms to be used B. Documenting security vulnerabilities C. Identifying potential security threats in the software D. Documenting the needs and constraints of the software

Marking criteria

1: Identifies the correct answer.

Sample answer

Documenting the needs and constraints of the software

Question page · Practise and get marked

2025 1 mark Short answer Programming for the Web (Year 12) Protocols

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Which of the following best describes SMTP? A protocol for email transmission / A set of rules to securely transfer files across a network / A set of rules for securing communication between computers / A protocol used for synchronising communication across networks

Marking criteria

1: Identifies the correct answer.

Sample answer

A protocol for email transmission

Question page · Practise and get marked

2025 1 mark Short answer Secure Software Architecture (Year 12) Encryption

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A company conducts all of its consultations with its clients via its website. Which of the following is the best way for the company to maintain the security of its clients' data? Implement data encryption / Ensure that the software is user-friendly / Focus on software that incorporates metadata / Use software that allows for easy data integration with other platforms

Marking criteria

1: Identifies the correct answer.

Sample answer

Implement data encryption

Question page · Practise and get marked

2025 1 mark Short answer The Software Engineering Project (Year 12) Collaboration

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Which of the following are benefits of collaborating with others when developing software solutions? (More than one may be selected.) Privacy is improved / Security of data is increased / Intellectual property is protected / Different points of view can be considered / Tasks can be delegated to those with expertise

Marking criteria

1: Correctly identifies the benefits.

Sample answer

Different points of view can be considered. Tasks can be delegated to those with expertise.

Question page · Practise and get marked

2025 1 mark Short answer The Software Engineering Project (Year 12) Implementation methods

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

New systems can be implemented in a number of different ways. Match the implementation methods (Direct, Parallel, Phased, Pilot) to: (i) The new system runs immediately with no delay. (ii) The new system gradually replaces the old system. (iii) The new system and the old system run at the same time. (iv) The new system is trialled with a small group of users and then implemented entirely when ready.

Marking criteria

1: Correctly matches the implementation methods.

Sample answer

(i) Direct. (ii) Phased. (iii) Parallel. (iv) Pilot.

Question page · Practise and get marked

2025 1 mark Short answer Programming for the Web (Year 12) Front-end frameworks

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A company is creating a new online application. Which of the following is the LEAST important consideration when choosing an open-source front-end web framework for the new application? Popularity of the framework on social media / Quality of existing framework documentation / Knowledge of the framework within the company's development team / Compatibility of the framework with the company's existing technology

Marking criteria

1: Identifies the correct answer.

Sample answer

Popularity of the framework on social media

Question page · Practise and get marked

2025 1 mark Short answer The Software Engineering Project (Year 12) Python to pseudocode

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Python: for index in range(n): print(index). Select the correct option to complete the equivalent pseudocode: FOR index = ______ / Display index / NEXT index. Options: 0 TO n; 1 TO n; 0 TO n−1; 1 TO n−1

Marking criteria

1: Identifies the correct answer.

Sample answer

0 TO n−1

Question page · Practise and get marked

2025 2 marks Short answer Secure Software Architecture (Year 12) SAST and DAST

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

The strategies below can be used to test the security of a web application that contains a database. Classify each as EITHER SAST OR DAST: (1) Simulate attacks on the web application; (2) Check the way SQL queries are constructed; (3) Test the database's web interface for vulnerabilities; (4) Test the web application used to interact with the database when it is running; (5) Analyse the code for connecting to the database to identify security vulnerabilities.

Marking criteria

2: Correctly classifies all the strategies. 1: Correctly classifies THREE strategies, which must include ONE SAST and ONE DAST.

Sample answer

SAST: (2) and (5). DAST: (1), (3) and (4).

Question page · Practise and get marked

2025 2 marks Short answer The Software Engineering Project (Year 12) Algorithm design (guessing game)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Place the steps of a number guessing game algorithm in the correct order. BEGIN GuessingGame; Set guess = -1; [steps]; END GuessingGame. Steps: Display "Guess a number between 0 and 100:"; Display "Well Done"; Set number = random integer between 0 and 100; WHILE guess <> number; Get guess; ENDWHILE.

Marking criteria

2: Correctly orders the steps. 1: Correctly orders the WHILE and ENDWHILE steps.

Sample answer

Set number = random integer between 0 and 100 WHILE guess <> number Display "Guess a number between 0 and 100:" Get guess ENDWHILE Display "Well Done"

Question page · Practise and get marked

2025 2 marks Short answer The Software Engineering Project (Year 12) Structure charts

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A structure chart (image, not extractable) describes an online ordering system for a café. Which statements are TRUE? (More than one may be selected.) Confirm cart is Boolean; Order number is a control variable; A valid loyalty account is not required for online ordering; The order cannot be displayed until the cart is confirmed; A choice is repeatedly offered between Browse menu and Add items to order

Marking criteria

2: Correctly identifies all the items that are true. 1: Identifies true or false correctly for THREE of the five check boxes.

Question page · Practise and get marked

2025 3 marks Short answer The Software Engineering Project (Year 12) Testing (test data)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Algorithm: BEGIN responsiveScreen / Get ScreenSize / IF ScreenSize >= 1024 THEN Viewport = 'Desktop' / ELSEIF ScreenSize >= 768 THEN Viewport = 'Tablet' / ELSE Viewport = 'Phone' / ENDIF / Display "Display set to ", Viewport / END. Provide a set of test data that will thoroughly test the algorithm. Include expected outputs and reasons for inclusion. (Table: Test data (ScreenSize), Expected output (Viewport), Reason for inclusion; 3 rows shown.)

Marking criteria

3: Test data that thoroughly tests the algorithm, with expected outputs and reasons. 2: Tests most of the boundaries and paths, with relevant outputs and reasons. 1: Some relevant information.

Sample answer

1024 -> Desktop (boundary check). 768 -> Tablet (boundary check). 100 -> Phone (below lowest screen size check). 850 -> Tablet (between Tablet and Desktop). 2000 -> Desktop (above highest screen size check).

Question page · Practise and get marked

2025 3 marks Short answer Programming for the Web (Year 12) Cross-platform compatibility testing

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Explain how a web developer could test a website for cross-platform compatibility. (3 marks, max 75 words)

Marking criteria

3: Explains how a developer could test a website for cross-platform compatibility. 2: Outlines how, OR identifies strategies. 1: Some relevant information.

Sample answer

A web developer can use browser developer tools. These tools, built into most modern browsers, allow developers to simulate how their website looks and behaves on different devices and screen sizes. By using these tools, developers can identify and fix any issues related to cross-platform compatibility, ensuring that the website works well across a variety of devices and browsers.

Question page · Practise and get marked

2025 3 marks Short answer Programming for the Web (Year 12) Progressive web apps and load time

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Explain how the load time of a web page can be improved using a progressive web app (PWA). (3 marks, max 75 words)

Marking criteria

3: Explains how load time can be improved using a PWA. 2: Outlines some features of a PWA and/or issues affecting load time. 1: Some relevant information.

Sample answer

A progressive web app (PWA) can improve load times by pre-caching important resources, allowing files such as image-gallery.js and video-gallery.js to be loaded into memory or cache while the rest of the page loads. PWAs also use service workers to cache resources, ensuring faster load times on repeat visits and offline functionality. Background synchronisation and background fetching can update content in the background, so users see the latest information without slowing down the initial load.

Question page · Practise and get marked

2025 3 marks Short answer Programming for the Web (Year 12) Protocols

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Describe the function of protocols in the transfer of data. In your answer, refer to a specific web protocol. (3 marks, max 75 words)

Marking criteria

3: Describes the function of protocols in the transfer of data, with reference to a specific web protocol. 2: Describes the function OR provides an example of a web protocol and its use. 1: Some relevant information.

Sample answer

Protocols are important in data transfer as they establish rules for communication between devices connected to a network, such as the internet. HTTP (Hypertext Transfer Protocol) enables browsers to request web content from servers, which respond with the requested data. The protocol defines the structure of requests and the response so that data transfer can occur.

Question page · Practise and get marked

2025 3 marks Pseudocode The Software Engineering Project (Year 12) Algorithm design (subroutines)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

PseudoPizza sells custom-designed pizzas. The price of a small pizza is $10. Added costs: Medium size $2; Large size $4; each topping $1.50. An algorithm is needed to calculate the cost of pizzas ordered for a customer. The algorithm should calculate and display: the cost of each pizza; the total cost of the order. Write the algorithm using pseudocode. Include at least one subroutine in your answer. You may assume that all inputs are valid. (3 marks)

Marking criteria

3: Substantially correct pseudocode that includes at least ONE subroutine. 2: Addresses some of the requirements. 1: Some understanding of the problem.

Sample answer

BEGIN main Get num_pizzas total_cost = 0 FOR i = 1 TO num_pizzas Get pizza_size Get num_toppings cost_per_pizza = calculate_pizza_cost(pizza_size, num_toppings) DISPLAY cost_per_pizza total_cost = total_cost + cost_per_pizza NEXT i DISPLAY total_cost END main

BEGIN calculate_pizza_cost(size, num_toppings) base_price = 10 topping_price = 1.5 IF size = "Medium" THEN base_price = base_price + 2 ELSEIF size = "Large" THEN base_price = base_price + 4 ENDIF pizza_cost = base_price + num_toppings * topping_price RETURN pizza_cost END calculate_pizza_cost

Question page · Practise and get marked

2025 3 marks Short answer Software Automation (Year 12) Machine learning in data analysis

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Describe how machine learning algorithms can be used in data analysis. (3 marks, max 75 words)

Marking criteria

3: Describes how ML algorithms can be used in data analysis. 2: Outlines some features of ML algorithms relevant to data analysis. 1: Some relevant information.

Sample answer

Machine learning algorithms can be trained with a subset of the data to automatically identify patterns and trends within large datasets. The algorithms can handle complex relationships and nonlinearities present in the data allowing for efficient and comprehensive analysis. Machine learning can also be used for predictions and forecasting. These models can learn from new data over time, continuously improving their analysis and predictive accuracy and performance.

Question page · Practise and get marked

2025 1 mark Short answer Programming for the Web (Year 12) CSS (id v class)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A developer added a CSS to their company's website. The developer expected the word "Software" to be bold and italics but it looks like regular text. index.html contains

Software includes code.

; main.css contains body {font-family: Arial;}, h1 {font-weight: bold; text-align: center;} and .qe_item {font-style: italic; font-weight: bold;}. Referring to the code, what is the cause of the problem? Font family is missing / Attribute of has not been defined / main.css has not been correctly referenced / The id qe_item has not been correctly referenced

Marking criteria

1: Identifies the correct answer.

Sample answer

The id qe_item has not been correctly referenced. (The HTML uses id="qe_item" but the CSS selector is .qe_item, which targets a CLASS. An id selector is #qe_item.)

Question page · Practise and get marked

2025 2 marks Short answer Programming for the Web (Year 12) CSS benefits

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Outline TWO benefits of adding CSS to the company's website. (2 marks)

Marking criteria

2: Outlines TWO benefits. 1: Some relevant information.

Sample answer

It can provide the same look and feel across the company's websites for consistency and ease of use. Separate html and CSS code can allow developers to work independently on files.

Question page · Practise and get marked

2025 3 marks SQL Programming for the Web (Year 12) SQL (join, filter, order)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A shop uses an online database with a Products table (ProductID, Name, Price, Mass, Producer, Quantity, SupplierID) and a Suppliers table (SupplierID, Name). The prices are in dollars and the masses are in grams. The shop wants to identify all the products with a mass of at least 50 grams that are produced by Yumtreats. Write an SQL query to display the product names and supplier names, in descending order by product name. (3 marks)

Marking criteria

3: Correct SQL query. 2: Addresses some of the requirements. 1: Some understanding of SQL.

Sample answer

SELECT Products.Name AS 'Product', Suppliers.Name AS 'Supplier' FROM Products, Suppliers WHERE Products.SupplierID = Suppliers.SupplierID AND Products.Producer = 'Yumtreats' AND Products.Mass >= 50 ORDER BY Products.Name DESC

Question page · Practise and get marked

2025 3 marks Short answer Secure Software Architecture (Year 12) Defensive data input handling

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

An online site requires users to create accounts using a 'Create Profile' web form (username, password, first name, last name, mobile number, date of birth). Each username must: 1. be at least 8 characters long; 2. start with an uppercase letter; 3. have a lowercase letter as the second last character; 4. have a numeric last character. Valid example: NESA24a3. (a) Explain how defensive data input handling practices can be implemented for this website. (3 marks, max 75 words)

Marking criteria

3: Explains how defensive data input handling practices can be implemented for the website. 2: Outlines some features of data input handling practices. 1: Some relevant information.

Sample answer

Data sanitisation using client-side scripting can clean the data and remove dangerous input. Input validation on the client-side can check that entered data meets all of the requirements before getting processed by the server. Errors generated by data not meeting rules can be shown to the user.

Question page · Practise and get marked

2025 3 marks Python / code Secure Software Architecture (Year 12) Developing secure code (Python input validation)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

(b) Write a function in Python that will check whether a username satisfies the rules (the four username rules in 18a). (3 marks)

Marking criteria

3: Correct function in Python to check whether a username satisfies the rules. 2: Partially correct function. 1: Some understanding of the problem and Python.

Sample answer

def validate_username(username): valid = True

 # length check
 if len(username) < 8:
      valid = False
 elif (not username[0].isupper()):
      valid = False
 elif (not username[-2].islower()):
      valid = False
 elif (not username[-1].isdigit()):
      valid = False

 return valid

Question page · Practise and get marked

2025 4 marks Short answer Secure Software Architecture (Year 12) Authentication and authorisation

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

An app is being developed for use in a school. It will allow teachers to upload and assign work, and track student homework. Students can download work and upload their completed responses for marking. Explain how authentication and authorisation could be applied to this app. (4 marks, max 75 words)

Marking criteria

4: Explains how authentication AND authorisation could be applied. 3: Explains how authentication OR authorisation could be applied, OR outlines how both could be applied. 2: Outlines some features of authentication and/or authorisation. 1: Some relevant information.

Sample answer

Authentication ensures that only staff and students with valid usernames and passwords, which should be encrypted in storage (eg using hashing), can access the app. Authorisation controls access to specific features of the app based on user roles or groups. Teachers may have permissions to upload, assign and track homework, while students can only download tasks and upload completed work. By organising users into specific roles or groups, the app restricts access to appropriate functionality, ensuring that each user can only perform actions relevant to their role or group.

Question page · Practise and get marked

2025 1 mark Short answer Software Automation (Year 12) Decision trees

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A decision tree (image, not extractable) of a trained ML model determines whether to purchase a mobile phone. Using the decision tree, determine the outcome (Buy? Y/N) for: (i) Memory = 256 GB, AI Assistant = Yes, Accessory Inclusions = No; (ii) Memory = 128 GB, AI Assistant = No, Accessory Inclusions = Yes; (iii) Foldable = Yes, AI Assistant = No, Accessory Inclusions = No.

Marking criteria

1: Correctly determines the outcomes.

Question page · Practise and get marked

2025 3 marks Design / diagram Software Automation (Year 12) Decision trees

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

The decision tree can be simplified without compromising its logic. Redraw the decision tree to reduce the number of branches. (3 marks)

Marking criteria

3: Draws a correctly simplified decision tree. 2: Simplified tree with most of the logic. 1: Some understanding of the requirement.

Question page · Practise and get marked

2025 1 mark Short answer The Software Engineering Project (Year 12) 2D arrays (Python)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A school timetable has five periods each day (Monday to Friday). If the timetable is stored as a 2D array, what is the correct Python snippet for accessing the subject on Monday Period 3? Timetable[2] / Timetable[1,4] / Timetable[0][2] / Timetable[1].Subject

Marking criteria

1: Identifies the correct answer.

Sample answer

Timetable[0][2] (day index 0 = Monday, period index 2 = Period 3).

Question page · Practise and get marked

2025 5 marks Python / code The Software Engineering Project (Year 12) Python: subroutines, lists, loops

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

At a school each student studies five subjects; five periods each day; each period is a different subject; the subject shifts to a different period each day so each subject appears in all five periods during the week. Example: Monday P1 English, P2 Software, P3 Drama, P4 Science, P5 Sport; Tuesday P1 Sport, P2 English, ... Write a Python program (using subroutines) that prints the timetable as: Monday / Period 1: English / Period 2: Software ... for all five days. Start with: subjects = ["English", "Software", "Drama", "Science", "Sport"]. Different students may study different subjects; the program will be used by changing the first line only. (5 marks)

Marking criteria

5: Substantially correct Python program that places each subject in the correct period; displays all 5 days; provides appropriate subroutines; programmatically builds the timetable. 4: Most requirements. 3: Some requirements. 2: One requirement. 1: Some understanding.

Sample answer

subjects = ["English", "Software", "Drama", "Science", "Art"] NUM_DAYS = 5 NUM_PERIODS = 5 DAYS_OF_WEEK = ["Monday", "Tuesday", "Wednesday", "Thursday", "Friday"]

def create_timetable(subjects): timetable = [] for day in range(NUM_DAYS): periods = [] for period in range(NUM_PERIODS): periods.append(subjects[(period - day) % NUM_PERIODS]) timetable.append(periods) return timetable

def print_timetable(timetable): print() for day in range(NUM_DAYS): print(f"{DAYS_OF_WEEK[day]}") for period in range(NUM_PERIODS): print(f"\tPeriod {period+1}: {timetable[day][period]}") print()

timetable = create_timetable(subjects) print_timetable(timetable)

Question page · Practise and get marked

2025 2 marks SQL Programming for the Web (Year 12) SQL (GROUP BY)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A table Students(StudentID, FirstName, Surname, Attended, Level) tracks students at a coding club (12 rows; levels Beginner, Intermediate, Expert). Complete the SQL query to generate the number of students at each level: SELECT Level, ??? FROM Students ??? BY Level;

Marking criteria

2: Correctly completes the SQL query. 1: Correctly selects at least TWO correct options.

Sample answer

SELECT Level, COUNT(StudentID) FROM Students GROUP BY Level;

Question page · Practise and get marked

2025 3 marks Short answer Secure Software Architecture (Year 12) Race conditions

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Race conditions have been identified as a potential issue for this database. Provide an example of when a race condition may occur in this scenario and outline how secure code could be implemented to prevent it. (3 marks, max 75 words)

Marking criteria

3: Provides an example of when a race condition may occur AND outlines how secure code could prevent it. 2: Outlines some features of race conditions. 1: Some relevant information.

Sample answer

With multiple teachers potentially accessing the database at the same time, race conditions can allow malicious users to gain unauthorised access. Authentication could be used to restrict access to the database, and code can be written to use atomic transactions and database locks to time the reading and writing of data.

Question page · Practise and get marked

2025 3 marks Short answer Software Automation (Year 12) Bias in machine learning

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

How can the effects of human bias be minimised when training machine learning algorithms? (3 marks, max 75 words)

Marking criteria

3: Shows thorough understanding of how the effects of human bias on training can be minimised. 2: Outlines some effects of human bias on ML OR features of training. 1: Some relevant information.

Sample answer

Training data is initially selected by humans, who may unintentionally introduce their own biases. To minimise this, ensure that training data is representative of the problem the ML model will address. Reviewing data by individuals from diverse backgrounds could identify and reduce potential biases, ensuring fairer and accurate model performance.

Question page · Practise and get marked

2025 3 marks Short answer Software Automation (Year 12) Linear regression v K-nearest neighbour

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

Compare linear regression and K-nearest neighbour. (3 marks, max 75 words)

Marking criteria

3: Compares linear regression and KNN. 2: Outlines features of one or both. 1: Some relevant information.

Sample answer

Linear regression and K-nearest neighbours (KNN) are both supervised learning algorithms that make predictions from labelled data. The key difference is how they handle data: linear regression assumes a linear relationship between input features and the target variable, while KNN makes predictions based on the closest 'K' training examples, allowing it to handle more complex, non-linear patterns. However, KNN can be more computationally expensive than linear regression and is usually slower.

Question page · Practise and get marked

2025 4 marks Design / diagram The Software Engineering Project (Year 12) Modelling tools (class diagram)

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A train company wants a class diagram that models the relationship between long-distance train trips and passengers. The long-distance train has: a unique trip identifier (e.g. AL456); a model code for the engine (e.g. E67) and a model code (e.g. P9754) for each passenger car; two different areas ("Standard" and "Executive"): Executive 20 seats, Standard 400 seats. Each passenger: has contact details (email + phone number); purchases a ticket ("Standard" or "Executive") and is given a seat number (e.g. 25D); may be a frequent traveller. Create a class diagram for the train company (drawing tool). (4 marks)

Marking criteria

4: Substantially correct class diagram with suitable classes, attributes and methods, showing inheritance, relationships and multiplicity. 3: Represents most features. 2: Some features. 1: Some understanding of the scenario.

Question page · Practise and get marked

2025 8 marks Extended response Software Automation (Year 12) ML, DevOps, RPA, BPA in security

NESA HSC Software Engineering Sample Examination + Marking Guidelines (official, 2025)

A telecommunications company had a recent security breach which prompted a review of its systems. It has contracted QuidantCon, whose proposal includes: 1. Business Process Automation (BPA) Security: predictive analysis (identify vulnerabilities in business processes and automate risk mitigation); automated compliance monitoring (continuous compliance with security regulations through ML). 2. DevOps Integration: automated security testing (ML-powered code scanning and vulnerability testing); anomaly detection (monitor logs and traffic using ML). 3. Robotic Process Automation (RPA) Enhancement: intelligent task automation (optimise workflows using ML); threat prediction (predict and prevent security threats with ML). Discuss QuidantCon's proposal for security enhancements to the company's systems. (8 marks, max 300 words)

Marking criteria

8: Discusses the proposal with reference to ML in DevOps, RPA and BPA from the slideshow. 6-7: Outlines advantages AND disadvantages with reference to at least TWO of these areas. 4-5: Outlines some advantages and/or disadvantages with reference to ML in DevOps and/or RPA and/or BPA. 2-3: Some understanding of the features of the proposal. 1: Some relevant information.

Sample answer

QuidantCon's proposal for the company suggests leveraging machine learning (ML) and automation to bolster security measures. One key benefit is the automation of security testing and vulnerability scanning, facilitated by integrating ML-powered tools into the DevOps pipeline. This approach ensures continuous security testing and provides rapid feedback to developers, allowing for early detection of security issues and reducing the risk of vulnerabilities being exploited. The frequent and automated testing improves the overall security position and enhances compliance with industry standards. Additionally, ML algorithms can analyse vast amounts of data to detect patterns and anomalies, which is crucial for proactive threat identification. This capability enables the company to identify security risks proactively, learn from past incidents, and predict future attacks, thereby enhancing their overall security measures.

QuidantCon's proposal for the company also raises some concerns. One key issue is the need for high-quality data for ML algorithms to work effectively. If the data is inconsistent or incomplete, the ML models may not perform well, leading to false positives or missed threats. Another concern is the complexity of implementing ML solutions, which can be challenging and may require specialised skills and training. This complexity could result in integration challenges, higher costs, and delays. Additionally, ML systems can be biased, potentially affecting security decisions. Security and privacy are also critical, as handling sensitive data requires protection against unauthorised access and breaches. These concerns emphasise the need for a careful and balanced approach when considering ML and automation in security practices.

Question page · Practise and get marked

2025 1 mark Short answer Secure Software Architecture (Year 12) Development steps

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: development steps]

Marking criteria

1: Correctly orders the steps.

Question page · Practise and get marked

2025 3 marks Short answer Programming for the Web (Year 12) SQL

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: SQL]

Marking criteria

3: Correctly selects ALL options. 2: At least FIVE options correct. 1: At least TWO options correct.

Question page · Practise and get marked

2025 2 marks Short answer Programming for the Web (Year 12) Mail protocols

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: mail protocols: match features to the relevant protocols]

Marking criteria

2: Correctly matches the features to the relevant protocols. 1: At least TWO features correct.

Question page · Practise and get marked

2025 2 marks Short answer The Software Engineering Project (Year 12) Structure charts

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: structure chart true/false check boxes]

Marking criteria

2: Correctly identifies all the true items. 1: True/false correct for at least FIVE check boxes.

Question page · Practise and get marked

2025 3 marks Short answer The Software Engineering Project (Year 12) Testing (test data)

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: test data for an algorithm that converts a Mark to a Grade (H, P, N) using the boundaries 80 and 50, per the sample answer]

Marking criteria

3: Test data that thoroughly tests the algorithm, with expected outputs and reasons for inclusion. 2: Tests most boundaries and/or paths, with most expected outputs and reasons. 1: Some relevant information.

Sample answer

85 -> H (testing greater than 80). 80 -> H (boundary value 80). 60 -> P (between 50 and 80). 50 -> P (boundary value 50). 45 -> N (testing 'otherwise', below 50).

Question page · Practise and get marked

2025 3 marks Short answer Secure Software Architecture (Year 12) Sandboxing

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: a discussion of the use of sandboxing in the operating system]

Marking criteria

3: Thorough discussion of the use of sandboxing in the operating system. 2: Some understanding of the advantages and/or disadvantages. 1: Identifies a feature of sandboxing.

Sample answer

Sandboxing allows each application to be isolated so that it cannot pose a security risk by accessing system resources or other applications. However, it requires more resources as each application requires its own container. It may also be less convenient for users to access resources such as the device's camera or files as the sandbox will either prevent access or make it more difficult.

Question page · Practise and get marked

2025 1 mark Short answer Software Automation (Year 12) Decision trees

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: decision tree: Buy/Not Buy for three scenarios about a car (mileage, colour, optional accessories, type)]

Marking criteria

1: Correctly determines the outcomes.

Question page · Practise and get marked

2025 3 marks Design / diagram Software Automation (Year 12) Decision trees

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: redraw/simplify the decision tree]

Marking criteria

3: Correctly simplified decision tree. 2: Simplified tree with most of the logic. 1: Some understanding of the requirement.

Question page · Practise and get marked

2025 3 marks Pseudocode The Software Engineering Project (Year 12) Algorithm design (linear search)

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: modify a search algorithm so it achieves its intended purpose (find SearchItem in ItemArray and display its position, otherwise 'Not found')]

Marking criteria

3: Correctly modifies the algorithm to achieve its intended purpose. 2: Corrects some mistakes. 1: Some understanding of the problem.

Sample answer

BEGIN Search (SearchItem) Set LastIndex to the number of elements in ItemArray Found = FALSE Index = 1 WHILE Found = FALSE AND Index < LastIndex + 1 IF ItemArray(Index) = SearchItem THEN Found = TRUE ENDIF Index = Index + 1 ENDWHILE IF Found = TRUE THEN Display 'Position', Index - 1 ELSE Display 'Not found' ENDIF END Search

Question page · Practise and get marked

2025 3 marks Design / diagram The Software Engineering Project (Year 12) Prototype and user interface design

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: design a user interface for users to register an account, with features labelled]

Marking criteria

3: UI suitable for users to register an account, with features labelled. 2: UI with some relevant features. 1: Some understanding of the problem.

Question page · Practise and get marked

2025 3 marks Python / code Secure Software Architecture (Year 12) Developing secure code (Python input validation)

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: a Python function that checks whether a username satisfies given rules (stem not available)]

Marking criteria

3: Correct function in Python that checks whether a username satisfies the rules. 2: Partially correct function. 1: Some understanding of the problem and Python.

Sample answer

def validateUsername(username):

  # Length check
  if len(username) > 8:
      return False

  # Alpha character only check
  elif username.isalpha() == False:
      return False

  # < character check
  elif "<" in username:
      return False

  # If we reach here then the username meets the requirements
  return True

Question page · Practise and get marked

2025 4 marks Short answer Programming for the Web (Year 12) Load time

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: how the load time of a web page can be improved (stimulus: page source with large images, multiple CSS files and a JavaScript file image-gallery.js at the top)]

Marking criteria

4: Explains how the load time of the web page can be improved. 3: Outlines how some issues affecting load time can be resolved. 2: Identifies issues affecting load time OR outlines how to resolve ONE. 1: Some relevant information.

Sample answer

The images can be resized to 640 x 480 beforehand so that the webpage does not need to load the large 4000 x 3000 images. The multiple CSS style sheets could be converted into a single .css file, reducing the number of HTTP requests the browser needs to send. If the "image-gallery.js" JavaScript file at the top of the source code loads slowly, it can be moved to the bottom just above so that it will not block the rest of the page from loading.

Question page · Practise and get marked

2025 1 mark Short answer Secure Software Architecture (Year 12) Cross-site scripting

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: identify a vulnerability from a scenario (stem not available)]

Marking criteria

1: Identifies the correct answer.

Sample answer

Cross site scripting

Question page · Practise and get marked

2025 2 marks Short answer Secure Software Architecture (Year 12) Cross-site scripting

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: explain ONE way to minimise the XSS vulnerability]

Marking criteria

2: Explains ONE way to minimise the vulnerability. 1: Some relevant information.

Sample answer

The website could check and change user input so that markup and script become plain text. This will still allow the page to display the information but will prevent it from executing script code.

Question page · Practise and get marked

2025 2 marks SQL Programming for the Web (Year 12) SQL

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: give the output of an SQL query on a product table, including correct ordering of rows]

Marking criteria

2: Correct output for the SQL query, including the correct ordering of the rows. 1: Some relevant information.

Sample answer

ProductName / ProductPrice: Discovery 1 & 2 (DVD) 26.98; The Plant (DVD) 28.00

Question page · Practise and get marked

2025 3 marks SQL Programming for the Web (Year 12) SQL (joins, AS)

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: write a SQL query over Customers, Products and Orders showing customer, product and quantity with renamed columns, ordered by OrderID]

Marking criteria

3: Correct SQL query. 2: Substantially correct query with at least TWO of: renaming the columns; selecting the three tables; joining the tables. 1: Some understanding of renaming the columns or joining the tables.

Sample answer

SELECT Customers.CustName as 'Customer', Products.ProductName as 'Product', Orders.OrderQuantity as 'Quantity' FROM Products, Customers, Orders WHERE Orders.ProductID = Products.ProductID AND Orders.CustID = Customers.CustID ORDER BY Orders.OrderID ASC

Question page · Practise and get marked

2025 6 marks Python / code The Software Engineering Project (Year 12) Python: lists, loops, selection

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: Python program to display a player's scores and points per round from a list of 10 scores, with bonus points when a round scores 5 (add the next round's score) and a final-round rule (10 points), then the total]

Marking criteria

6: Substantially correct solution with ALL of: looping correctly; referring to the contents of the data structure correctly; displaying the player's scores and corresponding points as shown; calculating the total points; taking bonus points into account; handling the final round correctly. 5: Most features. 3-4: Some features. 2: One feature. 1: Some understanding.

Sample answer

Input code

scores = [3,5,5,2,1,4,0,1,4,5]

Display the scores and points

Header row

print("Round\tScore\tPoints") totalPoints = 0

Calculate the points and print

for i in range(len(scores)): roundNumber = i + 1 score = scores[i] points = score

# Check if any bonuses apply and NOT the final round
if points == 5 and i != 9:
    # Add the points from the next round as bonus points
    points += scores[i + 1]

# Check if the final round bonus applies
if points == 5 and i == 9:
    # Give the bonus points of 10
    points = 10

# Add to the total points tally
totalPoints += points

# Print the results
print(str(roundNumber) + "\t" + str(score) + "\t" + str(points))

print("\nTOTAL POINTS: " + str(totalPoints))

Question page · Practise and get marked

2025 8 marks Extended response Software Automation (Year 12) AI and ML in society; privacy

NESA 2025 HSC Software Engineering Familiarisation Questions - Marking Guidelines (official, 12 June 2025)

[Question stem not available as text (it is on the interactive NESA familiarisation site). Task per the NESA mapping grid: make an informed judgement about the use of artificial intelligence in our society, supporting the answer with information from the slideshow]

Marking criteria

8: Informed judgement about the use of AI in our society, comprehensive understanding of its use and effects, supported by information from the slideshow. 6-7: Broad understanding of the use of AI and its advantages and disadvantages, with some slideshow information. 4-5: Sound understanding; outlines some advantages and/or disadvantages. 2-3: Some understanding of AI. 1: Some relevant information.

Question page · Practise and get marked

2021 3 marks Extended response The Software Engineering Project (Year 12) Testing (live test data)

NESA 2021 HSC Software Design and Development (OLD syllabus) - Section II Question 22, with NESA Marking Guidelines

A large company is developing a system to automatically generate appropriate | 3 responses to common customer queries. Explain why live test data is useful in testing this system.

Marking criteria

[Question 22] Criteria | Marks • Explains why live test data is useful in testing this system | 3 • Shows some understanding of live testing | 2 • Identifies a feature of testing | 1

Sample answer

Sample answer: Live testing gives confidence that the new system will perform as expected when used in the company’s environment. Specifically, it tests using a large number of typical queries, possible keywords and customers, by making use of real queries. Because live testing also involves volume testing, it will ensure the system can cope with the anticipated number and transaction mix of customer query topics in an appropriate response time.

Question page · Practise and get marked

2021 3 marks Extended response The Software Engineering Project (Year 12) Documentation (log book)

NESA 2021 HSC Software Design and Development (OLD syllabus) - Section II Question 24, with NESA Marking Guidelines

Outline TWO ways in which a log book may be used to assist in the development of | 3 a software solution.

Marking criteria

[Question 24] Criteria | Marks • Outlines TWO ways in which a log book can assist development | 3 • Outlines ONE way in which a log book can assist development | 2 • Identifies a feature of a log book | 1

Sample answer

Sample answer: A log book details what a programmer is up, allowing others to take over if that programmer leaves the project. The log book can be used to allow current or future developers to look back on the progress of the development, allowing them to see reasons for various actions that were taken.

Question page · Practise and get marked

2021 11 marks Extended response Secure Software Architecture (Year 12) Social and ethical issues; The Software Engineering Project / Implementation and development approach

NESA 2021 HSC Software Design and Development (OLD syllabus) - Section II Question 25, with NESA Marking Guidelines

A mobile phone app is to be developed to allow two people speaking different languages to have a conversation. The app translates the speaker’s language into the language of the listener. (a) | Describe ONE social or ethical issue associated with this app. | 2 (b) | Outline an appropriate method of installation for this app. | 2 (c) | Justify an appropriate software development approach for this app. | 3 (d) | Describe ONE compatibility issue and ONE performance issue relevant to this | 4 app.

Marking criteria

[Question 25 (a)] Criteria | Marks • Describes ONE relevant social or ethical issue | 2 • Demonstrates a basic understanding of a social or ethical issue | 1 Criteria | Marks • Outlines an appropriate installation method relevant to this app | 2 • Identifies an installation method | 1 Criteria | Marks • Justifies an appropriate software development approach for this app | 3 • Describes a software development approach | 2 • Demonstrates a basic understanding of software development | 1 Criteria | Marks • Describes ONE performance issue and ONE compatibility issue relevant to this app • Outlines ONE performance issue and ONE compatibility issue relevant to this app • Outlines a performance or compatibility issue OR | 2 • Identifies performance and/or compatibility issues • Provides some relevant information | 1

Sample answer

Sample answer: Privacy As the conversations are transmitted and possibly stored for processing, concerns may arise regarding the security of private conversations.

[Question 25 (b)] Sample answer: Direct cutover: each individual gets the complete system as soon as they purchase the application.

[Question 25 (c)] Sample answer: Agile This approach enables the development of this application relatively quickly in a possibly competitive environment. The agile approach means the system can be offered initially with two or three languages and limited functionality, but with updates offered after a short period of time to progressively include more languages and more features in response to feedback.

[Question 25 (d)] Sample answer: Compatibility: The application must execute consistently between different mobile phones, operating systems and networks. This means that the system must be tested using a wide range of environments. Performance: Processing times must allow normal conversations to proceed without delays. Some language translations do not lend themselves to word for word conversions, meaning longer processing times are required. The application must load quickly to minimise frustration.

Question page · Practise and get marked

2021 4 marks Extended response The Software Engineering Project (Year 12) Algorithm design (guessing game)

NESA 2021 HSC Software Design and Development (OLD syllabus) - Section II Question 26, with NESA Marking Guidelines

In a game called Guess My Number, a player plays against the computer. | 4 • The computer generates a random integer, between 1 and 100 inclusive. • The player enters guesses until they are correct or have made 10 guesses. • The output for each guess will be ‘Too high’, ‘Too low’ or ‘Correct’. • After 10 unsuccessful guesses the number is displayed with the message ‘Sorry, too many guesses’. Design an algorithm for this game, using the function RandomNumber to generate a random integer between 1 and 100.

Marking criteria

[Question 26] Criteria | Marks • Provides a substantially correct algorithm that includes the following features: – Generates a valid random integer – Enters guess – Checks guess and displays message – Loops correctly – Exits loop appropriately – Deals with 10 incorrect guesses appropriately • Provides an algorithm that addresses most of the features | 3 • Provides an algorithm that addresses some features | 2 • Shows some understanding of the problem | 1

Sample answer

Sample answer: BEGIN GuessMyNumber NumGuesses = 0 Done = FALSE Num = RandomNumber WHILE Done = FALSE and NumGuesses < 10 Input YourGuess NumGuesses = NumGuesses + 1 IF YourGuess = Num THEN Display “Correct!” Done = TRUE ELSE IF YourGuess > Num THEN Display “Too High!” ELSE Display “Too Low!” ENDIF ENDIF ENDWHILE IF Done = FALSE THEN Display Num , “Sorry, too many guesses” ENDIF END GuessMyNumber

Question page · Practise and get marked

2021 5 marks Extended response The Software Engineering Project (Year 12) Debugging an algorithm (binary search)

NESA 2021 HSC Software Design and Development (OLD syllabus) - Section II Question 28, with NESA Marking Guidelines

A student, attempting to perform a binary search on an array called List with 7 elements, wrote the following algorithm. The algorithm contains errors. 1 | BEGIN Search 2 | low = 1 3 | high = 7 4 | found = FALSE 5 | input SearchItem 6 | WHILE found = FALSE AND high > low 7 | index = integer part of (low + high)/2 8 | IF SearchItem = List(index) THEN 9 | found = TRUE 10 | ELSE 11 | IF SearchItem < List(index) THEN 12 | high = index 13 | ELSE 14 | low = index 15 | ENDIF 16 | ENDIF 17 | ENDWHILE 18 | IF found = TRUE THEN 19 | print “Found at ”, index 20 | ELSE 21 | print “Not found” 22 | ENDIF 23 | END Search (a) | The contents of List are shown. | 3 index | 1 | 2 | 3 | 4 | 5 | 6 | 7 List | 33 | 38 | 40 | 44 | 50 | 60 | 75 Perform a desk check of the algorithm using the value 42 for SearchItem. (b) | The logic is not correct in lines 12 and 14 of the algorithm. | 2 Modify these lines so that the logic is correct.

Marking criteria

[Question 28 (a)] Criteria | Marks • Provides a substantially correct desk check, indicating a never-ending loop • Provides a partially correct desk check | 2 • Shows some understanding of desk checking | 1 Criteria | Marks • Correctly modifies both lines | 2 • Demonstrates some understanding of the problem | 1

Sample answer

Sample answer: Low | High | Found | SearchItem | Index | List(index) | Output 1 | 7 | FALSE | 42 | 4 | 44 Does not end

[Question 28 (b)] Sample answer: Line 12 | high = index –1 Line 14 | low = index +1

Question page · Practise and get marked

2021 3 marks Extended response The Software Engineering Project (Year 12) Tracing an algorithm (linear search)

NESA 2021 HSC Software Design and Development (OLD syllabus) - Section II Question 29, with NESA Marking Guidelines

Consider the following linear search algorithm. | 3 BEGIN ‘REM N = number of elements in the array Items Get String Found = FALSE Count = 1 WHILE Count <= N AND Found = FALSE IF Items(Count) = String THEN Display String, “ is in the array” Found = TRUE ENDIF Count = Count + 1 ENDWHILE IF Found = FALSE THEN Display String, “ is not in the array” ENDIF END Identify the variable that is used as a flag and explain how using a flag helps the efficiency of this algorithm.

Marking criteria

[Question 29] Criteria | Marks • Identifies the flag and explains how using it helps the efficiency of the algorithm • Identifies the flag and shows some understanding of its effect on the algorithm • Shows some understanding of flags OR the logic of the algorithm | 1

Sample answer

Sample answer: The variable Found is used as the flag. This is set to False until the String is located. The efficiency is improved by allowing the WHILE loop to be exited as soon as String is located, thus not requiring any further searching, reducing processing time.

Question page · Practise and get marked

2021 4 marks Extended response The Software Engineering Project (Year 12) Algorithm design (string matching)

NESA 2021 HSC Software Design and Development (OLD syllabus) - Section II Question 30, with NESA Marking Guidelines

A subroutine IsMatch(string, BigString) is needed to check if a string is found in a bigger | 4 string. The following library routines are available: • length(string) which returns the number of characters in the string • extract(string, start, length) which extracts length characters from string beginning at character start. If text = ‘software’, then extract(text, 2, 4) will return ‘oftw’. Design the algorithm for IsMatch(string, BigString).

Marking criteria

[Question 30] Criteria | Marks • Provides a substantially correct algorithm that includes the following features: – Looks for a match in the description | 4 – Checks the required number of characters – Uses the library routines appropriately • Provides an algorithm that addresses most of the features | 3 • Provides an algorithm that attempts to address some features | 2 • Shows some understanding of the problem | 1

Sample answer

Sample answer: BEGIN IsMatch (string, BigString ) Located = FALSE NumToCheck = length (BigString) – length (string) + 1 FOR j = 1 to NumToCheck Check = extract (BigString, j, length (string)) IF Check = string THEN Located = TRUE ENDIF NEXT j RETURN Located END IsMatch

Question page · Practise and get marked

2022 3 marks Extended response Secure Software Architecture (Year 12) Social, ethical and legal responsibilities

NESA 2022 HSC Software Design and Development (OLD syllabus) - Section II Question 21, with NESA Marking Guidelines

Describe TWO responsibilities of software developers when developing new systems. | 3

Marking criteria

[Question 21] Criteria | Marks • Describes TWO responsibilities of software developers | 3 • Describes ONE responsibility of software developers OR | 2 • Outlines TWO responsibilities • Demonstrates some understanding of software developers’ responsibilities

Sample answer

Sample answer: Intellectual property – appropriate acknowledgement of intellectual property means that a developer cannot use copied code fragments without first contacting the author, asking their permission and acknowledging the authorship visibly in their product. Response to user issues – a developer should respond appropriately and promptly, possibly by amending code.

Question page · Practise and get marked

2022 6 marks Extended response The Software Engineering Project (Year 12) Maintenance

NESA 2022 HSC Software Design and Development (OLD syllabus) - Section II Question 22, with NESA Marking Guidelines

(a) | Explain the need for maintenance in the software development cycle. | 3 (b) | One way of making future maintenance easier is by using explanatory comments | 3 in the code. Explain TWO other ways in which programmers can write code that makes maintenance of a software system easier.

Marking criteria

[Question 22 (a)] Criteria | Marks • Explains the need for maintenance in the software development cycle | 3 • Describes the need for maintenance in the software development cycle | 2 • Provides some relevant information | 1 Criteria | Marks • Explains TWO other ways of writing easily maintainable code | 3 • Explains ONE other way of writing easily maintainable code OR | 2 • Outlines TWO other ways • Demonstrates some understanding of maintenance | 1

Sample answer

Sample answer: Maintenance is needed if user requirements change, requiring new functionality in the code. Poor interface design will require relevant modules to be updated. Changes to the data may require extra fields to be defined and used in the code.

[Question 22 (b)] Sample answer: By using one logical task in a single module, it is easier to identify the module that needs to be updated. By inserting blank lines between modules, the source code becomes easier to read and understand.

Question page · Practise and get marked

2022 11 marks Extended response The Software Engineering Project (Year 12) Development approach, implementation, testing, quality of experience

NESA 2022 HSC Software Design and Development (OLD syllabus) - Section II Question 25, with NESA Marking Guidelines

A developer has been employed by a local high school to design and develop a study app to track students’ HSC revision routines. The app must be ready as soon as possible. The app will: • provide links to resources for all subjects that the school offers • track the number of hours students are logged in to the site • track the number of past examination papers accessed • allow students to input questions for teachers • send reminders to students who have not used the app. (a) | Recommend and justify a suitable development approach for this HSC revision | 3 app. (b) | Describe ONE benefit of the use of a pilot installation for this HSC revision app. | 2 (c) | Outline TWO reasons why system testing is necessary in the development of | 3 this HSC revision app. (d) | Explain TWO factors outside the developer’s control which can affect the | 3 quality of a user’s experience with this HSC revision app.

Marking criteria

[Question 25 (a)] Criteria | Marks • Recommends a suitable development approach for this study app with appropriate justification • Outlines a development approach for the study app with some justification | 2 • Outlines a development approach | 1 Criteria | Marks • Describes ONE benefit of the pilot method of installation for this app | 2 • Shows some understanding of the pilot method of installation | 1 Criteria | Marks • Outlines TWO reasons for system testing of this app | 3 • Identifies TWO reasons for system testing OR | 2 • Outlines ONE reason • Shows some understanding of system testing | 1 Criteria | Marks • Provides an explanation of two factors outside the developers’ control which can affect a user’s experience with this app • Explains ONE factor that can affect a user’s experience OR identifies TWO factors • Demonstrates some understanding of a user’s experience | 1

Sample answer

Sample answer: An agile approach will allow improved versions of the app to be available to students in a short time frame. Agile allows for quick delivery of updates of the app, based on feedback from students.

[Question 25 (b)] Sample answer: The software developer could select a small group of students to use the study app and test its functionality and identify any problems, minimising the chance of the released product having errors.

[Question 25 (c)] Sample answer: System testing will enable the study app to be tested in a range of operating systems and user hardware likely to be used by students. It can also be tested more fully by using load testing, with a high transaction rate.

[Question 25 (d)] Sample answer: The quality of a user’s experience could be affected by potential problems with the display on different devices, such as screen size, which could lead to poor legibility or excessive scrolling on small screens. Incompatibility with other software installed on the user’s device could affect the quality of a user’s experience, eg the HSC app may crash.

Question page · Practise and get marked

2022 10 marks Extended response The Software Engineering Project (Year 12) Modelling and design (IPO, data structure, Gantt)

NESA 2022 HSC Software Design and Development (OLD syllabus) - Section II Question 27, with NESA Marking Guidelines

A fast-food ordering system is being developed for a restaurant. Authorised customers will be able to select available food items. The system will: • authenticate the customer • allow the customer to input their food choices • calculate and display the total cost of the food items • determine if the customer qualifies for a 10% discount on their order. This occurs when their total purchases to date exceed $100 • electronically transfer the amount due from the customer’s account to the restaurant’s account • add the total cost of this order to the customer’s total purchases to date. (a) | Create an IPO diagram to represent the required processing in this system. | 4 (b) | Design an appropriate data structure to store customer details for this fast-food | 3 ordering system. Do NOT include food choices in this data structure. (c) | Before the start of the development of this fast-food ordering system, the project | 3 manager was provided with information about the project team, including how many members are available and their skills. Describe how the project manager can use Gantt charts effectively throughout the development of this system.

Marking criteria

[Question 27 (a)] Criteria | Marks • Creates a substantially correct IPO diagram, with details for all processes (authentication, purchase, EFT) • Creates a partially correct IPO diagram, with details for most processes | 3 • Demonstrates reasonable understanding of an IPO diagram with at least one process addressed • Demonstrates some understanding of an IPO diagram | 1 Criteria | Marks • Provides an appropriate data structure, with fields, data types and sizes required to complete the specified processing • Provides a substantially correct data structure | 2 • Demonstrates some understanding of an appropriate data structure | 1 Criteria | Marks • Describes the project manager’s use of a Gantt chart throughout the development of this system, with reference to time and skills • Shows some understanding of how a project manager can use a Gantt chart • Provides some relevant information | 1

Sample answer

Sample answer: Input | Process | Output CustomerId | Use CustomerId to retrieve Customer Record | “No such Customer” Password | Check entered password matches stored | “Incorrect Password” Customer File | password ItemNumber | For each item Quantity | Use ItemNumber to retrieve Item record from | Display Item.Name, Item File | Item File | Item.Cost Cost = Item.Cost * Quantity TotalCost = TotalCost + Cost IF TotalCost + Customer.PurchasesToDate > 100 THEN TotalCost = TotalCost ´ 0.9 Add TotalCost to Customer.PurchasesToDate Rewrite Customer Record | Updated customer file Display TotalCost TotalCost | Transfer TotalCost from customer account to | Updated accounts restaurant account

[Question 27 (b)] Sample answer: A record to be stored in the Customer File with at least the following fields: Customer Id | Text | 6 characters Password | Text | 20 characters Total Purchases to date | Real | 4 bytes BSB | Text | 6 characters AccountNum | Text | 9 characters

[Question 27 (c)] Sample answer: Using a Gantt chart, the project manager needs to identify each required task (such as authentication, customer input of food choice), allocate a time frame for each and identify the order and linkages / dependencies between the tasks. The project manager allocates team members to tasks that meet their skills, while not allocating overlapping tasks to the same team member. The project manager can use the Gantt charts to monitor progress, extending individual task time frames and reallocating team members as required.

Question page · Practise and get marked

2022 6 marks Extended response The Software Engineering Project (Year 12) Desk check and debugging an algorithm

NESA 2022 HSC Software Design and Development (OLD syllabus) - Section II Question 28, with NESA Marking Guidelines

An algorithm was designed to remove repeating consecutive characters in a phrase, replacing them with a single character. The algorithm: • allows input of a phrase • removes repeated characters • displays the shortened phrase. For example, if the input is ‘aaaabbbaa’ the output will be ‘aba’. Note: The function right (m, n) gets the last n characters of m. There are errors in the algorithm. 1 BEGIN Shorten 2 | input phrase 3 | phrase = phrase + “X” | ‘Adds an X to the end of phrase 4 | Len = number of characters in phrase 5 | NewPhrase = “ ” 6 | REPEAT 7 | done = FALSE 8 | NewPhrase = NewPhrase + 1st character of phrase 9 | REPEAT 10 | IF 1st character of phrase does not equal 2nd character of phrase THEN 11 | done = TRUE 12 | ENDIF 13 | Len = Len - 1 14 | phrase = right (phrase, Len) 15 | UNTIL done = TRUE 16 | UNTIL Len < 1 17 | output phrase 18 | phrase = NewPhrase 19 END Shorten (a) | Perform a desk check of the algorithm using dddg as input. | 3 (b) | Identify and correct any logic errors in the algorithm. You may refer to line | 3 numbers in your response.

Marking criteria

[Question 28 (a)] Criteria | Marks • Completes a substantially correct desk check | 3 • Completes a partially correct desk check | 2 • Shows some understanding of desk checking this algorithm | 1 Criteria | Marks • Correctly identifies two errors and changes the code | 3 • Identifies two errors or corrects one error | 2 • Show some understanding of the algorithm | 1

Sample answer

Sample answer: phrase | Len | NewPhrase | done | output dddg dddgX | 5 | "" | F d ddgX | 3 dgX | T gX | F dg T X | F dgX Error message? At this point the algorithm is trying to compare X with a character that doesn’t exist.

[Question 28 (b)] Sample answer: Line 16 becomes UNTIL Len < = 1. Swap lines 17 and 18.

Question page · Practise and get marked

2022 3 marks Extended response The Software Engineering Project (Year 12) Data types

NESA 2022 HSC Software Design and Development (OLD syllabus) - Section II Question 29, with NESA Marking Guidelines

Using an example, explain why programmers need to use different data types in their | 3 code.

Marking criteria

[Question 29] Criteria | Marks • Explains why programmers need to use different data types, and provides an example • Provides a basic explanation of different data types | 2 • Demonstrates some understanding of data types | 1

Sample answer

Sample answer: Different data types are stored and used in different ways. By defining a variable as a particular data type, the programmer can make use of the data in an appropriate way. For example, text data types can have characters appended to them or extracted from them, and are stored in ASCII format with one byte per character, but cannot be used in arithmetic calculations.

Question page · Practise and get marked

2022 5 marks Extended response The Software Engineering Project (Year 12) Algorithm design (arrays)

NESA 2022 HSC Software Design and Development (OLD syllabus) - Section II Question 30, with NESA Marking Guidelines

Results( ) is an array containing 200 records. | 5 The following table shows a sample of the array contents. Index | Name | Score 1 | Jones B | 23 2 | Ali B | 45 3 | Morris S | 8 4 | Nguyen T | 45 200 | Shankar R | 8 Write an algorithm that: • displays the highest score and the names of all people who have that score • displays the second highest score and the names of all people who have that score.

Marking criteria

[Question 30] Criteria | Marks • Provides a substantially correct algorithm that addresses the following features: – Initialises highest score – Determines highest score by looping through the array – Displays the highest score – Loops through the whole array, printing names of all players with the highest score – Repeats the above for the second highest score • Provides a substantially correct algorithm that addresses most of the features • Provides an algorithm that attempts to address some of the features | 3 • Provides an algorithm that attempts to address a feature | 2 • Shows some understanding of the problem | 1

Sample answer

Sample answer: BEGIN first = 0 second = 0 FOR i = 1 to 200 IF Results.Score(i) >= first THEN first = Results.Score(i) ELSE IF Results.Score(i) > second THEN second = Results.Score(i) ENDIF ENDIF NEXT print "Highest score was " first FOR i = 1 to 200 IF Results.Score(i) = first THEN print = Results.Name(i) ENDIF NEXT print "Second highest score was " second FOR i = 1 to 200 IF Results.Score(i) = second THEN print = Results.Name(i) ENDIF NEXT END

Question page · Practise and get marked

2023 2 marks Extended response The Software Engineering Project (Year 12) Prototypes

NESA 2023 HSC Software Design and Development (OLD syllabus) - Section II Question 21, with NESA Marking Guidelines

Outline how a prototype can be used in the development of a software application. | 2

Marking criteria

[Question 21] Criteria | Marks • Demonstrates a sound understanding of the use of prototyping | 2 • Demonstrates some understanding of prototyping | 1

Sample answer

Sample answer: A prototype can be used to show screen design and navigation, to clarify understanding of the system and get client feedback.

Question page · Practise and get marked

2023 3 marks Extended response The Software Engineering Project (Year 12) Communication with clients; development cycle

NESA 2023 HSC Software Design and Development (OLD syllabus) - Section II Question 22, with NESA Marking Guidelines

Explain why it is important for developers to communicate with their clients. Refer to | 3 specific stages of the software development cycle in your answer.

Marking criteria

[Question 22] Criteria | Marks • Explains the importance of communication over different stages in the software development cycle • Provides ONE benefit of communication, with reference to a stage in the software development cycle OR • Provides some benefits of communication • Demonstrates some understanding of the need for communication in software development

Sample answer

Sample answer: Without a clear understanding of client needs and without ongoing communication during the defining and planning stages, there is a risk that the final product does not meet their needs or that it becomes increasingly expensive to make necessary changes. Communication with the client during the testing stage is important in the development of relevant test data and for thorough evaluation of the software.

Question page · Practise and get marked

2023 5 marks Extended response Secure Software Architecture (Year 12) Security and authentication

NESA 2023 HSC Software Design and Development (OLD syllabus) - Section II Question 23, with NESA Marking Guidelines

An online medical database stores the medical history of patients. It is updated each time a person seeks medical treatment. (a) | Give TWO reasons why security is important for this database. | 2 (b) | To provide increased security for the database, two-step authentication is | 3 implemented which requires a user to: • provide a valid username and password • enter an automatically generated six-digit verification code which is sent to their mobile phone. Complete the system flowchart for this two-step authentication process. UserID and password

Marking criteria

[Question 23 (a)] Criteria | Marks • Provides TWO reasons for the importance of security of this database | 2 • Demonstrates some understanding of the importance of data security | 1 Criteria | Marks • Provides a substantially correct system flowchart for the authentication process, using appropriate symbols • Provides a partially correct system flowchart | 2 • Provides a diagram that shows some understanding of the process | 1

Sample answer

Sample answer: Unintentional/malicious changes to the data may cause harm to the patients. Privacy of the patient may be compromised if the data is made public.

[Question 23 (b)] Sample answer:

Question page · Practise and get marked

2023 9 marks Extended response The Software Engineering Project (Year 12) Code reading, maintainability and testing

NESA 2023 HSC Software Design and Development (OLD syllabus) - Section II Question 26, with NESA Marking Guidelines

Consider the following module. 1 | BEGIN CustomerOrders 2 | REPEAT 3 | Tries = Tries + 1 4 | Get UserId, Password 5 | CheckPasswordCorrect (UserId, Password, OK) 6 | UNTIL Tries > 3 OR OK = “Y” 7 | IF OK = “Y” THEN 8 | Open TodaysOrders for Input 9 | Read the next record from TodaysOrders into Order_Rec 10 | WHILE NOT EOF 11 | IF Order_Rec.CustId = UserId THEN 12 | PrintDetailsofOrder (Order_Rec) 13 | ENDIF 14 | Read the next record from TodaysOrders into Order_Rec 15 | ENDWHILE 16 | Close TodaysOrders 17 | ELSE 18 | InvalidUser (UserId) 19 | ENDIF 20 | END CustomerOrders (a) | Why is the Read statement needed in both line 9 and line 14? | 2 (b) | Give TWO reasons why the code in the CustomerOrders module is easy to | 3 maintain. Support your answer with examples from the module. (c) | The logic in the CustomerOrders module has been successfully tested with small | 4 files of test data, and using stubs in lines 5, 12 and 18. The module is to be included in a larger system, with the stubs replaced with existing subroutines that are known to work. Explain why both module and system testing are now required.

Marking criteria

[Question 26 (a)] Criteria | Marks • Demonstrates a sound understanding of why both Read statements are needed • Demonstrates some understanding of a read statement | 1 Criteria | Marks • Provides TWO reasons why the code is easy to maintain • Includes examples from the code • Provides ONE reason why the code is easy to maintain, using an example from the code OR • Provides TWO reasons why the code is easy to maintain • Demonstrates some understanding of code maintenance | 1 Criteria | Marks • Provides a thorough explanation of the need for both module and system testing in this scenario • Demonstrates a sound understanding of the need for module and system testing • Demonstrates some understanding of module and/or system testing | 2 • Demonstrates some understanding of testing | 1

Sample answer

Sample answer: Line 9 provides a priming read from the file and thus enables the EOF condition in line 10 to be tested, allowing for an empty file. Line 14 provides subsequent records for processing and provides the terminating condition when there are no more records.

[Question 26 (b)] Sample answer: The use of meaningful variable and module names, such as UserID and CheckPasswordCorrect, assists maintenance programmers to quickly understand the purpose of the code. Including calls to subroutines in lines 5 and 12 enables maintenance programmers to easily locate the detailed logic that may need to change.

[Question 26 (c)] Sample answer: Module testing will confirm that the module works, including the logic of the called modules with parameters being passed appropriately, for example when calling CheckPasswordCorrect with its three parameters. During system testing, live data will provide expected volumes of data which may show potential issues with performance and response times when accessing both files. Live data also ensures that unexpected combinations of data are well handled compared to the minimal conditions when using selected test data. It also tests for missing files or inappropriate file types or record formats.

Question page · Practise and get marked

2023 10 marks Extended response The Software Engineering Project (Year 12) User interface, structure chart, quality assurance

NESA 2023 HSC Software Design and Development (OLD syllabus) - Section II Question 27, with NESA Marking Guidelines

A parking station requires a software application which allows customers to make an online booking for a parking space. (a) | When making a booking online, customers will input: | 3 • | date • | time of entry • | time of exit • | car number plate eg SDD223 • | large or small vehicle. Design a user interface for capturing these booking details, using appropriate screen design elements. Customers will be charged at an hourly rate, based on their actual entry and exit times. When a customer arrives at the parking station, the car number plate will be scanned. The system uses this to retrieve their booking record, and update it with the current time. The boom gate then opens to allow entry. On leaving the car park, the car number plate is scanned. The system retrieves the booking record and calculates the cost using the hourly rate. The customer swipes their credit card, their account is debited and the boom gates open. (b) | Construct a structure chart to represent this system. | 4 (c) | Describe how this system can be evaluated with reference to TWO quality | 3 assurance criteria.

Marking criteria

[Question 27 (a)] Criteria | Marks • Produces a well-designed interface which uses appropriate screen design elements • Produces an interface with some appropriate elements | 2 • Provides a diagram that demonstrates some understanding of the system Criteria | Marks • Produces a substantially correct structure chart that represents the system • Produces a structure chart that represents most components of the system • Produces a chart with some relevant components | 2 • Provides a diagram that demonstrates some understanding of the system Criteria | Marks • Describes how the system can be evaluated with reference to TWO appropriate quality assurance criteria • Shows some understanding of quality assurance | 2 • Provides some relevant information | 1

Sample answer

Sample answer:

[Question 27 (b)] Sample answer:

[Question 27 (c)] Sample answer: The functionality of the system could be evaluated by viewing samples of transactions and checking that the correct fees were charged, based on the recorded entry and exit times. The ease of use of the system could be evaluated by presenting a sample of users with a survey requiring them to comment on their experiences of the process and analysing the responses.

Question page · Practise and get marked

2023 6 marks Extended response The Software Engineering Project (Year 12) Desk check and debugging (validation)

NESA 2023 HSC Software Design and Development (OLD syllabus) - Section II Question 28, with NESA Marking Guidelines

In a retail business, all product codes must start with an uppercase letter and then be followed by one or more lowercase letters. The algorithm below is designed to validate a product code. It contains errors. Note that Extract(string, start, N) returns N characters from a string, starting from position start. Eg Extract(“Names”, 3, 2) returns “me”. Line numbers have been provided for reference. 10 | BEGIN validate 20 | OK = “F” 30 | Get ProductCode 40 | Len = Number of characters in ProductCode 50 | WHILE OK = “F” AND ProductCode < > “Q” 60 | OK = “T” 70 | IF Extract(ProductCode, 1, 1) is not an uppercase letter THEN 80 | OK = “F” 90 | Display “Not uppercase” 100 | ENDIF 110 | FOR Count = 1 to Len 120 | IF Extract(ProductCode, Count, 1) is not a lowercase letter THEN 130 | OK = “F” 140 | Display “Not all lowercase” 150 | ENDIF 160 | NEXT Count 170 | IF OK = “F” THEN 180 | Display “Invalid code” 190 | Get ProductCode 200 | ENDIF 210 | ENDWHILE 220 | END validate (a) | Perform a desk check of the algorithm using the test data “p3”, “Pad”, “Q”, “X”. | 3 OK | ProductCode | Len | Extracted | Count | Display character (b) | The algorithm contains errors. | 3 Identify TWO errors and suggest how they can be corrected. Refer to line numbers in your answer.

Marking criteria

[Question 28 (a)] Criteria | Marks • Provides a substantially correct desk check | 3 • Provides a partially correct desk check | 2 • Demonstrates some understanding of the algorithm | 1 Criteria | Marks • Identifies TWO errors and suggests ways to correct them | 3 • Identifies ONE error and suggests a way to correct it OR | 2 • Identifies TWO errors • Identifies an error | 1

Sample answer

Sample answer: OK | ProductCode | Len | Extracted | Count | Display character F | p3 | 2 T | p F | Not uppercase p | 1 F | 3 | 2 | Not all lowercase Invalid code F | Pad | P T | P | 1 | Not all lowercase F | a | 2 Invalid code T | Q Note: X is not considered

[Question 28 (b)] Sample answer: At line 110 the FOR/NEXT loop counter should start at 2. The value of Len is not being updated for the next ProductCode. Move line 40 to line 55.

Question page · Practise and get marked

2023 3 marks Extended response The Software Engineering Project (Year 12) Algorithm design (menu)

NESA 2023 HSC Software Design and Development (OLD syllabus) - Section II Question 30, with NESA Marking Guidelines

The following storyboard shows the navigation for a simple menu structure. | 3 MENU Screen 1 | Screen 1 | Screen 2 | Screen 2 Done | Done Screen 3 | Screen 4 Screen 3 | Screen 4 Quit Done | Done Quit A click on a button on the menu screen generates an appropriate number (from 1 to 4, or 9 if Quit is clicked) which is stored in the variable ButtonClick. A click anywhere else on the screen generates a 0. Write an algorithm for the menu screen that allows a user to access the other screens, exiting when the Quit button is clicked. Do NOT include the logic for any of the other screens.

Marking criteria

[Question 30] Criteria | Marks • Provides a substantially correct algorithm that addresses the following features: – Display menu screen – Get a non-zero ButtonClick – Perform correct subroutine – Loop until Quit (9) is selected • Provides an algorithm that attempts to address some of the features | 2 • Demonstrates some understanding of the problem | 1

Sample answer

Sample answer: BEGIN Menu REPEAT Display MenuScreen REPEAT Get ButtonClick UNTIL ButtonClick <> 0 CASEWHERE ButtonClick is 1 | : Screen1 2 | : Screen2 3 | : Screen3 4 | : Screen4 Otherwise : | Quit ENDCASE UNTIL ButtonClick = 9 END Menu

Question page · Practise and get marked

2023 8 marks Extended response The Software Engineering Project (Year 12) Test data and algorithm design (date validation)

NESA 2023 HSC Software Design and Development (OLD syllabus) - Section II Question 32, with NESA Marking Guidelines

An algorithm is required to convert a date in DD/MM/YYYY format into its equivalent long date such as 29 October 2023. The entered date will always be 10 characters and in the format DD/MM/YYYY. The date is validated as follows: • the month must be a valid month (from 1 to 12) • the day value must be valid for that month (for example, no more than 28 for February – ignore leap years). (a) | Complete the table with THREE items of test data that test different aspects of | 3 the logic of the algorithm. Test data | Reason for inclusion (b) | Design an algorithm to validate a date in the form DD/MM/YYYY and output the | 5 equivalent long date, eg 29 October 2023. Include all meaningful error messages to assist the user to understand why their entered date is not valid. You may use the following two library routines in your pseudocode: • Extract(string, start, N) eg Extract(“Names”, 3, 2) returns “me” • Value(string) converts a string to its numerical value eg Value(“42”) returns 42. You may use the following two arrays (indexed from 1) in your pseudocode. MonthName | DaysinMonth January | 31 February | 28 March | 31 April | 30 May | 31 June | 30 July | 31 August | 31 September | 30 October | 31 November | 30 December | 31 2023 HIGHER SCHOOL CERTIFICATE EXAMINATION Centre Number Software Design and Development Student Number

Marking criteria

[Question 32 (a)] Criteria | Marks • Provides THREE items of test data for different aspects of the algorithm, with corresponding reasons for inclusion • Provides TWO items of test data for different aspects of the algorithm, with some justification • Demonstrates some understanding of test data relevant to this algorithm | 1 Criteria | Marks • Provides a substantially correct algorithm that addresses the following features: – Validates the inputted date – Uses appropriate data structures and library routines – Outputs the correct long date – Provides meaningful error messages • Provides a substantially correct algorithm that addresses most of the features • Provides an algorithm that addresses some of the features | 3 • Provides an algorithm that attempts to address one of the features | 2 • Demonstrates some understanding of the problem | 1

Sample answer

Sample answer: Test data | Reason for inclusion 01/15/2022 | Check that the month is valid (1−12) 31/06/2023 | Check correct number of days in month 19/04/2022 | Verify that correct long date is produced

[Question 32 (b)] Sample answer: BEGIN date_conversion Get InDate MM = Extract(InDate, 4, 2) Month = Value (MM) DD = Extract(InDate, 1, 2) Days = Value (DD) YYYY = Extract(InDate, 7, 4) validmonth = CheckMonth(Month) IF validmonth THEN validday = CheckDays(Month, Days) IF validday THEN Display DD + “ ” + MonthName(Month) + “ ” + YYYY ELSE Display “Your days” + DD “are not valid for your entered month”; MM ENDIF ELSE Display “Your entered month must be a valid number between 1 and 12” ENDIF END date_conversion BEGIN CheckMonth(MM) flag = 1 IF MM < 1 OR MM > 12 THEN flag = 0 ENDIF RETURN flag END CheckMonth BEGIN CheckDays(Month, Days) flag = 1 IF Days > DaysinMonth(Month) OR Days < 1 THEN flag = 0 END IF RETURN flag END CheckDays

Question page · Practise and get marked

2024 6 marks Extended response The Software Engineering Project (Year 12) Teams and Gantt charts

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 21, with NESA Marking Guidelines

An online application is required by the end of the school year to provide school students with information about travel opportunities. It will provide images and video clips, and will be produced by a team of developers. (a) | Outline TWO benefits of using a team of developers to develop this application. | 3 (b) | Describe how a Gantt chart could be used to manage the development of this | 3 application.

Marking criteria

[Question 21 (a)] Criteria | Marks • Outlines TWO benefits of using a team of developers | 3 • Identifies TWO benefits OR | 2 • Outlines ONE benefit • Identifies ONE benefit | 1 Criteria | Marks • Describes the use of a Gantt chart in the management of this project | 3 • Shows some understanding of the use of a Gantt chart | 2 • Provides some relevant information | 1

Sample answer

Sample answer: Since the resource will involve working with images, video and itineraries, a larger development team will ensure that people with appropriate skills can be utilised. As the resource is needed by the end of the school year, it can be assumed that a short development time is needed. A larger team may be able to meet time restraints.

[Question 21 (b)] Sample answer: A Gantt chart allows individual tasks to be scheduled (such as creation of video clips) and allocated to members of the development team with the required skills. It will enable the project manager to schedule the work required to complete all of the components by the required deadline. It allows the project manager to visually see the timeline and task dependencies and respond appropriately if there are delays.

Question page · Practise and get marked

2024 11 marks Extended response The Software Engineering Project (Year 12) Documentation, data dictionary, testing (shopkeeper website)

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 22, with NESA Marking Guidelines

A shopkeeper employs a developer to create a website to enable customers to buy items online. (a) | Why is it important for the developer to consult the shopkeeper at the start of | 2 the development process? (b) | Distinguish between user documentation and technical documentation for this | 3 website. (c) | Complete the partial data dictionary for this website. | 3 Data item | Data type | Storage size | Description | Examples bits/bytes Surname | String | 40 bytes | Surname of | Faruga customer ItemName | 20 bytes | Name of item 2 L skim milk Quantity | Number of | 4 items Order | Details of | Dozen eggs | 1 $5.00 items in the | Flour 1 kg | 2 $2.00 order | 2 L skim milk 4 $3.50 TotalCost | 4 bytes | Total amount due Paid? | Has payment been made? (d) | Recommend TWO ways that the developer can test this website prior to | 3 implementation.

Marking criteria

[Question 22 (a)] Criteria | Marks • Provides reason(s) for consulting the shopkeeper | 2 • Provides some relevant information | 1 Criteria | Marks • Distinguishes between user and technical documentation for this system | 3 • Outlines aspects of both user and technical documentation | 2 • Shows some understanding of documentation | 1 Criteria | Marks • Provides a substantially correct data dictionary | 3 • Provides some correct entries | 2 • Provides some relevant information | 1 Criteria | Marks • Recommends TWO ways of testing this website | 3 • Outlines TWO relevant ways of testing OR | 2 • Recommends ONE relevant way of testing • Shows some understanding of testing | 1

Sample answer

Sample answer: The developer should interview the shopkeeper to determine the required time frame and budget. The developer could gather data about the nature of the business and products available, enabling them to create a system that will meet their needs.

[Question 22 (b)] Sample answer: User documentation is specifically designed to assist the customer in accessing the system and purchasing groceries and will be in the form of online documentation, accessed through a help function. Technical documentation is aimed at recording the software development process to assist both in development and in subsequent maintenance. This can include modelling tools, records of testing procedures and algorithms.

[Question 22 (c)] Sample answer: Data Item | Data type | Storage | Description | Examples size bits/bytes Surname | String | 40 bytes | Surname of | Faruga customer Item name | String | 20 bytes | Name of item | 2 L full cream milk Quantity | Integer | 2 bytes | Number of | 4 items Order | Array of records | Details of | Dozen eggs 1 $5.00 items in the | Flour 1 kg | 2 $2.00 order 2 L skim milk 4 $3.50 Total cost | Floating point | 4 bytes | Total amount | $45.20 due Paid? | Boolean | 1 byte | Has payment | T (or Y) been made

[Question 22 (d)] Sample answer: Once the website is hosted on a server, access should be tested using multiple devices with a variety of transactions. This would enable the ability of the website and the system to cope with the anticipated volume and variety of interactions without having to make it available to the broader public. It is important that the website produces correct totals for orders. This can be checked by entering carefully selected test data and comparing actual output with expected output.

Question page · Practise and get marked

2024 6 marks Extended response The Software Engineering Project (Year 12) Desk check and debugging an algorithm

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 23, with NESA Marking Guidelines

The following algorithm was written to find the average mark and the maximum mark in a school assessment. The assessment marks are stored in a sequential file called MarksData. 10 | BEGIN Analysis 20 | Max = 100 30 | Num_Students = 0 40 | Open MarksData for input 50 | Read Mark from MarksData 60 | WHILE NOT EOF 70 | IF Mark > Max THEN 80 | Max = Mark 90 | ENDIF 100 | Add 1 to Num_Students 110 | Average = Mark/Num_Students 120 | Read Mark from MarksData 130 | END WHILE 140 | Display Max, Average 150 | Close MarksData 160 | END Analysis The algorithm does not produce the expected output. The file MarksData contains the values: (a) | Complete a desk check for this algorithm using the values stored in MarksData. | 3 (b) | Suggest how the algorithm can be modified so that it achieves the correct | 3 output. You may refer to line numbers in your response.

Marking criteria

[Question 23 (a)] Criteria | Marks • Completes a substantially correct desk check | 3 • Completes a partially correct desk check | 2 • Provides some relevant information | 1 Criteria | Marks • Provides the necessary modifications | 3 • Provides ONE correct modification OR | 2 • Identifies TWO errors • Provides some relevant information | 1

Sample answer

Sample answer: Max | Num_Students | Mark | Average | Output 4 | 10 | 100, 10

[Question 23 (b)] Sample answer: Line 20 should be Max = 0 Line 15 Sum = 0 Line 95 Sum = Sum + Mark Line 110 change to Average = Sum/Num_Students

Question page · Practise and get marked

2024 10 marks Extended response The Software Engineering Project (Year 12) Modelling (IPO, DFD); Secure Software Architecture / Social and ethical issues

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 24, with NESA Marking Guidelines

In some areas, drivers need to use an app on their phone to pay for parking. This app allows the driver to: • create an account using their car registration number and banking details • start and end each parking session by pressing START and END buttons • pay for parking using the stored banking details. For each parking session, the app records the start and end times, calculates the cost of parking, accepts payment and stores the details remotely. The cost of parking is calculated using the hourly rate and the time spent. The hourly rate is determined by the location of the car. (a) | Construct an IPO diagram for the module that calculates the cost of parking. | 3 (b) | Construct a data flow diagram (DFD) to document the complete app as | 4 described. (c) | Describe how the developer might have addressed ONE inclusivity concern and | 3 ONE privacy concern associated with the use of this app.

Marking criteria

[Question 24 (a)] Criteria | Marks • Constructs a correct IPO diagram for this module | 3 • Constructs a partially correct IPO diagram | 2 • Provides some relevant information | 1 Criteria | Marks • Constructs a substantially correct data flow diagram that includes processes, data flows, storage and external entities • Constructs a data flow diagram that is relevant to the parking app and includes an external entity and most of the processes and data flows • Constructs a data flow diagram with some elements relevant to the parking app • Shows a basic understanding of data flow diagrams | 1 Criteria | Marks • Describes actions that address an inclusivity issue AND a privacy issue for this system • Outlines an action that addresses an inclusivity issue OR a privacy issue | 2 • Shows some understanding of inclusivity or privacy issues | 1

Sample answer

Sample answer: I | P | O Location | Determine rate | Rate Start_time | Cost = (End_time − Start_time)* Rate | Cost End_time Rate

[Question 24 (b)] Sample answer:

[Question 24 (c)] Sample answer: Drivers may use a range of devices. This is an inclusivity issue that the developer could have addressed by ensuring that this new system is available across all common platforms and screen sizes. A privacy concern arises if unauthorised people access the generated data about drivers’ movements. The developer could have implemented a security process that guards against external access to the stored banking details.

Question page · Practise and get marked

2024 4 marks Extended response The Software Engineering Project (Year 12) Documentation

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 25, with NESA Marking Guidelines

A software company is developing a system that will require a large development | 4 team. They have decided to use their own developers, and hire additional contract programmers when necessary. Explain how various types of documentation can be used by the contract programmers to enable them to quickly contribute to the project.

Marking criteria

[Question 25] Criteria | Marks • Explains the use of various types of documentation by the contract programmer • Describes a number of relevant types of documentation OR | 3 • Explains the use of ONE type of documentation • Outlines some relevant types of documentation | 2 • Provides some relevant information | 1

Sample answer

Sample answer: By referring to technical documentation such as DFDs, algorithms and structure charts, the contract programmer can familiarise themselves with how their particular module fits into the overall project. They can read existing source code to see the purpose of various modules and lines of code. This allows them to make necessary changes to ensure the new code is compatible with the existing code. A Gantt chart can be used to see the expected timing for their allocated tasks so they can plan their workflow. A data dictionary can be referred to, to confirm the use of particular variables.

Question page · Practise and get marked

2024 6 marks Extended response The Software Engineering Project (Year 12) Context diagram; subroutines

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 26, with NESA Marking Guidelines

Many software applications use a software generated test to deter automated spam attacks by confirming that data is being entered by a human. An example of such a test, named CheckIfHuman, is shown. Type the characters shown above: CONTINUE The user is required to type the displayed characters into the dialogue box. The system checks if there is a match, and generates a flag. (a) | Create a context diagram to model the CheckIfHuman test. | 2 (b) | In the following code, CheckIfHuman is called to confirm that the correct text | 4 characters have been entered before proceeding. BEGIN Main OK = TRUE REPEAT HumanDetected = CheckIfHuman IF HumanDetected THEN DisplayMessage (HumanDetected) DoMainProcessing OK = TRUE ELSE DisplayMessage (HumanDetected) OK = FALSE ENDIF UNTIL OK = TRUE END Main Explain why it is important that CheckIfHuman and DisplayMessage are implemented as subroutines for this application.

Marking criteria

[Question 26 (a)] Criteria | Marks • Creates a substantially correct context diagram | 2 • Creates a recognisable attempt at a context diagram | 1 Criteria | Marks • For BOTH subroutines, explains the importance of implementing the logic as subroutines • For ONE of the subroutines, explains the importance of implementing the logic as a subroutine • Outlines ONE advantage of using a subroutine | 2 • Demonstrates some understanding of subroutines | 1

Sample answer

Sample answer:

[Question 26 (b)] Sample answer: It is useful to define CheckIfHuman as a subroutine to allow for further developments in the relevant technology. It is a trivial matter to replace the current logic for the subroutine with code that utilises the new technology, while still providing the same output, ie a success flag. DisplayMessage appears to be a generic subroutine that appropriately formats and displays a relevant message. This makes it easy to change the overall format of the display if required, once only, in the updated subroutine. It is also easy to allow for the inclusion of a much larger range of messages in the future, simply by increasing the numbers of variables that are appropriately initialised and passed to the subroutine.

Question page · Practise and get marked

2024 3 marks Extended response The Software Engineering Project (Year 12) Reading and modifying an algorithm

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 27, with NESA Marking Guidelines

A palindrome is a word that reads the same forward and backward, such as the words | 3 ‘refer’ and ‘noon’. The following code fragment checks whether a word is a palindrome. 1 | BEGIN PalindromeCheck(word, palindrome) 2 | palindrome = TRUE 3 | F=1 4 | N = number of letters in word 5 | L=N 6 | REPEAT th | th 7 | IF F letter of word is not equal to L letter of word THEN 8 | palindrome = FALSE 9 | END IF 10 | L = L–1 11 | F = F+1 12 | UNTIL F > N 13 | RETURN palindrome 14 | END PalindromeCheck There are no errors in the code fragment. Explain the effect of changing line 12 to the following code. 12 | UNTIL F > N/2 OR palindrome = FALSE

Marking criteria

[Question 27] Criteria | Marks • Provides correct explanations for BOTH modifications | 3 • Provides a correct explanation for ONE modification | 2 • Demonstrates some understanding of the algorithm | 1

Sample answer

Sample answer: UNTIL F>N/2 – once the process has reached halfway, the same checks would be repeated unnecessarily. Adding ‘OR palindrome = FALSE’ – there is no need to keep checking once a non-matching letter is found. In both cases, the loop can be exited early, improving efficiency.

Question page · Practise and get marked

2024 3 marks Extended response The Software Engineering Project (Year 12) Debugging output statements v breakpoints

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 28, with NESA Marking Guidelines

Distinguish between the use of debugging output statements and breakpoints when | 3 developing a software solution.

Marking criteria

[Question 28] Criteria | Marks • Distinguishes between the use of breakpoints and debugging output statements • Describes the use of breakpoints OR debugging output statements OR • Outlines reasons for the use of breakpoints AND debugging output statements • Provides some relevant information | 1

Sample answer

Sample answer: A debugging output statement is added to the code by the developer and can be used to indicate that a certain section of code has been reached or to show the contents of a variable at any specific stage of execution. A debugging output statement does not interrupt execution. A breakpoint can be added by the developer to halt execution and to allow the programmer to then check the value of specific variables or to step through the program line by line from then on.

Question page · Practise and get marked

2024 7 marks Extended response The Software Engineering Project (Year 12) Algorithm design (random allocation); testing with stubs

NESA 2024 HSC Software Design and Development (OLD syllabus) - Section II Question 30, with NESA Marking Guidelines

For a particular concert, there are 10 000 tickets available, and 2000 customers wanting to buy tickets. Customers are allocated tickets randomly. Customers are required to indicate the number of tickets they would like to purchase, up to a limit of 8. Seats are not allocated until all ticket requests have been entered. Details of the 2000 customers are already stored, in no particular order, in an array of records called Customer_Array. Each customer record has the following structure: Cust_ID | : String Name | : String Num_Tickets : Integer Allocated | : Boolean (becomes TRUE when tickets have been allocated) For example: Cust_ID | Name | Num_Tickets | Allocated Wong4567 | Wong, F | 1 | FALSE Jones34 | Jones, Q | 3 | FALSE (a) | An algorithm called AllocateTickets is required to allocate ticket numbers to | 5 customers. Customers are selected at random to receive their requested tickets until all available tickets are allocated. The tickets allocated will always be sequentially numbered. The Cust_ID of the chosen customers are stored next to the relevant ticket number in a 10 000-element array of records called Ticket_Array. For example: TicketNumber | AllocatedCustomer 1 | Jones34 2 | Jones34 3 | Jones34 4 | Abu507 5 | Abu507 9998 | Wong4567 9999 | Rakash234 10000 | Rakash234 As the last tickets are allocated, a customer may not get all the tickets they have requested (as there may be no more tickets left). Some customers may not be allocated any tickets at all. In the example shown above, even if Rakash234 requested five tickets, there will only be two allocated because that is all that is left. Design an appropriate algorithm for AllocateTickets. You may use this function: • Rand (Min, Max) generates a random integer between Min and Max, inclusive (b) | The algorithm AllocateTickets, as described in part (a), is implemented as code. | 2 Explain why the function Rand(), as described in part (a), cannot be a stub during the testing of this code. 2024 HIGHER SCHOOL CERTIFICATE EXAMINATION Centre Number Software Design and Development | Student Number

Marking criteria

[Question 30 (a)] Criteria | Marks • Provides a substantially correct algorithm that includes the following features: – Randomly allocates customers one at a time from the customer array using a loop | 5 – Allocates the correct number of tickets – Updates array(s) correctly – Deals correctly with last few remaining tickets • Provides an algorithm that addresses most of the key aspects of the problem • Provides an algorithm that addresses some key aspects of the problem | 3 • Provides an algorithm that shows some understanding of the problem | 2 • Shows some understanding of the problem | 1 Criteria | Marks • Provides an explanation of the use of this stub in testing | 2 • Shows some understanding of a stub | 1

Sample answer

Sample answer: BEGIN AllocateTickets TixIndex = 1 WHILE TixIndex < 10000 Pos = Rand (1, 2000) IF (CustomerArray[Pos].Allocated = FALSE) THEN IF (TixIndex + CustomerArray[Pos].Num_Tickets > 10000) THEN NumToInsert = 10000 – TixIndex ELSE NumToInsert = CustomerArray[Pos].Num_Tickets ENDIF UserToInsert = CustomerArray[Pos].CustId Allocate(UserToInsert, NumToInsert, TixIndex) CustomerArray[Pos].Allocated = TRUE ENDIF ENDWHILE END AllocateTickets BEGIN Allocate(CustId, Num_Tickets, TixIndex) FOR i = 1 to Num_Tickets Ticket_Array[TixIndex].AllocatedCustomer = CustId Add 1 to TixIndex NEXT i END Allocate

[Question 30 (b)] Sample answer: For the function Rand(), it is critical that it returns relevant values (in this case a random number in the specified range). It is not possible to write a stub that can pass back the required values to fully test the main program logic without including the logic to generate the random numbers required by the calling program, to enable it to allocate tickets meaningfully.

Question page · Practise and get marked