Software Engineering › Key terms › Y12 Programming for the Web › Authentication and authorisation (web)
Authentication and authorisation (web)
Term Y12 Programming for the Web
Definition
Authentication proves who you are; authorisation decides what you can access.
Example: See the Secure Software Architecture cards.
Found in: syllabus, sample exam and familiarisation guidelines, school notes, past SDD papers.
Where it is used in the test
Syllabus area: Y12 Programming for the Web.
Question types it can appear in
- Multiple choice: Pick the option that matches the definition or example.
- Fill in the blanks: Choose this term to complete a statement or table.
- Matching or table: Match it to its description, example or category.
Where it has appeared in the paper
Programming for the Web (Part A). Part letters follow each paper’s own layout.
Related past questions
- 2025 HSC Q6 (1 mark): Web protocols Programming for the Web (Part A) · 1 mark
These are the questions the flashcard set links to this term. Open each one and compare your answer with its marking criteria.
Other questions that mention it
- Sample exam Q19 Secure Software Architecture (Part B) · 4 marks
Study links
- Flashcard: Authentication and authorisation (web) in Programming for the Web (Year 12) · study that set
- Memorise: Processes for securing the web
- Master answer: sample-q19 (4 marks, short answer (explain, max 75 words)) (Master model answers: Secure Software Architecture)
- Notes: Safe APIs to minimise vulnerabilities (Secure Software Architecture (Year 12))
- Notes: Part 3. Where this has been examined (see ../../question_bank.md) (Secure Software Architecture (Year 12))
- Notes: Processes for securing the web (Programming for the Web (Year 12))
How to use it in an answer
A model sentence
“Authentication proves who you are; authorisation decides what you can access.” Then apply it: See the Secure Software Architecture cards.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
- Identify: Recognise and name. (2025 HSC Q6 (1 mark): Web protocols)
Technique for the question types
- Multiple choice: Read all four options, rule out wrong ones, pick one; no penalty for guessing so never leave blank.
- Fill in the blanks: Choose the right word from a list; use exact syllabus terms.
- Matching or table: Tick or match each statement to the right column (for example ORM v SQL, SAST v DAST).
Common mistakes
- Use the term exactly as the syllabus words it, then link it to the scenario in the question; the 2025 feedback repeatedly rewards using the stimulus.
- Answer the command word: outline gives main points only, explain gives a reason or cause, discuss gives both sides.
Related terms
Same group in the syllabus: SSL/TLS certificate · Encryption algorithm · Encryption key · Plain text and cipher text · Symmetric encryption · Asymmetric encryption · Hash value · Digital signature