Software Engineering › Key terms › Y12 Secure Software Architecture › Authentication
Authentication
Term Key terms bank Y12 Secure Software Architecture
Definition
Proving that a user, device or system is who it claims to be (passwords, multi-factor, certificates).
Example: Login with a password and a one-time code is authentication.
Found in: syllabus, sample exam and familiarisation guidelines, school notes, past SDD papers.
Proving who you are.
Where it is used in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Multiple choice: 2025 Q6: 'Ensuring that parties exchanging information are who they claim to be'
- Fill in the blanks: Choose this term to complete a statement or table.
- Matching or table: Match it to its description, example or category.
- Short answer: Define, outline or explain it and tie it to the scenario.
Where it has appeared in the paper
Programming for the Web (Part A); Secure Software Architecture (Part A, B). Part letters follow each paper’s own layout.
Related past questions
- 2025 HSC Q6 (1 mark): Web protocols Programming for the Web (Part A) · 1 mark
- 2025 HSC Q23c (3 marks): Fundamental software design security concepts Secure Software Architecture (Part A) · 3 marks
- Sample exam Q19 (4 marks): Authentication and authorisation Secure Software Architecture (Part B) · 4 marks
These are the questions the flashcard set links to this term. Open each one and compare your answer with its marking criteria.
Other questions that mention it
- 2023 Software Design and Development Q23 Secure Software Architecture (Part D) · 5 marks · old syllabus
- 2022 Software Design and Development Q27 The Software Engineering Project (Part D) · 10 marks · old syllabus
- Sample exam Q22b Secure Software Architecture (Part B) · 3 marks
Study links
- Flashcard: Authentication in Secure Software Architecture (Year 12) · study that set
- Memorise: Fundamental software design security concepts (six words)
- Key terms bank entry: Authentication
- Master answer: sample-q19 (4 marks, short answer (explain, max 75 words)) (Master model answers: Secure Software Architecture)
- Notes: Design, develop and implement secure code to minimise vulnerabilities in user action… (Secure Software Architecture (Year 12))
- Master answer: sdd2023-q23 (5 marks, short answer / extended) (Master model answers: Secure Software Architecture)
- Notes: When developing programming code, explore fundamental software design security concepts,… (Secure Software Architecture (Year 12))
How to use it in an answer
A model sentence
“Proving that a user, device or system is who it claims to be (passwords, multi-factor, certificates).” Then apply it: Login with a password and a one-time code is authentication.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
Technique for the question types
- Multiple choice: Read all four options, rule out wrong ones, pick one; no penalty for guessing so never leave blank.
- Fill in the blanks: Choose the right word from a list; use exact syllabus terms.
- Matching or table: Tick or match each statement to the right column (for example ORM v SQL, SAST v DAST).
- Short answer: One clear point per mark, use the stimulus and course terms, and answer the command word.
Worked answers from the marking guidelines
Sample exam Q19 (4 marks): Authentication and authorisation (4 marks): criteria and sample answer
Criteria
4: Explains how authentication AND authorisation could be applied. 3: Explains how authentication OR authorisation could be applied, OR outlines how both could be applied. 2: Outlines some features of authentication and/or authorisation. 1: Some relevant information.
Sample answer
Authentication ensures that only staff and students with valid usernames and passwords, which should be encrypted in storage (eg using hashing), can access the app. Authorisation controls access to specific features of the app based on user roles or groups. Teachers may have permissions to upload, assign and track homework, while students can only download tasks and upload completed work. By organising users into specific roles or groups, the app restricts access to appropriate functionality, ensuring that each user can only perform actions relevant to their role or group.
Common mistakes
- Use the term exactly as the syllabus words it, then link it to the scenario in the question; the 2025 feedback repeatedly rewards using the stimulus.
- Answer the command word: outline gives main points only, explain gives a reason or cause, discuss gives both sides.
Related terms
Same group in the syllabus: Confidentiality · Integrity · Availability · Authorisation · Accountability · Privacy · Regulatory compliance