Software Engineering › Key terms › Y12 Secure Software Architecture › Penetration testing
Penetration testing
Term Key terms bank Y12 Secure Software Architecture
Definition
Authorised, simulated attacks on a system by testers to see whether weaknesses can really be exploited.
Example: An ethical hacker tries to break into the login.
Found in: syllabus, school notes.
Authorised simulated attack that exploits weaknesses.
Where it is used in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Multiple choice: Pick the option that matches the definition or example.
- Short answer: Define, outline or explain it and tie it to the scenario.
- Matching or table: Match it to its description, example or category.
No past question in this bank is linked to this term yet. It can still be tested through the question types above.
Study links
- Flashcard: Penetration testing in Secure Software Architecture (Year 12) · study that set
- Memorise: Test and evaluate security and resilience
- Key terms bank entry: Penetration testing
- Notes: Test and evaluate security and resilience (Secure Software Architecture (Year 12))
- Notes: Code security strategies: code review, SAST, DAST, vulnerability assessment, pen testing (Secure Software Architecture (Year 12))
- Notes: Interpret and apply fundamental software development steps to develop secure code,… (Secure Software Architecture (Year 12))
- Notes: Test and evaluate the security and resilience of software by determining… (Secure Software Architecture (Year 12))
How to use it in an answer
A model sentence
“Authorised, simulated attacks on a system by testers to see whether weaknesses can really be exploited.” Then apply it: An ethical hacker tries to break into the login.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
No linked question shows the command word for this term. Across the past short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.
Technique for the question types
- Multiple choice: Read all four options, rule out wrong ones, pick one; no penalty for guessing so never leave blank.
- Short answer: One clear point per mark, use the stimulus and course terms, and answer the command word.
- Matching or table: Tick or match each statement to the right column (for example ORM v SQL, SAST v DAST).
Common mistakes
- Use the term exactly as the syllabus words it, then link it to the scenario in the question; the 2025 feedback repeatedly rewards using the stimulus.
- Answer the command word: outline gives main points only, explain gives a reason or cause, discuss gives both sides.
Related terms
Same group in the syllabus: Determining vulnerabilities · Hardening systems · Handling breaches · Business continuity · Disaster recovery · Code review · Static application security testing (SAST) · Dynamic application security testing (DAST) · Vulnerability assessment