Software Engineering › Key terms › Y12 Secure Software Architecture › Vulnerability assessment
Vulnerability assessment
Term Y12 Secure Software Architecture
Definition
A systematic scan and review that identifies, ranks and reports known weaknesses in a system.
Example: A scanner lists out-of-date components.
Found in: syllabus, school notes.
Where it is used in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Multiple choice: Pick the option that matches the definition or example.
- Short answer: Define, outline or explain it and tie it to the scenario.
- Matching or table: Match it to its description, example or category.
No past question in this bank is linked to this term yet. It can still be tested through the question types above.
Study links
- Flashcard: Vulnerability assessment in Secure Software Architecture (Year 12) · study that set
- Memorise: Test and evaluate security and resilience
- Notes: Code security strategies: code review, SAST, DAST, vulnerability assessment, pen testing (Secure Software Architecture (Year 12))
- Notes: Apply and evaluate strategies used by software developers to manage the security of… (Secure Software Architecture (Year 12))
- Notes: Test and evaluate security and resilience (Secure Software Architecture (Year 12))
How to use it in an answer
A model sentence
“A systematic scan and review that identifies, ranks and reports known weaknesses in a system.” Then apply it: A scanner lists out-of-date components.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
No linked question shows the command word for this term. Across the past short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.
Technique for the question types
- Multiple choice: Read all four options, rule out wrong ones, pick one; no penalty for guessing so never leave blank.
- Short answer: One clear point per mark, use the stimulus and course terms, and answer the command word.
- Matching or table: Tick or match each statement to the right column (for example ORM v SQL, SAST v DAST).
Common mistakes
- Use the term exactly as the syllabus words it, then link it to the scenario in the question; the 2025 feedback repeatedly rewards using the stimulus.
- Answer the command word: outline gives main points only, explain gives a reason or cause, discuss gives both sides.
Related terms
Same group in the syllabus: Determining vulnerabilities · Hardening systems · Handling breaches · Business continuity · Disaster recovery · Code review · Static application security testing (SAST) · Dynamic application security testing (DAST) · Penetration testing