General Instructions
• Reading time – 10 minutes
• Working time – 2 hours and 20 minutes
Total marks: 80
• Attempt Questions 1-23
• Allow 2 hours and 20 minutes to attempt the questions
Question 1 (1 mark)
What is a key feature of progressive web apps (PWAs)?
Question 2 (1 mark)
Which language is typically used for client-side programming?
Question 3 (1 mark)
A common machine learning model for unsupervised machine learning is:
Question 4 (2 marks)
Match the correct definition to the concept.
| Decryption | Digital Signature | Encryption | Hashing | Plain Text | SSL/TLS | |
|---|---|---|---|---|---|---|
| Data that has not been encrypted or protected | ||||||
| Converts data into a fixed-length value that cannot be reversed | ||||||
| Used to verify the authenticity and integrity of a message | ||||||
| Converts encrypted data back into a readable format | ||||||
| Security protocols that enable encrypted communication over a network | ||||||
| Converts readable data into a coded format to protect privacy |
Question 5 (1 mark)
Which of the following best describes the Agile software development approach?
Select all that apply.
Question 6 (2 marks)
List 3 reasons why a web development team might use version control in the development of a website.
Question 7 (2 marks)
Briefly describe the difference between input validation and input sanitisation as defensive data input handling practices, providing an example for each.
Question 8 (3 marks)
Discuss the difference between front-end and back-end web programming.
Question 9 (2 marks)
Tools and processes are used by software engineers to generate solutions for clients based on their requirements.
Match the terms for these tools and processes to their definition.
| Algorithm | Data Dictionary | Quality Assurance | Source Code | Evaluation | Storyboard | |
|---|---|---|---|---|---|---|
| Performance of tasks ensure that developed software continues to meet requirements. | ||||||
| A set of processes or rules to be followed to solve problems. | ||||||
| A sequence of sketches or mock-ups to represent how users navigate through different screens. | ||||||
| A table which represents data items, their date types, format, size, and validation rules if they apply. | ||||||
| A set of instructions written in a programming language to perform specific tasks. | ||||||
| Checking if developed software meets requirements or specifications. |
Question 10 (4 marks)
There are many different algorithms available for encrypting data, each with different strengths and weaknesses.
In which software development step would a software engineering team need to decide on the specific algorithm they will use? (1 mark)
Hashing algorithms are used to create a unique representation of data. They have many uses in encryption and security.
Identify 3 essential features of a hashing algorithm. (3 marks)
Question 11 (6 marks)

Which Machine Learning model is most appropriate for predicting new values based on the data given in the graph? (1 mark)
Explain why a Neural Network would not be the best choice of model for the training data and propose an alternative model. (5 marks)
Question 12 (3 marks)
An Australian aerospace startup is developing software to control its rockets from launch on earth to space and to landing on other moons and planets.
Each rocket must have:
- A rocket ID e.g. R20.
- Launch site e.g. “Broome”.
- Provider ID which identifies the company that made the payload e.g. P01.
- The dry mass of the rocket, e.g. 2500kg.
- The wet mass of the rocket, e.g. 5250.50kg.
- Target orbit, which describes the orbit the payload is to enter.
- A release() command which will open up the payload doors and unclamp the satellite from the cargo bay.
In addition, each satellite must have:
- Satellite purpose, which describes the mission of the satellite.
- Satellite targets, which describes what countries, regions or areas of the Earth or other planets or moons are to be monitored by the satellite.
- A signal() command, which is used to establish and maintain communications control with the provider as indicated by the Provider ID.
Create a class diagram for the rocket and satellite relationship described in the stimulus.
Question 13 (3 marks)
A local music store is using a database table called Albums.
.png)
Write a SQL query to show the output below.
| albumName | albumPrice |
| Chill Sessions | 25.00 |
| Live in Concert | 22.00 |
Question 14 (4 marks)
Consider the following algorithm:
BEGIN checkLogin (username, password)
IF username <> "" OR password <> "" THEN
PRINT "Username or password empty."
RETURN False
ENDIF
length = 8
symbol = ['#', '$', '!', '^', '&', '[',']']
symbol_present = False
j = 1
IF length of username < length OR
length of password < length THEN
PRINT "Username or password is not long enough."
RETURN False
ENDIF
IF LEFT(username, 1) is character AND
LEFT(password, 1) is character THEN
WHILE symbol_present = False
IF LEFT(username, j) = Symbol[j] THEN
Symbol_present = True
ELSE IF LEFT(password, j) = Symbol[j]
Symbol_present = True
ELSE
Symbol_present = False
ENDIF
j = j + 1
ENDWHILE
ELSE
PRINT "No symbol present in the username or password."
RETURN False
ENDIF
END checkLogin
Write Python code that implements as the function has_symbol(username, password, symbols) only the part of the provided algorithm that checks whether either username or password contains a symbol from the given list of symbols and also prints a message if this is not satisfied.
# Output
Question 15 (4 marks)
Click Shoe Warehouse is an online store for Australian-made shoes.
They want to know which of their shoe sizes and styles sell the best in each season.
They have prepared a spreadsheet with 10 years of monthly sales history, organised by style and size.
Explain how Machine Learning and Business Process Automation can help ‘Click Shoe Warehouse’ achieve its goal.
Question 16 (4 marks)
An online service wants to reduce the changes of user accounts being compromised by dictionary attacks. In this type of attack, an attacker uses a pre-defined list (often referred to as a “dictionary”) of words, phrases, or common passwords to guess the victim's password.
Describe TWO strategies they could implement to reduce this risk.
Question 17 (4 marks)
Web developers may choose to use HTML and CSS or a CMS.
Explain why an experienced web developer would choose to use HTML and CSS while a beginner would use a CMS.
Question 18 (5 marks)
Assess positive and negative impacts of machine learning and artificial intelligence on production efficiency, waste and the environment.
Question 19 (6 marks)
A library management system allows users to register online. The registration form must collect user details and a secure PIN.
PIN requirements:
- Exactly 4 numeric digits.
- No repeated digits (e.g. 1123 is invalid).
- No letters or special characters.
Design a user interface for registration. Label all form fields clearly. (3 marks)
Explain how accessibility considerations improve the usability of web forms for a wide range of users, including those with disabilities. (3 marks)
Question 20 (4 marks)
Describe the K Nearest Neighbour (KNN) algorithm for regression, predicting y for a new data point using a training data set of x and y values given the K value parameter of 3.
Question 21 (5 marks)

The algorithm flowchart shown describes a stub for a login function.
Implement this stub in Python code. (1 mark)
# Output
One simple test has been provided below.
Provide at least TWO more tests that could be used, with a comment justifying the use of each one. (2 marks)
# Test cases
IF login("user1", "pass123") == "Login successful" THEN
PRINT "Test case 1 passed"
ELSE
PRINT "Test case 1 failed"
ENDIF
You are tasked with writing an error message to return to users in situations where their login attempt fails. This could happen when the password is entered incorrectly or when the username is incorrect.
What should you consider when creating these messages? (2 marks)
Question 22 (5 marks)
An Australian toy manufacturing company has recently been established, with offices around the country.
Toy manufacturing is subject to strict environmental, workplace health and safety, national and international regulatory frameworks, enforced by the agency AusToy.
Explain communications issues that may arise due to stakeholders being located all over the country. (3 marks)
Compare and contrast Hybrid (also called WAgile) and Waterfall software development methodologies in developing software to control the manufacturing of their toys. (2 marks)
Question 23 (8 marks)
A popular social media platform has recently suffered a cross-site scripting (XSS) attack, leading to significant user data breaches and a loss of public trust.
Discuss the ethical, legal, and technical ramifications for both users and the enterprise stemming from such a security breach.