Ethical hacking

Authorised testing of a system to find security vulnerabilities before malicious attackers can exploit them.

Part of: VCE Applied Computing - U2O2 - Cyber Security — Module 55, 9-10 Digital Technologies Vic Curric - Digital Systems and Security — Module 80, VCE Software Development - U4O2 - Cyber Security: secure software development practices — Module 83, IGCSE Computer Science 0478 — 5.3 Cyber Security — Module 18, WA Computer Science ATAR Year 11 — Cyber Security — Module 141

Understanding Ethical hacking in VCE Cyber Security

What it does: This code checks for authorisation before any testing is allowed to proceed. This code defines the boundaries of what can legitimately be tested. Permission is what distinguishes ethical hacking from unauthorised, illegal access. Ethical hackers report vulnerabilities to the owner rather than exploiting them. Testing outside the agreed scope can cause unintended damage and isn't authorised. Leaving access open creates a new security risk rather than helping fix existing ones. This code scans the authorised target for vulnerabilities to report. This code reports the discovered findings to the legitimate owner of the system.

Common mistakes: Line 1 sets has_permission to False, but the scan proceeds anyway, meaning testing happens without authorisation. Line 2 skips the permission check, which goes against ethical hacking's requirement to confirm authorisation first.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Ethical hacking to a class →

This module's key terms are also in a printable crossword (Modules 51–60) and word search (Modules 41–74).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Ethical hacking always requires explicit permission from the system owner before testing.

TrueFalse

Matches

exploit_findings(findings)

↓

The mistake: exploiting vulnerabilities instead of reporting them

Applying

Meanings

Term

Ethical hacking

Meaning

Authorised testing of a system to find security vulnerabilities before malicious attackers can exploit them.

Practice

has_permission = True

Testing

Gaps

= True

Check Answer

Spots

1has_permission = False

2scan_for_vulnerabilities(target)

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Ethical hacking always requires explicit permission from the system owner before testing.

A. False

B. True ✓

Permission is what distinguishes ethical hacking from unauthorised, illegal access.

2. Which is ethical hacking: testing a system with the owner's authorisation, or testing it without asking?

A. Testing with authorisation ✓

B. Testing without asking

Testing without permission is unauthorised access, regardless of good intentions.

3. An ethical hacker should exploit found vulnerabilities for personal gain.

A. False ✓

B. True

Ethical hackers report vulnerabilities to the owner rather than exploiting them.

4. Which should an ethical hacker do with found vulnerabilities: report them to the owner, or keep them secret?

A. Report them to the owner ✓

B. Keep them secret

Reporting findings allows the owner to fix the vulnerabilities before attackers exploit them.

5. Ethical hacking must stay within an agreed scope defined before testing begins.

A. False

B. True ✓

Testing outside the agreed scope can cause unintended damage and isn't authorised.

Match the Pairs

findings = scan_for_vulnerabilities(target) → Scanning a system to find security weaknesses

report_findings(findings, owner) → Disclosing discovered vulnerabilities to the system owner

Ethical hacking requires explicit permission before testing begins → has_permission = get_permission()

Testing should stay within an agreed scope set by the owner → scope = get_test_scope()

exploit_findings(findings) → The mistake: exploiting vulnerabilities instead of reporting them

scan_for_vulnerabilities(target) # has_permission = False → The mistake: scanning a system without authorisation

Key Term

Ethical hacking

Authorised testing of a system to find security vulnerabilities before malicious attackers can exploit them.

Fill in the Blanks

1. has_permission = True

Hint: Type the name of the variable that confirms authorisation to test the system.

2. findings = scan_for_vulnerabilities(target)

Hint: Type the name of the function that scans the target system for vulnerabilities.

3. report_findings(findings, owner)

Hint: Type the name of the function that reports the findings to the system owner.

4. if hasPermission == True:

Hint: Type the comparison operator that checks if hasPermission equals True.

5. def get_test_scope():

Hint: Type the name of the function that defines what parts of the system can be tested.

Spot the Error

Question 1

A has_permission = False

B scan_for_vulnerabilities(target)

C report_findings(f, owner)

Line A — Line 1 sets has_permission to False, but the scan proceeds anyway, meaning testing happens without authorisation.

Question 2

A has_permission = True

B skip_permission_check = True

C scan_for_vulnerabilities(target)

Line B — Line 2 skips the permission check, which goes against ethical hacking's requirement to confirm authorisation first.

Question 3

A has_permission = True

B findings = scan(target)

C exploit_findings(findings)

Line C — Line 3 exploits the found vulnerabilities instead of reporting them, which is not ethical hacking behaviour.

Question 4

A scope = get_test_scope()

B findings = scan(out_of_scope_target)

C report_findings(findings, owner)

Line B — Line 2 scans a target outside the agreed scope, breaking the rule of testing only what was authorised.

Question 5

A has_permission = True

B findings = scan(target)

C hide_findings = True

Line C — Line 3 hides the findings instead of reporting them, but ethical hacking requires disclosing results to the owner.

Student with a class code? Join your class →