Question 1 Report
A developer is designing a login system for a website.
(a) Identify the type of diagram shown above. [1]
(b) Describe what happens when a user enters an invalid username or password, according to the diagram. [2]
(c) State one additional security feature that could be added to this login process. Explain how it would improve security. [3]
(a) The diagram shown is a system flowchart (also called a program flowchart). It uses standard symbols (rounded rectangles for start/end, rectangles for processes, diamonds for decisions) to represent the sequence of steps in the login process. [1]
(b) When a user enters an invalid username or password, the system checks the credentials at the decision point ("Valid?"). [1] Since the answer is "No", the system displays an error message to inform the user that their credentials are incorrect, and then returns the user to the username and password entry step so they can try again. [1]
(c) An additional security feature would be a limit on the number of login attempts, such as locking the account after three consecutive failed attempts. [1] This prevents brute force attacks, where an attacker tries many different passwords in rapid succession until the correct one is found. [1] It also alerts the legitimate account owner that someone may be attempting to access their account, prompting them to change their password. [1]
Everything you need to excel in your exams