The VCAA is in damage control after questions similar to those found “hidden” on sample VCE assessments turned up in the real exams.