WGU D385 SOFTWARE SECURITY AND TESTING Final Assessment Study Guide Complete Question Bank with Detailed Explanations

WGU D385
SOFTWARE SECURITY AND TESTING

Final Assessment Study Guide
Complete Question Bank with Detailed Explanations

2026 Update




📚 Comprehensive Coverage:

✓ HTTP Status Codes & Headers
✓ Security Vulnerabilities & Attacks
✓ Defensive Programming Techniques
✓ Code Examples & Solutions
✓ Encryption & Authentication
✓ Testing & Debugging Methods
✓ OA-Specific Code Patterns

,
, Table of Contents

Table of Contents...............................................................................................................3
SECTION 1: HTTP STATUS CODES & HEADERS.........................................................6
HTTP Status Codes - Quick Reference........................................................................6
2xx - Success Codes.................................................................................................6
4xx - Client Error Codes............................................................................................6
5xx - Server Error Codes..........................................................................................7
HTTP Headers - Essential Reference...........................................................................8
SECTION 2: SECURITY VULNERABILITIES & ATTACKS..............................................9
Injection Attacks.............................................................................................................9
SQL Injection.............................................................................................................9
Command Injection...................................................................................................9
Log Injection..............................................................................................................9
Cross-Site Scripting (XSS)..........................................................................................11
Types of XSS..........................................................................................................11
Cross-Site Request Forgery (CSRF)...........................................................................12
Access Control Vulnerabilities.....................................................................................12
Broken Access Control............................................................................................12
Broken Object Level Authorization (BOLA).............................................................12
Privilege Escalation.................................................................................................12
Other Critical Vulnerabilities........................................................................................13
Insecure Deserialization..........................................................................................13
Man-in-the-Middle (MITM).......................................................................................13
Denial of Service (DoS)...........................................................................................13
Server-Side Request Forgery (SSRF)....................................................................14
Other Vulnerabilities................................................................................................14
SECTION 3: DEFENSIVE PROGRAMMING & INPUT VALIDATION............................15
Core Principles of Defensive Programming................................................................15
Common Defensive Coding Techniques.....................................................................15
Input Validation Types.................................................................................................15
Type Check.............................................................................................................15
Range Check...........................................................................................................15
Length Check..........................................................................................................15
Null Check...............................................................................................................15
Validation Strategies...............................................................................................16
Assertions....................................................................................................................16
Categories of Assertions.........................................................................................16
Error Handling Strategies............................................................................................16
SECTION 4: CRYPTOGRAPHY & AUTHENTICATION.................................................17
Hashing........................................................................................................................17
Hash Algorithm Requirements................................................................................17
Safe Hash Algorithms..............................................................................................17
Unsafe Hash Algorithms.........................................................................................17
Salting......................................................................................................................17
Password Hashing Functions..................................................................................17