WGU D385 SOFTWARE SECURITY AND
TESTING PRE ASSESSMENT ACTUAL TEST
QUESTIONS AND SOLVED ANSWERS
◉ 500 Internal Server Error.
Answer: The server encountered an unexpected condition and failed
◉ 503 Service Unavailable.
Answer: The server is temporarily unavailable due to overload or
maintenance
◉ 401 vs 403.
Answer: 401 means authentication failed or missing while 403
means authenticated but not authorized
◉ 400 vs 404.
Answer: 400 means malformed request while 404 means the
resource does not exist
◉ 404 vs 405.
Answer: 404 means endpoint missing while 405 means endpoint
exists but method is wrong
,◉ 400 Bad Request example.
Answer: Missing required JSON fields or wrong data type in a
requests.post call
◉ 401 Unauthorized example.
Answer: Authorization header missing or token expired in a
requests.get call
◉ 403 Forbidden example.
Answer: Valid token but user role lacks permission
◉ 404 Not Found example.
Answer: Requesting a resource ID that does not exist
◉ 405 Method Not Allowed example.
Answer: Sending DELETE to a POST-only endpoint
◉ 500 Internal Server Error example.
Answer: Backend exception raised during request processing
◉ 503 Service Unavailable example.
, Answer: Server overloaded or under maintenance
◉ Accept header.
Answer: Specifies what content types the client can accept
◉ Content-Type header.
Answer: Specifies the format of the data being sent or returned
◉ Authorization header.
Answer: Contains credentials such as API keys or bearer tokens
◉ User-Agent header.
Answer: Identifies the client software making the request
◉ Server header.
Answer: Reveals server software and can leak information
◉ Strict-Transport-Security header.
Answer: Forces browsers to use HTTPS only
◉ SQL Injection.
TESTING PRE ASSESSMENT ACTUAL TEST
QUESTIONS AND SOLVED ANSWERS
◉ 500 Internal Server Error.
Answer: The server encountered an unexpected condition and failed
◉ 503 Service Unavailable.
Answer: The server is temporarily unavailable due to overload or
maintenance
◉ 401 vs 403.
Answer: 401 means authentication failed or missing while 403
means authenticated but not authorized
◉ 400 vs 404.
Answer: 400 means malformed request while 404 means the
resource does not exist
◉ 404 vs 405.
Answer: 404 means endpoint missing while 405 means endpoint
exists but method is wrong
,◉ 400 Bad Request example.
Answer: Missing required JSON fields or wrong data type in a
requests.post call
◉ 401 Unauthorized example.
Answer: Authorization header missing or token expired in a
requests.get call
◉ 403 Forbidden example.
Answer: Valid token but user role lacks permission
◉ 404 Not Found example.
Answer: Requesting a resource ID that does not exist
◉ 405 Method Not Allowed example.
Answer: Sending DELETE to a POST-only endpoint
◉ 500 Internal Server Error example.
Answer: Backend exception raised during request processing
◉ 503 Service Unavailable example.
, Answer: Server overloaded or under maintenance
◉ Accept header.
Answer: Specifies what content types the client can accept
◉ Content-Type header.
Answer: Specifies the format of the data being sent or returned
◉ Authorization header.
Answer: Contains credentials such as API keys or bearer tokens
◉ User-Agent header.
Answer: Identifies the client software making the request
◉ Server header.
Answer: Reveals server software and can leak information
◉ Strict-Transport-Security header.
Answer: Forces browsers to use HTTPS only
◉ SQL Injection.
