©FYNDLAY 2024/2025 ALL RIGHTS RESERVED 8:10PM.
D385 Software Security and Testing Exam
Questions And Answers 2025 Update.
What is the primary defense against log injection attacks? - Answer✔Sanitize outbound log
messages
An attacker exploits a cross-site scripting vulnerability. What is the attacker able to do? -
Answer✔Access the user's data
Which Python function is prone to a potential code injection attack? - Answer✔eval()
What are two common defensive coding techniques? - Answer✔Check functional preconditions
and postconditions
Which package is meant for internal use by Python for regression testing? - Answer✔test
Which Python function is used for input validation? - Answer✔type()
A security analyst has noticed a vulnerability in which an attacker took over multiple users'
accounts. Which vulnerability did the security analyst encounter? - Answer✔Broken access
control
When creating a new user, an administrator must submit the following fields to an API
endpoint:
Name
Email Address
Password
IsAdmin
What is the best way to ensure the API is protected against privilege escalation? -
Answer✔Implement resource and field-level access control
1
D385 Software Security and Testing Exam
Questions And Answers 2025 Update.
What is the primary defense against log injection attacks? - Answer✔Sanitize outbound log
messages
An attacker exploits a cross-site scripting vulnerability. What is the attacker able to do? -
Answer✔Access the user's data
Which Python function is prone to a potential code injection attack? - Answer✔eval()
What are two common defensive coding techniques? - Answer✔Check functional preconditions
and postconditions
Which package is meant for internal use by Python for regression testing? - Answer✔test
Which Python function is used for input validation? - Answer✔type()
A security analyst has noticed a vulnerability in which an attacker took over multiple users'
accounts. Which vulnerability did the security analyst encounter? - Answer✔Broken access
control
When creating a new user, an administrator must submit the following fields to an API
endpoint:
Name
Email Address
Password
IsAdmin
What is the best way to ensure the API is protected against privilege escalation? -
Answer✔Implement resource and field-level access control
1
