WGU D385 Software Security Testing - Questions With
Expert Solutions
Which is best for input validation? Correct Answer - type()
Which Python function is prone to a potential code injection attack? Correct
Answer - eval()
prevent log injection Correct Answer - validate()
What are two common defensive coding techniques? Correct Answer -
Check functional and preconditions and postconditions
Checking functional and preconditions and postconditions is best practice for?
Correct Answer - Defensive Coding
An attacker exploits a cross-site scripting vulnerability Correct Answer -
Access User's data
A user masquerades as other users, what type of attack was used? Correct
Answer - Cross Site Scripting
Which method is used for a SQL injection attack? Correct Answer -
Exploiting query parameters
Exploiting query parameters causes what attack? Correct Answer - SQL
injection
What is returned when using response.content Correct Answer - returns
the raw binary content of the HTTP response as bytes.
Which response method, when sent a request, returns information about the
server's response and is delivered back to the console? Correct Answer -
response.content
What can an attacker do with a log injection attack Correct Answer -
Injection of commands a parser can execute
Expert Solutions
Which is best for input validation? Correct Answer - type()
Which Python function is prone to a potential code injection attack? Correct
Answer - eval()
prevent log injection Correct Answer - validate()
What are two common defensive coding techniques? Correct Answer -
Check functional and preconditions and postconditions
Checking functional and preconditions and postconditions is best practice for?
Correct Answer - Defensive Coding
An attacker exploits a cross-site scripting vulnerability Correct Answer -
Access User's data
A user masquerades as other users, what type of attack was used? Correct
Answer - Cross Site Scripting
Which method is used for a SQL injection attack? Correct Answer -
Exploiting query parameters
Exploiting query parameters causes what attack? Correct Answer - SQL
injection
What is returned when using response.content Correct Answer - returns
the raw binary content of the HTTP response as bytes.
Which response method, when sent a request, returns information about the
server's response and is delivered back to the console? Correct Answer -
response.content
What can an attacker do with a log injection attack Correct Answer -
Injection of commands a parser can execute
