WGU D385 - Questions With Insightful Solutions
When should regression testing be conducted? Correct Answer - After
some code changes
Which software testing relies on using old test cases? Correct Answer -
regression testing
Which Security Development Lifecycle (SDL) phase implements static code
analysis? Correct Answer - Implementation
Which statements are true about assertions? Correct Answer - -conditional
or boolean expressions
-optional message
-used to check the types or values of arguments
What happens when an assertion condition result is false? Correct Answer -
The program will stop or give an error message
What is the general structure of an assertion statement? Correct Answer -
assert expression[, assertion_message]
Which three functions are valid logging functions? Correct Answer - -INFO
-GETCHILD
-ERROR
Which logging function should be used to indicate that some problem is likely
to occur in the future? Correct Answer - WARNING
Which test is solely black box testing? Correct Answer - integration testing
Which two techniques are defensive programming techniques? Correct
Answer - -value substitution
-exception handling
Which two classes does the bdb module implement? Correct Answer - -
Breakpoint
-Bdb
, Which attribute provides a dictionary of breakpoint instances? Correct
Answer - bplist
How many arguments does the clear_break() method take? Correct Answer
- two
Which function can be used to return all set breakpoints? Correct Answer -
get_all_breaks()
Which three data types are considered user-provided? (Choose 3 answers.)
Correct Answer - -Cookies
-POST data payloads
-URL parameters
Which function could be used to ensure a safe logging? Correct Answer -
isalnum()
What is the default numeric value for the logging level WARNING? Correct
Answer - 30
What is the default numeric value for the logging level INFO? Correct
Answer - 20
Which three QA security-specific test type categories must be performed on
software? Correct Answer - -Benchmark
-Scheduled
-Exploratory
Which phases are in the code review life cycle? Correct Answer - Identify
Security Code
Review Objectives
Perform Preliminary Scan
Review Code for Security Issues
What are three limitations of static code analysis? Correct Answer - Does
not account for runtime vulnerabilities
When should regression testing be conducted? Correct Answer - After
some code changes
Which software testing relies on using old test cases? Correct Answer -
regression testing
Which Security Development Lifecycle (SDL) phase implements static code
analysis? Correct Answer - Implementation
Which statements are true about assertions? Correct Answer - -conditional
or boolean expressions
-optional message
-used to check the types or values of arguments
What happens when an assertion condition result is false? Correct Answer -
The program will stop or give an error message
What is the general structure of an assertion statement? Correct Answer -
assert expression[, assertion_message]
Which three functions are valid logging functions? Correct Answer - -INFO
-GETCHILD
-ERROR
Which logging function should be used to indicate that some problem is likely
to occur in the future? Correct Answer - WARNING
Which test is solely black box testing? Correct Answer - integration testing
Which two techniques are defensive programming techniques? Correct
Answer - -value substitution
-exception handling
Which two classes does the bdb module implement? Correct Answer - -
Breakpoint
-Bdb
, Which attribute provides a dictionary of breakpoint instances? Correct
Answer - bplist
How many arguments does the clear_break() method take? Correct Answer
- two
Which function can be used to return all set breakpoints? Correct Answer -
get_all_breaks()
Which three data types are considered user-provided? (Choose 3 answers.)
Correct Answer - -Cookies
-POST data payloads
-URL parameters
Which function could be used to ensure a safe logging? Correct Answer -
isalnum()
What is the default numeric value for the logging level WARNING? Correct
Answer - 30
What is the default numeric value for the logging level INFO? Correct
Answer - 20
Which three QA security-specific test type categories must be performed on
software? Correct Answer - -Benchmark
-Scheduled
-Exploratory
Which phases are in the code review life cycle? Correct Answer - Identify
Security Code
Review Objectives
Perform Preliminary Scan
Review Code for Security Issues
What are three limitations of static code analysis? Correct Answer - Does
not account for runtime vulnerabilities
