D385 - Software and Security Testing WGU
UPDATED ACTUAL Questions and
CORRECT Answers
Which Python function is prone to a potential code injection attack? - CORRECT
ANSWER - eval()
How do you prevent log injection? - CORRECT ANSWER - validate()
What are two common defensive coding techniques? - CORRECT ANSWER - Check
functional preconditions and postconditions
What is checking functional preconditions and post conditions best practice for? - CORRECT
ANSWER - Defensive Coding
What happens when an attacker exploits a cross-site scripting vulnerability? - CORRECT
ANSWER - Access to the User's data
A user masquerades as (or pretends to be) another user. What type of attack is this? - CORRECT
ANSWER - Cross-Site Scripting
Which method is used for a SQL injection attack? - CORRECT ANSWER - Exploiting
query parameters
What kind of attack does exploiting query parameters cause? - CORRECT ANSWER -
SQL Injection
What is returned when using response.content? - CORRECT ANSWER - The raw binary
content of the HTTP response is returned as bytes
UPDATED ACTUAL Questions and
CORRECT Answers
Which Python function is prone to a potential code injection attack? - CORRECT
ANSWER - eval()
How do you prevent log injection? - CORRECT ANSWER - validate()
What are two common defensive coding techniques? - CORRECT ANSWER - Check
functional preconditions and postconditions
What is checking functional preconditions and post conditions best practice for? - CORRECT
ANSWER - Defensive Coding
What happens when an attacker exploits a cross-site scripting vulnerability? - CORRECT
ANSWER - Access to the User's data
A user masquerades as (or pretends to be) another user. What type of attack is this? - CORRECT
ANSWER - Cross-Site Scripting
Which method is used for a SQL injection attack? - CORRECT ANSWER - Exploiting
query parameters
What kind of attack does exploiting query parameters cause? - CORRECT ANSWER -
SQL Injection
What is returned when using response.content? - CORRECT ANSWER - The raw binary
content of the HTTP response is returned as bytes