D385 WGU UPDATED ACTUAL
Questions and CORRECT Answers
What is the primary defense against log injection attacks? - CORRECT ANSWER -
Sanitize outbound log messages
An attacker exploits a cross-site scripting vulnerability. What is the attacker able to do? -
CORRECT ANSWER - Access the user's data
Which Python function is prone to a potential code injection attack? - CORRECT
ANSWER - eval()
What are two common defensive coding techniques? - CORRECT ANSWER - Check
functional and preconditions and postconditions
Which package is meant for internal use by Python for regression testing? - CORRECT
ANSWER - test
A security analyst has noticed a vulnerability in which an attacker took over multiple users'
accounts. Which vulnerability did the security analyst encounter? - CORRECT
ANSWER - Broken access control
When creating a new user, an administrator must submit the following fields to an API endpoint:
Name
Email Address
Password
IsAdmin
Questions and CORRECT Answers
What is the primary defense against log injection attacks? - CORRECT ANSWER -
Sanitize outbound log messages
An attacker exploits a cross-site scripting vulnerability. What is the attacker able to do? -
CORRECT ANSWER - Access the user's data
Which Python function is prone to a potential code injection attack? - CORRECT
ANSWER - eval()
What are two common defensive coding techniques? - CORRECT ANSWER - Check
functional and preconditions and postconditions
Which package is meant for internal use by Python for regression testing? - CORRECT
ANSWER - test
A security analyst has noticed a vulnerability in which an attacker took over multiple users'
accounts. Which vulnerability did the security analyst encounter? - CORRECT
ANSWER - Broken access control
When creating a new user, an administrator must submit the following fields to an API endpoint:
Name
Email Address
Password
IsAdmin
