C836 WGU COMPLETE
240+ (Latest 2025-2026 Edition) 100%
Verified Q&A + Answer Key Solutions
100% Guarantee Pass
✓ This Exam contains: C836 WGU COMPLETE
✓ 100% Accurate Questions and Answers
✓ 100% Guarantee Pass - Verified by Experts
✓ Each Question Includes The Correct Answer
✓ Expert-Verified
Trusted by thousands of students and professionals worldwide Page 1 of 36
,Question 1
bounds checking
Correct Answer
to set a limit on the amount of data we expect to receive to set aside storage for that data
*required in most programming languages
* prevents buffer overflows
Question 2
race conditions
Correct Answer
A type of software development vulnerability that occurs when multiple processes or multiple threads within a
process control or share access to a particular resource, and the correct handling of that resource depends on the
proper ordering or timing of transactions
Question 3
input validation
Correct Answer
a type of attack that can occur when we fail to validate the input to our applications or take steps to filter out
unexpected or undesirable content
Question 4
format string attack
Correct Answer
a type of input validation attacks in which certain print functions within a programming language can be used to
manipulate or view the internal memory of an application
Question 5
authentication attack
Correct Answer
A type of attack that can occur when we fail to use strong authentication mechanisms for our applications
Question 6
authorization attack
Correct Answer
A type of attack that can occur when we fail to use authorization best practices for our applications
Question 7
cryptographic attack
Correct Answer
A type of attack that can occur when we fail to properly design our security mechanisms when implementing
cryptographic controls in our applications
Trusted by thousands of students and professionals worldwide Page 2 of 36
,Question 8
client-side attack
Correct Answer
A type of attack that takes advantage of weaknesses in the software loaded on client machines or one that uses
social engineering techniques to trick us into going along with the attack
Question 9
XSS (Cross Site Scripting)
Correct Answer
an attack carried out by placing code in the form of a scripting language into a web page or other media that is
interpreted by a client browser
Question 10
XSRF (cross-site request forgery)
Correct Answer
an attack in which the attacker places a link on a web page in such a way that it will be automatically executed to
initiate a particular activity on another web page or application where the user is currently authenticated
Question 11
clickjacking
Correct Answer
An attack that takes advantage of the graphical display capabilities of our browser to trick us into clicking on
something we might not otherwise
Question 12
server-side attack
Correct Answer
A type of attack on the web server that can target vulnerabilities such as lack of input validation, improper or
inadequate permissions, or extraneous files left on the server from the development process
Question 13
Protocol issues, unauthenticated access, arbitrary code execution, and privilege escalation
Correct Answer
Name the 4 main categories of database security issues
Trusted by thousands of students and professionals worldwide Page 3 of 36
, Question 14
web application analysis tool
Correct Answer
A type of tool that analyzes web pages or web-based applications and searches for common flaws such as XSS or
SQL injection flaws, and improperly set permissions, extraneous files, outdated software versions, and many more
such items
Question 15
protocol issues
Correct Answer
unauthenticated flaws in network protocols, authenticated flaws in network protocols, flaws in authentication
protocols
Question 16
arbitrary code execution
Correct Answer
An attack that exploits an applications vulnerability into allowing the attacker to execute commands on a user's
computer.
* arbitrary code execution in intrinsic or securable SQL elements
Question 17
Privilege Escalation
Correct Answer
An attack that exploits a vulnerability in software to gain access to resources that the user normally would be
restricted from accessing.
* via SQL injection or local issues
Question 18
validating user inputs
Correct Answer
a security best practice for all software
* the most effective way of mitigating SQL injection attacks
Question 19
Nikto (and Wikto)
Correct Answer
A web server analysis tool that performs checks for many common server-side vulnerabilities & creates an index of
all the files and directories it can see on the target web server (a process known as spidering)
Trusted by thousands of students and professionals worldwide Page 4 of 36
240+ (Latest 2025-2026 Edition) 100%
Verified Q&A + Answer Key Solutions
100% Guarantee Pass
✓ This Exam contains: C836 WGU COMPLETE
✓ 100% Accurate Questions and Answers
✓ 100% Guarantee Pass - Verified by Experts
✓ Each Question Includes The Correct Answer
✓ Expert-Verified
Trusted by thousands of students and professionals worldwide Page 1 of 36
,Question 1
bounds checking
Correct Answer
to set a limit on the amount of data we expect to receive to set aside storage for that data
*required in most programming languages
* prevents buffer overflows
Question 2
race conditions
Correct Answer
A type of software development vulnerability that occurs when multiple processes or multiple threads within a
process control or share access to a particular resource, and the correct handling of that resource depends on the
proper ordering or timing of transactions
Question 3
input validation
Correct Answer
a type of attack that can occur when we fail to validate the input to our applications or take steps to filter out
unexpected or undesirable content
Question 4
format string attack
Correct Answer
a type of input validation attacks in which certain print functions within a programming language can be used to
manipulate or view the internal memory of an application
Question 5
authentication attack
Correct Answer
A type of attack that can occur when we fail to use strong authentication mechanisms for our applications
Question 6
authorization attack
Correct Answer
A type of attack that can occur when we fail to use authorization best practices for our applications
Question 7
cryptographic attack
Correct Answer
A type of attack that can occur when we fail to properly design our security mechanisms when implementing
cryptographic controls in our applications
Trusted by thousands of students and professionals worldwide Page 2 of 36
,Question 8
client-side attack
Correct Answer
A type of attack that takes advantage of weaknesses in the software loaded on client machines or one that uses
social engineering techniques to trick us into going along with the attack
Question 9
XSS (Cross Site Scripting)
Correct Answer
an attack carried out by placing code in the form of a scripting language into a web page or other media that is
interpreted by a client browser
Question 10
XSRF (cross-site request forgery)
Correct Answer
an attack in which the attacker places a link on a web page in such a way that it will be automatically executed to
initiate a particular activity on another web page or application where the user is currently authenticated
Question 11
clickjacking
Correct Answer
An attack that takes advantage of the graphical display capabilities of our browser to trick us into clicking on
something we might not otherwise
Question 12
server-side attack
Correct Answer
A type of attack on the web server that can target vulnerabilities such as lack of input validation, improper or
inadequate permissions, or extraneous files left on the server from the development process
Question 13
Protocol issues, unauthenticated access, arbitrary code execution, and privilege escalation
Correct Answer
Name the 4 main categories of database security issues
Trusted by thousands of students and professionals worldwide Page 3 of 36
, Question 14
web application analysis tool
Correct Answer
A type of tool that analyzes web pages or web-based applications and searches for common flaws such as XSS or
SQL injection flaws, and improperly set permissions, extraneous files, outdated software versions, and many more
such items
Question 15
protocol issues
Correct Answer
unauthenticated flaws in network protocols, authenticated flaws in network protocols, flaws in authentication
protocols
Question 16
arbitrary code execution
Correct Answer
An attack that exploits an applications vulnerability into allowing the attacker to execute commands on a user's
computer.
* arbitrary code execution in intrinsic or securable SQL elements
Question 17
Privilege Escalation
Correct Answer
An attack that exploits a vulnerability in software to gain access to resources that the user normally would be
restricted from accessing.
* via SQL injection or local issues
Question 18
validating user inputs
Correct Answer
a security best practice for all software
* the most effective way of mitigating SQL injection attacks
Question 19
Nikto (and Wikto)
Correct Answer
A web server analysis tool that performs checks for many common server-side vulnerabilities & creates an index of
all the files and directories it can see on the target web server (a process known as spidering)
Trusted by thousands of students and professionals worldwide Page 4 of 36
