WGU D385 SOFTWARE SECURITY TESTING QUESTIONS WITH VERIFIED ANSWERS

WGU D385 | SOFTWARE SECURITY TESTING
|QUESTIONS WITH VERIFIED ANSWERS


Correct 34

Incorrect 00




1 of 34

Definition



- Internal Server Error
- your request wasn't expected and probably broke something on the
server side



Give this one a try later!



What can an attacker do with a log What is the primary defense against
injection attack log injection attacks?




An attacker exploits a cross-site
Status Code 500
scripting vulnerability.


Don't know?

, 2 of 34

Term


The user submits the following request to an API endpoint that
requires a header:
import requests url = 'https://api.github.com/invalid'
try: request_response = requests.get(url)
# If the response was successful, no Exception will be raised
request_response.raise_for_status() except Exception as err:
print(f'Other error occurred: {err}')
else: print('Success!')
Which response code will the user most likely be presented with?



Give this one a try later!



ok 403




bad request 404


Don't know?




3 of 34

Term



An attacker exploits a cross-site scripting vulnerability.



Give this one a try later!

, Execute a shell command or script Discover other user's credentials




Access the user's data Validate data for deserialization


Don't know?




4 of 34

Term



Which protocol caches a token after it has been acquired?



Give this one a try later!



SAML OAUTH




MSAL ACL


Don't know?




5 of 34

Term



Status Code 400



Give this one a try later!