D385: FINAL EXAM AND ALL CORRECT
ANSWERS 2026-2027 UPDATED.
What is Defensive Programming? - Answer - assume mistakes will happen and guard against
them
- assertions are the most common way of doing this
- code checks itself as it runs
- always check, validate, and sanitize data
Which attribute provides a dictionary of breakpoint instances? - Answer - bplist
- maintains a (file, line) tuple of breakpoints
Which function can be used to return all set breakpoints? - Answer - get_all_breaks( )
- returns a string with all set breakpoints
Which 3 data types are considered user-provided? - Answer - cookies
- POST data payloads
- URL parameters
What are limitations of Static Code Analysis - Answer - does not account for runtime
vulnerabilities
- requires the tester to posses both testing and software development skills
- tools would have to be language specific
Advantage of Static Code Analysis? - Answer - fast turnaround time
- especially when tools are used
Advantage of Dynamic Code Analysis? - Answer - no need to understand how to write
software
- finds runtime vulnerabilities
- requires only a running system; conducted on any application
Limitations of Dynamic Code Analysis? - Answer - false positives and false negatives
- dependent on the correctness of the rules
- false sense of security
, - difficult to trace back to exact location
What kind of attacks does Client-side Testing look to prevent? - Answer - XSS
- SQLi
- CORS
- Clickjacking
- HTML injection
Secure Unit Testing - Answer - check for bad input
- bypass security
- inject bad data
How to hash with sha256 in Python? - Answer import hashlibsha256 =
hashlib.sha256()sha256.update(b'message')hash = sha256.hexdigest()
Examples of Block Ciphers? - Answer - Triple DES
- Blowfish
- Twofish
- AES
Examples of Stream Ciphers? - Answer - RC4
- ChaCha
TLS Handshake: 3 Tasks - Answer 1. cipher suite negotiation
2. key exchange
3. server authentication
Set-Cookie Response Header 5 Directives? - Answer - HttpOnly
- SameSite
- Secure
- Domain
- Max-Age
Secure Directive - Answer - prevents MITM
- ensures cookie transmitted over HTTPS
ANSWERS 2026-2027 UPDATED.
What is Defensive Programming? - Answer - assume mistakes will happen and guard against
them
- assertions are the most common way of doing this
- code checks itself as it runs
- always check, validate, and sanitize data
Which attribute provides a dictionary of breakpoint instances? - Answer - bplist
- maintains a (file, line) tuple of breakpoints
Which function can be used to return all set breakpoints? - Answer - get_all_breaks( )
- returns a string with all set breakpoints
Which 3 data types are considered user-provided? - Answer - cookies
- POST data payloads
- URL parameters
What are limitations of Static Code Analysis - Answer - does not account for runtime
vulnerabilities
- requires the tester to posses both testing and software development skills
- tools would have to be language specific
Advantage of Static Code Analysis? - Answer - fast turnaround time
- especially when tools are used
Advantage of Dynamic Code Analysis? - Answer - no need to understand how to write
software
- finds runtime vulnerabilities
- requires only a running system; conducted on any application
Limitations of Dynamic Code Analysis? - Answer - false positives and false negatives
- dependent on the correctness of the rules
- false sense of security
, - difficult to trace back to exact location
What kind of attacks does Client-side Testing look to prevent? - Answer - XSS
- SQLi
- CORS
- Clickjacking
- HTML injection
Secure Unit Testing - Answer - check for bad input
- bypass security
- inject bad data
How to hash with sha256 in Python? - Answer import hashlibsha256 =
hashlib.sha256()sha256.update(b'message')hash = sha256.hexdigest()
Examples of Block Ciphers? - Answer - Triple DES
- Blowfish
- Twofish
- AES
Examples of Stream Ciphers? - Answer - RC4
- ChaCha
TLS Handshake: 3 Tasks - Answer 1. cipher suite negotiation
2. key exchange
3. server authentication
Set-Cookie Response Header 5 Directives? - Answer - HttpOnly
- SameSite
- Secure
- Domain
- Max-Age
Secure Directive - Answer - prevents MITM
- ensures cookie transmitted over HTTPS
