WGU D385 | SOFTWARE SECURITY TESTING
|QUESTIONS WITH VERIFIED ANSWERS
Correct 34
Incorrect 00
1 of 34
Definition
- Internal Server Error
- your request wasn't expected and probably broke something on the
server side
Give this one a try later!
What can an attacker do with a log What is the primary defense against
injection attack log injection attacks?
An attacker exploits a cross-site
Status Code 500
scripting vulnerability.
Don't know?
, 2 of 34
Term
The user submits the following request to an API endpoint that
requires a header:
import requests url = 'https://api.github.com/invalid'
try: request_response = requests.get(url)
# If the response was successful, no Exception will be raised
request_response.raise_for_status() except Exception as err:
print(f'Other error occurred: {err}')
else: print('Success!')
Which response code will the user most likely be presented with?
Give this one a try later!
ok 403
bad request 404
Don't know?
3 of 34
Term
An attacker exploits a cross-site scripting vulnerability.
Give this one a try later!
, Execute a shell command or script Discover other user's credentials
Access the user's data Validate data for deserialization
Don't know?
4 of 34
Term
Which protocol caches a token after it has been acquired?
Give this one a try later!
SAML OAUTH
MSAL ACL
Don't know?
5 of 34
Term
Status Code 400
Give this one a try later!
|QUESTIONS WITH VERIFIED ANSWERS
Correct 34
Incorrect 00
1 of 34
Definition
- Internal Server Error
- your request wasn't expected and probably broke something on the
server side
Give this one a try later!
What can an attacker do with a log What is the primary defense against
injection attack log injection attacks?
An attacker exploits a cross-site
Status Code 500
scripting vulnerability.
Don't know?
, 2 of 34
Term
The user submits the following request to an API endpoint that
requires a header:
import requests url = 'https://api.github.com/invalid'
try: request_response = requests.get(url)
# If the response was successful, no Exception will be raised
request_response.raise_for_status() except Exception as err:
print(f'Other error occurred: {err}')
else: print('Success!')
Which response code will the user most likely be presented with?
Give this one a try later!
ok 403
bad request 404
Don't know?
3 of 34
Term
An attacker exploits a cross-site scripting vulnerability.
Give this one a try later!
, Execute a shell command or script Discover other user's credentials
Access the user's data Validate data for deserialization
Don't know?
4 of 34
Term
Which protocol caches a token after it has been acquired?
Give this one a try later!
SAML OAUTH
MSAL ACL
Don't know?
5 of 34
Term
Status Code 400
Give this one a try later!
