D385 - Software and Security Testing WGU

D385 - Software and Security Testing WGU Leave the first rating Students also studied Terms in this set (32) Science Computer Science Computer Security and Reliability Save D385 Software Security and Testing...69 terms sdelbonPreview D385 Pre-Assessment (All Correct) 39 terms Cydo_EntisPreview

D385: Pre-Assessment Questions

16 terms kaminosecurity Preview Softwa 19 terms Dal Practice questions for this set Learn1 / 7Study using Learn Status Code 404 Which Python function is prone to a potential code injection attack?eval() How do you prevent log injection?validate() What are two common defensive coding techniques? Check functional preconditions and postconditions Choose an answer 1Found 102Not found 3OK4Defensive Coding Don't know?

What is checking functional preconditions and post conditions best practice for?Defensive Coding What happens when an attacker exploits a cross-site scripting vulnerability?Access to the User's data A user masquerades as (or pretends to be) another user.What type of attack is this?Cross-Site Scripting Which method is used for a SQL injection attack? Exploiting query parameters What kind of attack does exploiting query parameters cause?SQL Injection What is returned when using response.content? The raw binary content of the HTTP response is returned as bytes Which response method, when sent a request, returns information about the server's response and is delivered back to the console?Response.content What can an attacker do with a log injection attack? Inject commands a parser can execute What is the primary defense against log injection attacks? Sanitize outbound log messages Which package is meant for internal use by Python for regression testing?Test Which software testing relies on using old test cases? Regression testing When should regression testing be conducted? After some code changed What does Cross-Origin-Resource-Sharing (CORS) allow users to do?Override same starting policy for specific resources The access control allow origin client sends a request to the server (www.client.url).What does the server send back?ACAO client.url (Access Control Allow Origin) Which protocol caches a token after it has been acquired?

MSAL Status Code 200OK Status Code 201Created Status Code 400Bad Request Status Code 401Unauthorized

Status Code 404Not found Status Code 405Method Not Allowed Status Code 500Internal Server Error 200 OKYour request was successful 201 CreatedYour request was accepted, and the resource was created.400 Bad RequestYour request was either wrong or missing some information 401 UnauthorizedYour request requires some additional permissions.404 Not FoundThe requested resource doesn't exist.405 Method Not AllowedThe endpoint doesn't allow for that specific HTTP method.500 Internal Server ErrorYour request wasn't expected and probably broke something on the server side.