WGU D385: FINAL QUESTIONS AND

WGU D385: FINAL QUESTIONS AND

ANSWERS VERIFIED 100% CORRECT!!

What is Defensive Programming? Answer- - assume mistakes will happen and guard against them

• assertions are the most common way of doing this
• code checks itself as it runs
• always check, validate, and sanitize data

Which attribute provides a dictionary of breakpoint instances? Answer- - bplist

• maintains a (file, line) tuple of breakpoints

Which function can be used to return all set breakpoints? Answer- - get_all_breaks( )

• returns a string with all set breakpoints

Which 3 data types are considered user-provided? Answer- - cookies

• POST data payloads
• URL parameters

What are limitations of Static Code Analysis Answer- - does not account for runtime vulnerabilities

• requires the tester to posses both testing and software development skills
• tools would have to be language specific

Advantage of Static Code Analysis? Answer- - fast turnaround time

• especially when tools are used

Advantage of Dynamic Code Analysis? Answer- - no need to understand how to write software

• finds runtime vulnerabilities
• requires only a running system; conducted on any application

Limitations of Dynamic Code Analysis? Answer- - false positives and false negatives

• dependent on the correctness of the rules
• false sense of security
• difficult to trace back to exact location

What kind of attacks does Client-side Testing look to prevent? Answer- - XSS

• SQLi

- CORS

• Clickjacking
• HTML injection

Secure Unit Testing Answer- - check for bad input

• / 1