Objective 3.3 Protect Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is the purpose of input validation?

   • ATo log all user actions for auditing
   • BTo make the application run faster
   • CTo encrypt user input before storing it
   • DTo ensure that user input meets expected criteria before processing
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A developer is writing a SQL query that retrieves user data based on a username. The developer wants to prevent SQL injection by keeping the query structure fixed while allowing the username to change. Which approach should the developer use?

   • AConcatenate the username directly into the query string, such as 'SELECT * FROM users WHERE username = ' + username.
   • BUse a dynamic query that builds the SQL string at runtime based on the username length.
   • CEncode the username using URL encoding before inserting it into the query.
   • DUse a static query with a placeholder for the username, such as 'SELECT * FROM users WHERE username = ?'.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is dynamic software analysis?

   • ATesting a running application to find runtime vulnerabilities
   • BChecking code for syntax errors without running it
   • CAnalyzing network traffic for intrusions
   • DReviewing source code line by line
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   How do static queries help prevent SQL injection attacks?

   • ABy encoding user input in base64 before insertion
   • BBy allowing user input to be concatenated directly into the query
   • CBy keeping the query structure fixed and treating user input as data
   • DBy using dynamic SQL that changes based on user input
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which action is an example of input sanitization to prevent XSS?

   • AStoring input in a database without changes
   • BConverting input to uppercase
   • CRemoving all spaces from user input
   • DHTML-encoding special characters like < and >
   Reveal Solution Discussion Select an answer first