In secure coding, what is the primary purpose of input validation?

To log all user inputs for audit purposes

To ensure that all data entered by users is stored in encrypted form

To remove all special characters from user input automatically

To verify that user-supplied data meets expected criteria before it is processed

What is the purpose of secure coding standards and guidelines?

To provide a set of rules and best practices that help developers write secure code consistently

To replace the need for security testing tools

To guarantee that all code is free of vulnerabilities

An organization wants to ensure that all developers follow consistent secure coding practices. Which approach is most effective?

Use only a SAST tool and ignore manual code reviews.

Conduct a one-time training session and assume developers will remember the practices.

Rely on each developer's personal experience and best judgment.

Adopt a secure coding standard (e.g., OWASP ASVS) and enforce it through automated tools and peer reviews.

Which of the following is a common pitfall when implementing cryptography in code?

Hard-coding encryption keys in the source code

Using a well-established cryptographic library

Using a random initialization vector (IV) for encryption

Using HTTPS for data in transit

What is a key consideration when logging security-related events?

Storing logs in the same database as application data for convenience

Disabling logging in production to improve performance

Ensuring logs are protected from unauthorized access and tampering

Logging passwords and credit card numbers to aid in troubleshooting

EC-CouncilDevSecOps Essentials

Domain 5Objective 2

Integrating Secure Coding in the Code Stage DSE Practice Questions (Page 10)

Part of the Implementing DevSecOps Testing and Threat Modeling domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

12concepts

12 Concepts in This Objective

Secure Coding Fundamentals
Threat Modeling in Code Stage
Static Application Security Testing (SAST)
Code Review for Security
Secure Coding Standards and Guidelines
Input Validation and Output Encoding
Authentication and Authorization Controls
Error Handling and Logging Security
Cryptography in Code
Dependency and Supply Chain Security
Security Testing Integration in CI/CD
Remediation and Fixing Vulnerabilities

Questions 46–50

46foundation · easy
In secure coding, what is the primary purpose of input validation?
Select an answer first
47foundation · easy
What is the purpose of secure coding standards and guidelines?
Select an answer first
48application · medium
An organization wants to ensure that all developers follow consistent secure coding practices. Which approach is most effective?
Select an answer first
49foundation · easy
Which of the following is a common pitfall when implementing cryptography in code?
Select an answer first
50foundation · easy
What is a key consideration when logging security-related events?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.