Support Testing and Security GH-300 Practice Questions (Page 5)

Questions 21–23

1. 21expert · hard

   A developer is reviewing a function that authenticates users by comparing a submitted password to a stored hash. The function uses a fast hashing algorithm like MD5. The developer asks Copilot for security improvements. The application must remain compatible with existing stored hashes. What is the most appropriate recommendation?

   • AUse MD5 with a unique salt per user
   • BStore passwords in plain text for simplicity
   • CMigrate to a slow, salted hashing algorithm like bcrypt and rehash passwords on next login
   • DAdd a static salt to the MD5 hash
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A developer is reviewing a function that handles user input and renders it in an HTML page. The function currently uses innerHTML to insert the input directly into the DOM. The developer asks Copilot for security and performance improvements. What is the most appropriate recommendation?

   • AUse textContent instead of innerHTML to prevent XSS, and batch DOM updates to reduce reflows
   • BUse textContent but update the DOM in a loop for each input
   • CUse innerHTML but sanitize the input with a library
   • DUse innerHTML but escape HTML entities in the input
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   In a unit test, what is the purpose of an assertion?

   • ATo mock external dependencies
   • BTo measure code coverage
   • CTo define the test's input data
   • DTo verify that the actual output matches the expected output
   Reveal Solution Discussion Select an answer first