Which secure coding practice is most effective in preventing SQL injection vulnerabilities?

Encoding all output before sending to the client

Using parameterized queries or prepared statements

Using stored procedures exclusively

Disabling error messages in production

Which of the following is a recommended practice for secure session management?

Using predictable session IDs to simplify debugging

Transmitting session IDs in URLs for easy tracking

Keeping sessions active indefinitely for user convenience

Setting a reasonable session timeout to expire inactive sessions

A developer is storing user passwords in a database. The application only needs to verify the password at login, not recover it. Which method should the developer use to store the passwords?

Store the passwords in plain text for simplicity.

Encrypt the passwords with AES and store the key in the application code.

Use a strong, salted one-way hash such as bcrypt.

Use MD5 without a salt for fast hashing.

What is the primary purpose of hashing a password before storing it in a database?

To ensure that the stored password is not readable if the database is compromised

To encrypt the password so it can be decrypted later

To reduce the storage space required for passwords

To allow the password to be recovered if forgotten

A developer is building a web application that allows users to post comments. The comments are stored in a database and later displayed on a public page. The developer wants to prevent stored XSS attacks. Which approach should the developer implement?

Remove all non-alphanumeric characters from the comment before storing it.

Use a WAF to block requests that contain script tags in the comment body.

Encode all user-supplied comments when displaying them on the page.

Store the comments as base64-encoded text and decode them when displaying.

LPI Security Essentials

Domain 3Objective 2

023.2 Application Security (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 2)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

10concepts

Questions 6–10

6foundation · easy
Which secure coding practice is most effective in preventing SQL injection vulnerabilities?
Select an answer first
7foundation · easy
Which of the following is a recommended practice for secure session management?
Select an answer first
8application · medium
A developer is storing user passwords in a database. The application only needs to verify the password at login, not recover it. Which method should the developer use to store the passwords?
Select an answer first
9foundation · easy
What is the primary purpose of hashing a password before storing it in a database?
Select an answer first
10application · medium
A developer is building a web application that allows users to post comments. The comments are stored in a database and later displayed on a public page. The developer wants to prevent stored XSS attacks. Which approach should the developer implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.