What is a common technique to prevent session fixation attacks?

Accepting session IDs from URL parameters

Regenerating the session ID after successful login

Storing session data in a cookie on the client side

What does the principle of least privilege state regarding user permissions?

Users should have all permissions by default and have them removed only when necessary

Users should have the minimum level of access necessary to perform their job functions

Permissions should be based on the user's seniority in the organization

Administrators should have the same permissions as regular users

What is a common secure coding practice to prevent buffer overflow vulnerabilities?

Increasing the size of all buffers to a fixed large value

Using global variables for all data

Using functions that check buffer boundaries, such as strncpy instead of strcpy

What is the primary purpose of output encoding in a web application?

To ensure that user-supplied data is treated as data, not executable code, when rendered in a browser

To encrypt data before sending it over the network

To validate that data meets expected format requirements

To compress data to reduce bandwidth usage

What is the primary role of a web application firewall (WAF)?

To scan the application's source code for vulnerabilities

To encrypt all data stored in the application's database

To manage user authentication and authorization

To filter and monitor HTTP traffic between a web application and the internet

LPI Security Essentials

Domain 3Objective 2

023.2 Application Security (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 5)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

10concepts

Questions 21–25

21foundation · easy
What is a common technique to prevent session fixation attacks?
Select an answer first
22foundation · easy
What does the principle of least privilege state regarding user permissions?
Select an answer first
23foundation · easy
What is a common secure coding practice to prevent buffer overflow vulnerabilities?
Select an answer first
24foundation · easy
What is the primary purpose of output encoding in a web application?
Select an answer first
25foundation · easy
What is the primary role of a web application firewall (WAF)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.