Defensive Design Principles Quiz

What is the primary goal of defensive design in programming?

• To make the user interface more attractive

• To prevent unauthorized access and misuse

• To make programs run faster

• To reduce the size of the code

Why is it important to set up usernames and passwords in a program?

• To track user activity

• To prevent unauthorized access

• To personalize user experience

• To increase the program's speed

What is an SQL injection attack?

• A technique to sanitize user inputs

• A process to validate user data

• A way to exploit vulnerabilities by inserting malicious SQL commands

• A method to speed up database queries

What is input sanitization?

• Converting all input to lowercase

• Removing special characters that should not be in the input

• Ensuring data is in the correct format

• Removing unnecessary spaces from user input

Why is input validation important?

• To make the program run faster

• To ensure data is in the expected format

• To reduce the size of the input

• To make the user interface more attractive

What can happen if input validation is not implemented?

• The program may use less memory

• The user interface may become more attractive

• The program may crash or behave unexpectedly

• The program may run faster

What is the purpose of verification in defensive design?

• To reduce the size of the code

• To ensure the program runs faster

• To make the user interface more attractive

• To check that users have entered what they intended

What is an example of verification in user input?

• Converting all input to lowercase

• Removing special characters from the input

• Ensuring the username contains only letters

• Checking that the password and its confirmation match

What is maintainable code?

• Code that has fewer lines

• Code that uses less memory

• Code that is easy to read, understand, and modify

• Code that runs faster

Which of the following is NOT a principle of defensive design?

• Increasing program speed

• Authentication

• Input Sanitization

• Input Validation