Secure Coding Fundamentals Quiz

What is the primary purpose of input validation in secure coding?

• To improve the performance of the code

• To ensure that the input data is safe and expected

• To make the code easier to read

• To reduce the size of the code

Which of the following is a common technique for input validation?

• Using global variables

• Regular expressions

• Hardcoding values

• Using magic numbers

Why is it important to validate user input on both client-side and server-side?

• To double the security

• To ensure data integrity and security

• To make the application faster

• To reduce server load

Which of the following is a secure coding practice?

• Using default passwords

• Hardcoding sensitive information

• Implementing error handling

• Ignoring compiler warnings

What is the purpose of using parameterised queries in database operations?

• To increase the speed of database queries

• To prevent SQL injection attacks

• To simplify the database schema

• To reduce the number of database connections

Which of the following is NOT a secure coding practice?

• Validating all inputs

• Using encryption for sensitive data

• Logging sensitive information

• Keeping software up to date

What is the role of error messages in secure coding?

• To provide detailed system information to users

• To help developers debug the application

• To inform users of errors without revealing sensitive information

• To increase the complexity of the code

Which of the following is a benefit of using input sanitisation?

• It makes the code run faster

• It prevents cross-site scripting (XSS) attacks

• It reduces the size of the application

• It increases the number of features

What is a buffer overflow?

• A type of input validation technique

• A condition where a program writes more data to a buffer than it can hold

• A method to optimise memory usage

• A way to increase the speed of data processing

Which of the following is a good practice for handling exceptions in secure coding?

• Ignoring exceptions

• Logging exceptions with sensitive data

• Catching and handling exceptions appropriately

• Using exceptions to control program flow