Secure Coding Quiz I

What is the purpose of input validation?

• To ensure data is formatted and safe for processing

• To improve application performance

• To enhance user interface design

• To reduce development costs

Which technique helps prevent SQL injection attacks?

• Using plaintext queries

• Prepared statements and parameterized queries

• Disabling input validation

• Allowing direct database access

What does the principle of least privilege mean?

• Users have full access to all resources

• Users are given only the permissions necessary for their roles

• All users have the same access level

• Privileges are granted based on user requests

Which method is commonly used to protect sensitive data at rest?

• Storing data in plaintext

• Using strong encryption algorithms

• Backing up data regularly

• Disabling data access controls

What is a common consequence of poor error handling?

• Improved application performance

• Exposure of sensitive information

• Enhanced user experience

• Increased application availability

What is cross-site scripting (XSS)?

• An attack that targets SQL databases

• An attack that injects scripts into webpages viewed by users

• An attack that modifies server configurations

• An attack that affects email servers

Which practice is essential for secure session management?

• Using the same session ID for all users

• Regenerating session IDs after login

• Storing session IDs in URLs

• Allowing unlimited session duration

What is the purpose of hashing passwords?

• To make them easy to read

• To ensure they can be retrieved if lost

• To store them securely and irreversibly

• To encrypt them with a key

What is a buffer overflow?

• An error caused by too much data in a buffer

• A technique used to compress data

• A way to secure application data

• A method for data encryption

Which of the following is a secure way to manage API keys?

• Hardcoding them in the source code

• Storing them in a secure vault

• Exposing them in public repositories

• Sharing them via email