Understanding Code Security Fundamentals

What is the primary goal of secure coding practices?

• To make code run faster

• To prevent security vulnerabilities

• To reduce the size of the code

• To improve code readability

Which of the following is a common cause of buffer overflow vulnerabilities?

• Using too many variables

• Incorrect use of loops

• Not validating input sizes

• Using global variables

What does SAST stand for in the context of code security?

• Static Application Security Testing

• Secure Application Software Testing

• Systematic Application Security Testing

• Software Application Security Testing

Which of the following is a characteristic of Dynamic Application Security Testing (DAST)?

• It analyses code without executing it

• It requires access to source code

• It tests applications in a running state

• It is only applicable to web applications

What is the main purpose of Software Composition Analysis (SCA)?

• To identify outdated software

• To detect open source components and their vulnerabilities

• To improve software performance

• To enhance user interface design

Which of the following is a secure coding practice?

• Hardcoding passwords in the source code

• Using prepared statements for database queries

• Disabling all security features for testing

• Ignoring compiler warnings

What is a buffer overflow attack?

• An attack that fills up the server's memory

• An attack that exploits a program's memory allocation

• An attack that targets network bandwidth

• An attack that corrupts database entries

Which tool is typically used for SAST?

• Burp Suite

• SonarQube

• Wireshark

• Metasploit

What is a key advantage of DAST over SAST?

• DAST is faster than SAST

• DAST can find runtime vulnerabilities

• DAST is cheaper than SAST

• DAST requires less expertise

Which of the following is NOT a benefit of using SCA tools?

• Identifying license compliance issues

• Detecting vulnerabilities in open source components

• Improving code execution speed

• Providing a bill of materials for software components