Securing Source Code

What is input validation and why is it important?

• Input validation ensures that all user input is automatically accepted.

• Input validation is the process of collecting user data without checks.

• Input validation is only necessary for web applications.

• Input validation is the process of verifying user input to ensure it meets required criteria, crucial for preventing errors and security vulnerabilities.

Which of the following is a common method for input validation?

• Regular expressions

• User authentication

• Data encryption

• Input sanitization

What is the purpose of authentication mechanisms in software security?

• To verify the identity of users or systems and ensure authorized access to resources.

• To monitor user activity for compliance purposes.

• To encrypt sensitive data during transmission.

• To manage software updates and patches.

Name one widely used authentication method.

• Biometric authentication

• Password-based authentication

• Single sign-on authentication

• Two-factor authentication

What is the principle of least privilege in access control?

• Allowing users to modify their own permissions freely.

• Restricting access based on user age rather than job function.

• The principle of least privilege in access control is the practice of granting users only the permissions they need to perform their job functions.

• Granting all users full access to the system.

How can role-based access control enhance security?

• RBAC enhances security by increasing user privileges.

• RBAC is only useful for managing passwords.

• RBAC allows unrestricted access to all resources.

• RBAC limits access to resources based on user roles, enhancing security by preventing unauthorized access.

What are secure coding practices and why are they necessary?

• Secure coding practices are techniques to enhance user interface design.

• Secure coding practices are techniques to write code that prevents security vulnerabilities, essential for protecting applications from attacks.

• Secure coding practices are only necessary for large companies.

• Secure coding practices focus solely on improving code readability.

Give an example of a secure coding practice.

• Use hard-coded passwords in the code.

• Validate user input to prevent injection attacks.

• Ignore error messages during development.

• Disable all security features for better performance.

Why is error handling important in secure coding?

• Error handling is irrelevant in secure coding practices.

• Error handling is important in secure coding to prevent information leakage, ensure predictable application behavior, and mitigate security vulnerabilities.

• Error handling can slow down application performance.

• Error handling is only necessary for debugging purposes.

What is NOT a vulnerability found in the code?

• SQL injection

• Hardcoded credential

• OS command injection

• Insecure direct object reference