MCQ Collection
Secure Software Design and Development MCQs
Practice Secure Software Design and Development questions with answers and explanations.
Choose an option to check your answer.
Correct Answer: A. writing more data into a buffer than it can hold, corrupting adjacent memory
Explanation:
The correct answer is writing more data into a buffer than it can hold, corrupting adjacent memory.
Choose an option to check your answer.
Correct Answer: B. using crafted paths like ../ to access files outside intended directories
Explanation:
The correct answer is using crafted paths like ../ to access files outside intended directories.
Choose an option to check your answer.
Correct Answer: C. deciding what an authenticated identity is allowed to access
Explanation:
The correct answer is deciding what an authenticated identity is allowed to access.
Choose an option to check your answer.
Correct Answer: B. using attacker-controlled input as a format string, exposing or modifying memory
Explanation:
The correct answer is using attacker-controlled input as a format string, exposing or modifying memory.
Choose an option to check your answer.
Correct Answer: C. using crafted paths like ../ to access files outside intended directories
Explanation:
The correct answer is using crafted paths like ../ to access files outside intended directories.
Choose an option to check your answer.
Correct Answer: A. enforcing permissions on resources and actions
Explanation:
The correct answer is enforcing permissions on resources and actions.
Choose an option to check your answer.
Correct Answer: A. using attacker-controlled input as a format string, exposing or modifying memory
Explanation:
The correct answer is using attacker-controlled input as a format string, exposing or modifying memory.
Choose an option to check your answer.
Correct Answer: B. using crafted paths like ../ to access files outside intended directories
Explanation:
The correct answer is using crafted paths like ../ to access files outside intended directories.
Choose an option to check your answer.
Correct Answer: A. a structured approach such as agile, waterfall or iterative development
Explanation:
The correct answer is a structured approach such as agile, waterfall or iterative development.
Choose an option to check your answer.
Correct Answer: B. SQL execution method that separates code from data to reduce SQL injection risk
Explanation:
The correct answer is SQL execution method that separates code from data to reduce SQL injection risk.
Choose an option to check your answer.
Correct Answer: A. cookies protected with flags such as HttpOnly, Secure and SameSite
Explanation:
The correct answer is cookies protected with flags such as HttpOnly, Secure and SameSite.
Choose an option to check your answer.
Correct Answer: B. a structured approach such as agile, waterfall or iterative development
Explanation:
The correct answer is a structured approach such as agile, waterfall or iterative development.
