D385 WGU Exam Questions and
Answers 100% Pass
What is the primary defense against log injection attacks? - CORRECT ANSWER-
Sanitize outbound log messages
An attacker exploits a cross-site scripting vulnerability. What is the attacker able to
do? - CORRECT ANSWER-Access the user's data
Which Python function is prone to a potential code injection attack? - CORRECT
ANSWER-eval()
What are two common defensive coding techniques? - CORRECT ANSWER-
Check functional and preconditions and postconditions
Which package is meant for internal use by Python for regression testing? -
CORRECT ANSWER-test
A security analyst has noticed a vulnerability in which an attacker took over
multiple users' accounts. Which vulnerability did the security analyst encounter? -
CORRECT ANSWER-Broken access control
When creating a new user, an administrator must submit the following fields to an
API endpoint:
Answers 100% Pass
What is the primary defense against log injection attacks? - CORRECT ANSWER-
Sanitize outbound log messages
An attacker exploits a cross-site scripting vulnerability. What is the attacker able to
do? - CORRECT ANSWER-Access the user's data
Which Python function is prone to a potential code injection attack? - CORRECT
ANSWER-eval()
What are two common defensive coding techniques? - CORRECT ANSWER-
Check functional and preconditions and postconditions
Which package is meant for internal use by Python for regression testing? -
CORRECT ANSWER-test
A security analyst has noticed a vulnerability in which an attacker took over
multiple users' accounts. Which vulnerability did the security analyst encounter? -
CORRECT ANSWER-Broken access control
When creating a new user, an administrator must submit the following fields to an
API endpoint:
