WGU D385 Pre-Assessment Questions/ (Top 2024/2025 EXAM REVIEW PAPERS / GRADED A+/ 100% Accurate)

WGU D385 Pre-Assessment Questions What is the primary defense against log injection attacks? - do not use parameterized stored procedures in the database - allow all users to write to these logs - sanitize outbound log messages - use API calls to log actions - - sanitize outbound log messages An attacker exploits a cross-site scripting vulnerability. What is the attacker able to do? - execute a shell command or script - access the user's data - discover other users' credentials - gain access to sensitive files on the server - - execute a shell command or script Which Python function is prone to a potential code injection attack? - type - eval - print - append - - eval Which package is meant for internal use by Python for regression testing? - regress test - doctest - assert - test - - test What are two common defensive coding techniques? - encrypt passwords and email submissions - check functional preconditions and postconditions - adjust length and encoding of messages - develop code with exceptions to find errors - - develop code with exceptions to find errors A security analyst is reviewing code for improper input validation. Which type of input validation does this code show? isValidNumber = False while not isValidNumber: try: pickedNumber = int(input('Pick a number from 1 to 10')) if pickedNumber = 1 and pickedNumber = 10: isValidNumber = True except: print('You must enter a valid number from 1 to 10') print('You picked the number ' + str(pickedNumber)) - - type and range check Consider the following penetration test: import requests urls = open("", "r"