100% satisfaction guarantee Immediately available after payment Both online and in PDF No strings attached
logo-home
2024 D385 SOFTWARE SECURITY AND TESTING / WGU D385 SOFTWARE SECURITY AND TESTING REAL EXAM WITH ACTUAL EXAM QUESTIONS AND CORRECT DETAILED ANSWERS (VERIFIED ANSWERS) NEWEST UPDATED VERSION LATEST 2024 |ALREADY GRADED A+ (BRAND NEW!!) $17.99   Add to cart

Exam (elaborations)

2024 D385 SOFTWARE SECURITY AND TESTING / WGU D385 SOFTWARE SECURITY AND TESTING REAL EXAM WITH ACTUAL EXAM QUESTIONS AND CORRECT DETAILED ANSWERS (VERIFIED ANSWERS) NEWEST UPDATED VERSION LATEST 2024 |ALREADY GRADED A+ (BRAND NEW!!)

 0 view  0 purchase
  • Course
  • Institution
  • Book

2024 D385 SOFTWARE SECURITY AND TESTING / WGU D385 SOFTWARE SECURITY AND TESTING REAL EXAM WITH ACTUAL EXAM QUESTIONS AND CORRECT DETAILED ANSWERS (VERIFIED ANSWERS) NEWEST UPDATED VERSION LATEST 2024 |ALREADY GRADED A+ (BRAND NEW!!)

Preview 2 out of 7  pages

  • November 16, 2024
  • 7
  • 2024/2025
  • Exam (elaborations)
  • Questions & answers
avatar-seller
2024 D385 SOFTWARE SECURITY AND TESTING / WGU
D385 SOFTWARE SECURITY AND TESTING REAL EXAM
WITH ACTUAL EXAM QUESTIONS AND CORRECT
DETAILED ANSWERS (VERIFIED ANSWERS) NEWEST
UPDATED VERSION LATEST 2024 |ALREADY GRADED A+
(BRAND NEW!!)
Attack Surface - ANSWER: - the sum of all potential entry points

Common examples of attacks that take advantage of systems with insufficient input
validation? - ANSWER: - SQLi
- RCE
- host header attack
- denial of service

Defense in Depth - ANSWER: - each layer of security is dual-purpose
1) resists an attack
2) acts as a backup when other layers fail

Most common symmetric encryption algorithm? - ANSWER: - AES

Most common hashing algorithm? - ANSWER: - SHA-2

Resource sharing protocol for browsers? - ANSWER: - CORS
- Cross-origin resource sharing

CSP - ANSWER: - Content Sharing Policy
- browser-based attack mitigation standard

Security Fundamentals - ANSWER: - Data integrity: has the data changed
- Authentication: who are you?
- Data authentication: who created the data?
- Nonrepudiation: who did what?
- Authorization: what can you do?
- Confidentiality: who can access this?

Python's answer to cryptographic hashing? - ANSWER: - hashlib module

Secure random number generation? - ANSWER: - secrets module

Hash-based message authentication? - ANSWER: - hmac module

Function used to protect passwords? - ANSWER: - argon2-cffi

, Python package for common cryptographic functions? - ANSWER: - cryptography

A safer way to parse XML? - ANSWER: - defusedxml

Web server gateway interface written in Python? - ANSWER: - Gunicorn

Python package manager? - ANSWER: - pipenv

Easy-to-use HTTP library? - ANSWER: - requests

Client-side OAuth 2.0 implementation? - ANSWER: - requests-oauthlib

Django server-side implementation for CORS? - ANSWER: - django-cors-headers

Server-side implementation of CSP? - ANSWER: - django-csp

Server-side OAuth 2.0 implementation? - ANSWER: - DJango Oauth Toollkit

Django Registration Library? - ANSWER: - django-registration

What are the 4 subclasses of SQLi? - ANSWER: - in-band SQLi (classic)
- inferential/blind SQLi
- DBMS SQLi
- Compound SQLi (e.g. Strom Worn)

What is a hash function? - ANSWER: - every hash function has an input and an
output
- the INPUT is called a message
- the OUTPUT is a very large number called a hash value (aka hash, hash code, digest,
and message digest)
- hash values are typically represented as alphanumeric strings
- INPUT is variabled
- OUTPUT is fixed

What are the 3 basic properties of hash functions? - ANSWER: - deterministic
behavior
- fixed-length hash values
- avalanche effect

What is meant by Deterministic Behavior? - ANSWER: - for a given input, a hash
function always produces the same output
- hash function behavior is repeatable, not random

What is the Avalanche Effect? - ANSWER: - small differences between messages
results in large differences between hash values

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller knoowy96. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for $17.99. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

75323 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 14 years now

Start selling
$17.99
  • (0)
  Add to cart