App Security Engineer Secure Development Flashcards

What is the primary goal of secure software development?

Answer: To build applications resistant to security threats

The primary goal of secure software development is to build applications that are resistant to security threats and vulnerabilities.

Which secure coding practice helps prevent SQL injection attacks?

Answer: Using parameterized queries

Using parameterized queries prevents SQL injection by ensuring user input is treated as data, not executable code.

Why is input validation crucial in secure development?

Answer: To ensure only valid and expected data is processed

Input validation ensures that only properly formatted and expected data is processed, reducing risks like cross-site scripting (XSS) and buffer overflows.

What is the purpose of secure session management?

Answer: To protect user sessions from hijacking and unauthorized access

Secure session management ensures that user sessions are protected from hijacking, fixation, and other unauthorized access risks.

Which security principle promotes restricting user permissions based on necessity?

Answer: The principle of least privilege

The principle of least privilege ensures users and applications have only the permissions necessary for their functions, reducing security risks.

How does encryption enhance software security?

Answer: It converts sensitive data into an unreadable format

Encryption protects sensitive data by converting it into an unreadable format, ensuring only authorized users can access it.