CPP Security & Error Handling

Question 1

What is input validation and why is it critical for secure software?

Accepted Answer

Checking that user inputs match expected formats and ranges to prevent injection attacks and data corruption

Answer

Logging all user inputs to a database

Answer

Encrypting user inputs before storage

Answer

Limiting the length of variable names in code

Question 2

What is the principle of least privilege in security?

Accepted Answer

Giving users and programs only the minimum access rights needed to perform their tasks

Answer

Granting users all permissions by default

Answer

Requiring administrator approval for all operations

Answer

Restricting access to production databases

Question 3

What is SQL injection?

Accepted Answer

An attack where malicious SQL code is inserted into input fields to manipulate the database

Answer

Storing SQL queries in a database

Answer

A technique for optimizing SQL query performance

Answer

An error caused by missing database indexes

Question 4

What is a try-catch-finally block used for?

Accepted Answer

Handling exceptions gracefully: try runs the code, catch handles exceptions, finally always runs for cleanup

Answer

Repeating a block of code until no exception occurs

Answer

Catching compiler errors at runtime

Answer

Creating conditional logic based on error codes

Question 5

What is Cross-Site Scripting (XSS)?

Accepted Answer

An attack where malicious scripts are injected into web pages viewed by other users

Answer

Sending HTTP requests from one domain to another

Answer

A technique for optimizing JavaScript execution

Answer

Cross-browser compatibility testing

Question 6

What is defensive programming?

Accepted Answer

Writing code that anticipates and handles invalid inputs, unexpected states, and failures gracefully

Answer

Protecting code with software patents

Answer

Using defensive copies of all data structures

Answer

Encrypting all code before deployment