Desktop Application Desktop Application Security 2

Question 1

What is 'sandboxing' in the context of desktop application security?

Accepted Answer

Running an application in an isolated environment that restricts its access to system resources

Answer

Sandboxing isolates an application so it cannot access files, network resources, or processes outside its designated area.

Question 2

Which Windows security feature prevents unauthorized changes to the operating system by requiring elevation prompts?

Accepted Answer

User Account Control (UAC)

Answer

UAC requires explicit administrator approval before allowing applications to make system-wide changes, limiting malware damage.

Question 3

What is a 'zero-day vulnerability' in a desktop application?

Accepted Answer

A security flaw that is exploited before the developer has released a patch

Answer

Zero-day vulnerabilities are unknown to the vendor, so attackers can exploit them with no patch available to defend against them.

Question 4

What is 'DLL hijacking' in desktop application security?

Accepted Answer

Placing a malicious DLL in a location where it loads before the legitimate one

Answer

DLL hijacking tricks an application into loading a malicious DLL instead of the legitimate one by exploiting path search order.

Question 5

What is the recommended way to store API keys or passwords within a desktop application on Windows?

Accepted Answer

Windows Credential Manager or encrypted secure storage

Answer

Windows Credential Manager provides secure, encrypted storage for credentials that applications can access safely.

Desktop Application Practice Test