Desktop Application Desktop Application Security 1

Question 1

What type of attack injects malicious commands into a desktop application that passes user input to the operating system shell?

Accepted Answer

Command injection

Answer

Command injection occurs when an app passes unsanitized user input to OS shell commands, allowing attackers to execute arbitrary commands.

Question 2

What is the principle of 'least privilege' in desktop application security?

Accepted Answer

An application should request only the permissions it actually needs to function

Answer

Least privilege limits what an application can access or modify, reducing the damage if the application is compromised.

Question 3

What is a 'buffer overflow' vulnerability in a desktop application?

Accepted Answer

Writing more data to a memory buffer than it can hold, potentially allowing code execution

Answer

Buffer overflows occur when input data exceeds allocated memory, potentially overwriting adjacent memory and enabling arbitrary code execution.

Question 4

What does 'code signing' a desktop application accomplish?

Accepted Answer

It verifies the application's publisher identity and confirms the code hasn't been tampered with

Answer

Code signing uses a digital certificate to authenticate the publisher and ensure the installer hasn't been modified since signing.

Question 5

Which type of malware disguises itself as a legitimate desktop application to gain unauthorized access?

Accepted Answer

Trojan horse

Answer

A Trojan horse masquerades as a legitimate or useful application while secretly performing malicious actions in the background.

Desktop Application Practice Test