CCT CCT Application Security & Secure Coding

Question 1

Which OWASP Top 10 vulnerability occurs when untrusted data is sent to an interpreter as part of a command or query?

Accepted Answer

Injection

Answer

Injection flaws, such as SQL injection, occur when untrusted data is sent to an interpreter as part of a command or query, allowing attackers to execute unintended commands.

Question 2

What is the primary purpose of input validation in secure application development?

Accepted Answer

Prevent malicious data from being processed

Answer

Input validation ensures that only properly formed data enters a system, preventing malicious input from causing vulnerabilities like injection attacks or buffer overflows.

Question 3

Which secure coding practice prevents Cross-Site Scripting (XSS) attacks?

Accepted Answer

Output encoding and input sanitization

Answer

Output encoding ensures that user-supplied data is treated as data rather than executable code, while input sanitization removes or neutralizes potentially malicious characters.

Question 4

What does a Content Security Policy (CSP) header primarily protect against?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

CSP is a browser security mechanism that restricts which resources can be loaded, significantly reducing the risk and impact of XSS attacks by whitelisting trusted content sources.

Question 5

In secure software development, what is the principle of 'least privilege' as applied to application accounts?

Accepted Answer

Applications should have only the minimum permissions needed to function

Answer

Least privilege limits an application's access rights to only what is necessary, reducing the potential damage if the application is compromised.

CCT - Certified Cybersecurity Technician Practice Test

CCT - Certified Cybersecurity Technician Practice Test

CCT CCT Application Security & Secure Coding