POC Security & Access Management 2

Question 1

Which Python module provides the `getpass()` function to securely prompt for a password without echoing input?

Accepted Answer

getpass

Answer

The `getpass` module provides `getpass()` which prompts for a password without displaying characters on the terminal.

Question 2

What does the `secrets` module's `token_urlsafe(32)` generate?

Accepted Answer

A URL-safe base64-encoded random token of 32 bytes

Answer

`token_urlsafe(n)` generates a URL-safe base64-encoded string from `n` random bytes, suitable for session tokens and CSRF protection.

Question 3

When using Python's `ssl` module, what does `ssl.CERT_REQUIRED` enforce?

Accepted Answer

The server must present a certificate signed by a trusted CA

Answer

`ssl.CERT_REQUIRED` causes the SSL handshake to fail unless the peer presents a valid certificate signed by a trusted certificate authority.

Question 4

Which attack does parameterized SQL queries in Python's `sqlite3` module primarily prevent?

Accepted Answer

SQL injection

Answer

Parameterized queries separate SQL code from user-supplied data, preventing SQL injection by treating input as literal values rather than executable code.

Question 5

What is the purpose of `os.chmod(path, 0o600)` from a security standpoint?

Accepted Answer

Restricts file read/write to the owner only

Answer

Octal `0o600` sets read and write permissions for the owner only, ensuring sensitive files like private keys are not accessible to other users.

(POC) Python Online Certification Practice Test

(POC) Python Online Certification Practice Test

POC Security & Access Management 2