SDL Security Testing & Code Analysis 2

Question 1

Which technique involves providing malformed or unexpected input to an application to discover security vulnerabilities?

Accepted Answer

Fuzzing

Answer

Fuzzing (fuzz testing) automatically supplies invalid, unexpected, or random data as input to a program to find crashes or security bugs.

Question 2

In SDL, what is the primary goal of attack surface analysis?

Accepted Answer

Identify and reduce the number of exploitable entry points

Answer

Attack surface analysis identifies all possible entry points an attacker could use, enabling teams to minimize and harden those areas.

Question 3

A security engineer finds that a web application concatenates user input directly into SQL queries. Which SAST finding category best describes this?

Accepted Answer

SQL injection sink

Answer

SAST tools classify direct concatenation of untrusted input into SQL statements as an SQL injection sink, indicating a data-flow vulnerability.

Question 4

Which SDL activity specifically validates that security controls implemented during development are functioning correctly in a running environment?

Accepted Answer

Dynamic analysis (DAST)

Answer

Dynamic Application Security Testing (DAST) exercises a running application to verify that runtime security controls behave as expected.

Question 5

What does 'taint analysis' track in static code analysis tools?

Accepted Answer

Flow of untrusted data from sources to sensitive sinks

Answer

Taint analysis follows untrusted (tainted) data from user-controlled inputs through the code to security-sensitive operations (sinks) to detect injection flaws.

(SDL) Security Development Lifecycle Certification Practice Test

(SDL) Security Development Lifecycle Certification Practice Test

SDL Security Testing & Code Analysis 2