SDL Security Testing & Code Analysis 3

Question 1

Which type of fuzzer generates test cases by mutating known valid inputs rather than building inputs from a grammar?

Accepted Answer

Mutation-based fuzzer

Answer

Mutation-based fuzzers take valid seed inputs and apply random or heuristic mutations to create test cases, making them easy to set up for unknown formats.

Question 2

In the context of SDL code review, what is a 'false positive'?

Accepted Answer

A reported issue that is not actually a vulnerability

Answer

A false positive is a finding flagged by an analysis tool that, upon investigation, does not represent a real security vulnerability.

Question 3

Which tool category is best suited for finding security vulnerabilities in third-party libraries included in a project?

Accepted Answer

Software Composition Analysis (SCA)

Answer

Software Composition Analysis (SCA) tools inventory open-source and third-party dependencies and check them against known vulnerability databases like the NVD.

Question 4

What is the purpose of a 'security unit test' in SDL?

Accepted Answer

Verify that a specific security control or mitigation behaves correctly in isolation

Answer

Security unit tests verify that individual security controls—such as input validation or output encoding—function correctly, enabling early detection of regressions.

Question 5

A developer uses 'printf(userInput)' without a format string argument in C. Which vulnerability does this introduce?

Accepted Answer

Format string vulnerability

Answer

Passing user-controlled input directly as the format string argument to printf allows attackers to read or write memory using format specifiers like %x or %n.

(SDL) Security Development Lifecycle Certification Practice Test

(SDL) Security Development Lifecycle Certification Practice Test

SDL Security Testing & Code Analysis 3