Secure Coding Practices (Security+) College Quiz

1. Which of the following is a secure way to handle API keys?

Store them in version control systems

Use environment variables or secure vaults

Hardcode them in source code

Store them in browser cookies

2. True or False: Session fixation attacks can be prevented by regenerating session IDs after login.

True

False

3. Which of the following is a secure practice for managing dependencies?

Using outdated libraries to avoid compatibility issues

Regularly updating and scanning dependencies for vulnerabilities

Avoiding dependency management tools

Downloading random packages from untrusted sources

Submit

5. What does the STRIDE threat modeling framework stand for?

Security, Threats, Risk, Implementation, Deployment, Execution

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege

Standard, Testing, Review, Inspection, Documentation, Enforcement

Secure, Tested, Reliable, Integrated, Documented, Encrypted

6. True or False: Regular security patches and updates are optional for production systems.

True

False

7. Which of the following is NOT a best practice for error handling?

Logging errors securely without exposing sensitive information

Displaying detailed error messages to users

Using generic error messages for security

Implementing proper exception handling

Submit

9. What is the main purpose of code review in secure coding?

To enforce coding style guidelines

To identify vulnerabilities and security flaws early

To reduce the number of developers

To increase code execution speed

10. True or False: HTTPS encrypts data in transit and prevents man-in-the-middle attacks.

True

False

11. Which of the following best describes SQL injection?

Inserting malicious SQL code into input fields to manipulate database queries

A type of network attack that floods a database with requests

Encrypting SQL statements to protect database communication

A method of backing up database files securely

Submit

13. What is the primary benefit of implementing principle of least privilege in code?

Reduces application size

Minimizes potential damage from compromised accounts

Improves code compilation speed

Simplifies password management

14. True or False: Passwords should be stored in plaintext for quick user verification.

True

False

15. Which encryption algorithm is recommended for securing sensitive data at rest?

MD5

AES-256

Base64

SHA-1

Submit

17. What does OWASP stand for?

Open Web Application Security Protocol

Open Worldwide Application Security Project

Organized Web Application Security Protocol

Open Web Application Software Package

18. Which authentication method is considered most secure for web applications?

Basic authentication over HTTP

Session tokens stored in cookies

Multi-factor authentication (MFA) with HTTPS

Storing passwords in plain text

19. What is the primary purpose of using parameterized queries?

To improve database performance

To prevent SQL injection attacks

To simplify code readability

To reduce memory consumption

20. Input validation should occur at which layer(s) of an application?

Client-side only

Server-side only

Both client-side and server-side

Database layer only

Secure Coding Quiz: Can You Stop the Vulnerability?

1. Which of the following is a secure way to handle API keys?

2.

What first name or nickname would you like us to use?

2. True or False: Session fixation attacks can be prevented by regenerating session IDs after login.

3. Which of the following is a secure practice for managing dependencies?

4. Sanitizing user input involves ____.

5. What does the STRIDE threat modeling framework stand for?

6. True or False: Regular security patches and updates are optional for production systems.

7. Which of the following is NOT a best practice for error handling?

8. Cross-Site Request Forgery (CSRF) tokens prevent attackers from ____.

9. What is the main purpose of code review in secure coding?

10. True or False: HTTPS encrypts data in transit and prevents man-in-the-middle attacks.

11. Which of the following best describes SQL injection?

12. Buffer overflow attacks exploit ____.

13. What is the primary benefit of implementing principle of least privilege in code?

14. True or False: Passwords should be stored in plaintext for quick user verification.

15. Which encryption algorithm is recommended for securing sensitive data at rest?

16. Cross-Site Scripting (XSS) vulnerabilities allow attackers to ____.

17. What does OWASP stand for?

18. Which authentication method is considered most secure for web applications?

19. What is the primary purpose of using parameterized queries?

20. Input validation should occur at which layer(s) of an application?