D385: Logging And Security Issues Study Guide Rated A+

Which method is used for a SQL injection attack? {Ans: - exploiting query parameters}Six Sigma DMADV {Ans: - define - measure - analyze - design - verify}Sensitive Data Leaks {Ans: - occurs when an application fails to properly protect sensitive information - this typically occurs through descriptive response headers, descriptive error messages with stack traces or database error messages, or revealing comments in HTML files}What does ERROR indicate? {Ans: - indicates code malfunction}What does the following in a penetration test mean to find? try:transport_security = req.headers['Strict-Transport-Security']except:print ('HSTS header not set properly') {Ans: - man-in-the-middle}Standard Defect descriptions and attributes? {Ans: - what - where - how - severity - status}Unit Test {Ans: - smallest, testable pieces of code called units - verifies that each part of the code works correctly and as intended}Attributes of Constrained Data Interfaces? {Ans: - reduced text fields - constrained flow - easy to follow for end user}Which function can be used to return all set breakpoints? {Ans: - get_all_breaks( ) - returns a string with all set breakpoints}SSRF {Ans: - Server-side Request Forgery - attacker us able to send requests on behalf of the server -