Question 1

The setuid and ____ are UNIX functions that deal with privileges.

Accepted Answer

A)  setdid 
B)  setoid 
C)  setgid 
D)  setprv 
A)  setdid 
B)  setoid 
C)  setgid 
D)  setprv C

Question 2

The ____________________ function is a built-in Perl routine usually used as the UNIX password-encryption function.

Accepted Answer

crypt()

Question 3

The _________________________ module enables a Perl program to use OpenSSL to parse an X.509-formatted certificate.

Accepted Answer

Crypt::OpenSSL::X509

Question 4

Hypertext transfer protocol (HTTP) only allows one-way communication from the server to the client (Web browser).

Accepted Answer

A) True 
 B)False

Question 5

____ is a tool designed to help developers to write safer scripts by forcing them to think about external input validation and protecting them from accidentally performing unsafe operations, such as unwillingly changing external resources.

Accepted Answer

A)  Safe mode 
B)  Sandbox mode 
C)  Domain mode 
D)  Taint mode 
A)  Safe mode 
B)  Sandbox mode 
C)  Domain mode 
D)  Taint mode

Question 6

What are some of the Perl's taint mode exceptions?

Accepted Answer

A few taint mode exceptions exist, and t

Question 7

The Perl's ____ function is based on the data encryption standard (DES) algorithm, and its variations are intended to discourage the use of hardware implementations of a key search.

Accepted Answer

A)  des() 
B)  crypt() 
C)  password() 
D)  passwd() 
A)  des() 
B)  crypt() 
C)  password() 
D)  passwd()

Question 8

What are the characteristics of a namespace when Perl is in safe mode?

Accepted Answer

A new and separate namespace has the fol

Question 9

Since CGI scripts are designed to run by individuals around the world, they are the prime targets for malicious users to exploit any vulnerability.

Accepted Answer

A) True 
 B)False

Question 10

The main purpose of ____ is to isolate tainted data so that the script cannot use it to perform tasks unintentionally.

Accepted Answer

A)  safe mode 
B)  taint mode 
C)  sandbox mode 
D)  domain mode 
A)  safe mode 
B)  taint mode 
C)  sandbox mode 
D)  domain mode

Question 11

How can you set values for a variable in Perl?

Accepted Answer

There are two ways to set values for a v

Question 12

In Perl, any subexpression is considered tainted if all of the elements in the expression are tainted.

Accepted Answer

A) True 
 B)False

Question 13

The two areas of concern in file processing are temporary file creation and ____ in file access.

Accepted Answer

A)  covert channels 
B)  side channels 
C)  race conditions 
D)  share conditions 
A)  covert channels 
B)  side channels 
C)  race conditions 
D)  share conditions

Question 14

____ permits communication and interaction from the client to the server for producing dynamic, two-way Web pages.

Accepted Answer

A)  CGI 
B)  HTTP 
C)  HTTPS 
D)  HTTP2 
A)  CGI 
B)  HTTP 
C)  HTTPS 
D)  HTTP2

Question 15

Variables are considered ____ if they are set with values that are retrieved from outside of the script.

Accepted Answer

A)  sandboxed 
B)  secure 
C)  tainted 
D)  safe 
A)  sandboxed 
B)  secure 
C)  tainted 
D)  safe

Question 16

In order to provide support for the HTTPS protocol under LWP, we need the ____ Perl module.

Accepted Answer

A)  LWP::UserAgent 
B)  Crypt::HTTPS 
C)  Crypt::SSLeay 
D)  Crypt::SSLAgent 
A)  LWP::UserAgent 
B)  Crypt::HTTPS 
C)  Crypt::SSLeay 
D)  Crypt::SSLAgent

Question 17

It is a good practice to verify that a variable you are planning to untaint has only bad characters (black listing) rather than check whether or not it has any good characters (white listing).

Accepted Answer

A) True 
 B)False

Question 18

Perl provides a built-in security-checking mechanism called ____________________.

Accepted Answer

The answer of Perl provides a built-in security-checking mechanism called...

Question 19

The safe module operation ____ returns a glob reference for the symbol table entry of VARNAME in the package of the compartment.

Accepted Answer

A)  reval (STRING) 
B)  deny_only (OP, ...) 
C)  share (NAME, ...) 
D)  varglob (VARNAM
E)  
A)  reval (STRING) 
B)  deny_only (OP, ...) 
C)  share (NAME, ...) 
D)  varglob (VARNAM
E)

Question 20

What are some of the characteristics of Perl's taint mode?

Accepted Answer

The following is a list of taint mode ch

The setuid and ____ are UNIX functions that deal with privileges.

The ____________________ function is a built-in Perl routine usually used as the UNIX password-encryption function.

The _________________________ module enables a Perl program to use OpenSSL to parse an X.509-formatted certificate.

Hypertext transfer protocol (HTTP) only allows one-way communication from the server to the client (Web browser).

____ is a tool designed to help developers to write safer scripts by forcing them to think about external input validation and protecting them from accidentally performing unsafe operations, such as unwillingly changing external resources.

What are some of the Perl's taint mode exceptions?

The Perl's ____ function is based on the data encryption standard (DES) algorithm, and its variations are intended to discourage the use of hardware implementations of a key search.

What are the characteristics of a namespace when Perl is in safe mode?

Since CGI scripts are designed to run by individuals around the world, they are the prime targets for malicious users to exploit any vulnerability.

The main purpose of ____ is to isolate tainted data so that the script cannot use it to perform tasks unintentionally.

How can you set values for a variable in Perl?

In Perl, any subexpression is considered tainted if all of the elements in the expression are tainted.

The two areas of concern in file processing are temporary file creation and ____ in file access.

____ permits communication and interaction from the client to the server for producing dynamic, two-way Web pages.

Variables are considered ____ if they are set with values that are retrieved from outside of the script.

In order to provide support for the HTTPS protocol under LWP, we need the ____ Perl module.

It is a good practice to verify that a variable you are planning to untaint has only bad characters (black listing) rather than check whether or not it has any good characters (white listing).

Perl provides a built-in security-checking mechanism called ____________________.

The safe module operation ____ returns a glob reference for the symbol table entry of VARNAME in the package of the compartment.

What are some of the characteristics of Perl's taint mode?

Introduction to Security Concepts

Software Engineering and Security

Essential Public Key Infrastructure

Trust and Threat Model

Java Programming Security

Java Api-Level Security Features

Authentication and Authorization With Java

Secure Programming With C and Openssl

Identity Management

Security Topics

Filters

Exam 9: Secure Programming With Perl

The setuid and ____ are UNIX functions that deal with privileges.

The ____________________ function is a built-in Perl routine usually used as the UNIX password-encryption function.

The _________________________ module enables a Perl program to use OpenSSL to parse an X.509-formatted certificate.

Hypertext transfer protocol (HTTP) only allows one-way communication from the server to the client (Web browser).

____ is a tool designed to help developers to write safer scripts by forcing them to think about external input validation and protecting them from accidentally performing unsafe operations, such as unwillingly changing external resources.

What are some of the Perl's taint mode exceptions?

The Perl's ____ function is based on the data encryption standard (DES) algorithm, and its variations are intended to discourage the use of hardware implementations of a key search.

What are the characteristics of a namespace when Perl is in safe mode?

Since CGI scripts are designed to run by individuals around the world, they are the prime targets for malicious users to exploit any vulnerability.

The main purpose of ____ is to isolate tainted data so that the script cannot use it to perform tasks unintentionally.

How can you set values for a variable in Perl?

In Perl, any subexpression is considered tainted if all of the elements in the expression are tainted.

The two areas of concern in file processing are temporary file creation and ____ in file access.

____ permits communication and interaction from the client to the server for producing dynamic, two-way Web pages.

Variables are considered ____ if they are set with values that are retrieved from outside of the script.

In order to provide support for the HTTPS protocol under LWP, we need the ____ Perl module.

It is a good practice to verify that a variable you are planning to untaint has only bad characters (black listing) rather than check whether or not it has any good characters (white listing).

Perl provides a built-in security-checking mechanism called ____________________.

The safe module operation ____ returns a glob reference for the symbol table entry of VARNAME in the package of the compartment.

What are some of the characteristics of Perl's taint mode?

Introduction to Security Concepts

Software Engineering and Security

Essential Public Key Infrastructure

Trust and Threat Model

Java Programming Security

Java Api-Level Security Features

Authentication and Authorization With Java

Secure Programming With C and Openssl

Identity Management

Security Topics

Filters