Question 1

How can you untaint Perl variables?

Accepted Answer

Perl provides a few ways to untaint vari

Question 2

____ is a set of Perl modules that provide a simple and consistent Application Programming Interface (API) to the World Wide Web.

Accepted Answer

A)  Crypt::Web:Lib 
B)  RC4 
C)  Crypt::Lib:Web 
D)  LWP 
A)  Crypt::Web:Lib 
B)  RC4 
C)  Crypt::Lib:Web 
D)  LWP

Question 3

What are the steps followed by a communication in LWP?

Accepted Answer

Communication in LWP follows these simpl

Question 4

Perl's ____ allows developers program security even when running extra privileges such as setuid or setgid programs.

Accepted Answer

A)  taint mode 
B)  safe mode 
C)  domain mode 
D)  sandbox mode 
A)  taint mode 
B)  safe mode 
C)  domain mode 
D)  sandbox mode

Question 5

What are the operator-access restrictions when Perl is in safe mode?

Accepted Answer

Operator-access restrictions have the fo

Question 6

____ is an algorithm based on a random permutation using a variable key-size stream cipher with byte-oriented operations.

Accepted Answer

A)  RC4 
B)  SHA1 
C)  MD5 
D)  RSA 
A)  RC4 
B)  SHA1 
C)  MD5 
D)  RSA

Question 7

Many programming languages can be used for building CGI, but the most common one is ____________________.

Accepted Answer

The answer of Many programming languages can be used for...

Question 8

In Perl, the ternary conditional operator "____" is an exception to the principle of "one tainted value taints the whole expression."

Accepted Answer

A)  ++ 
B)  (?:) 
C)  *= 
D)  && 
A)  ++ 
B)  (?:) 
C)  *= 
D)  &&

Question 9

____ is a search engine for the distributions, modules, documentation, and IDs on CPAN.

Accepted Answer

A)  Perl search 
B)  Google-Perl 
C)  Google.CPAN 
D)  CPAN search 
A)  Perl search 
B)  Google-Perl 
C)  Google.CPAN 
D)  CPAN search

Question 10

____ provides internal data checking for developers to catch malicious data coming into the program.

Accepted Answer

A)  Taint mode 
B)  Domain mode 
C)  Sandbox mode 
D)  Safe mode 
A)  Taint mode 
B)  Domain mode 
C)  Sandbox mode 
D)  Safe mode

Question 11

Briefly describe race conditions in file access.

Accepted Answer

Race condition is a common attack exploi

Question 12

Briefly describe the Perl's crypt() function.

Accepted Answer

The crypt() function is a built-in Perl

Question 13

Match between columns
                        Premises: considered a Perl extension to OpenSSL's X.509 API and implements most of OpenSSL's useful X.509 API
environment variable that can be used by a Perl program
a collection of specific restrictions in Perl that helps developers to write safer scripts by forcing them to think more carefully about how data is used within the script
also referred to as the "libwww-perl" collection
mostly used to allow users to run binary executables with temporarily elevated privileges in order to perform specific tasks
a central Web repository for Perl modules and extensions
provides an interface to the RSA key-generation, signing, and verification functions in OpenSSL
a specification for exchanging information between a Web server and an application program
a stream cipher designed by Ron Rivest for RSA Data Security

Accepted Answer

The Answer of CPAN and CGI and LWP and Crypt::OpenSSL::X509 is...

Question 14

Communication in LWP follows hypertext transfer protocol (HTTP) and is ____.

Accepted Answer

A)  stateful 
B)  stateless 
C)  state-aware 
D)  state-smart 
A)  stateful 
B)  stateless 
C)  state-aware 
D)  state-smart

Question 15

Once a variable is tainted, Perl will allow you to use it in a system() , exec() , piped open, eval() , backtick , or unlink command.

Accepted Answer

A) True 
 B)False

Question 16

How can you test whether a variable that contains tainted data will trigger an "Insecure dependency" message?

Accepted Answer

There are two ways to test whether a var

Question 17

You can enable taint mode explicitly by using the command line flag ____.

Accepted Answer

A)  -A 
B)  -S 
C)  -T 
D)  -X 
A)  -A 
B)  -S 
C)  -T 
D)  -X

Question 18

In Perl, ____ provides a "sandbox" environment that compiles and executes code in restricted compartments.

Accepted Answer

A)  taint module 
B)  taint mode 
C)  safe module 
D)  domain mode 
A)  taint module 
B)  taint mode 
C)  safe module 
D)  domain mode

Question 19

____ is a general-purpose scripting language that is widely used to implement common gateway interface (CGI).

Accepted Answer

A)  Java 
B)  Python 
C)  Ruby 
D)  Perl 
A)  Java 
B)  Python 
C)  Ruby 
D)  Perl

Question 20

The safe module operation ____ permits only the provided list of operators to be used when compiling code in the compartment.

Accepted Answer

A)  permit (OP, ...) 
B)  permit_only (OP, ...) 
C)  trap (OP, ...) 
D)  share (NAME, ...) 
A)  permit (OP, ...) 
B)  permit_only (OP, ...) 
C)  trap (OP, ...) 
D)  share (NAME, ...)

How can you untaint Perl variables?

____ is a set of Perl modules that provide a simple and consistent Application Programming Interface (API) to the World Wide Web.

What are the steps followed by a communication in LWP?

Perl's ____ allows developers program security even when running extra privileges such as setuid or setgid programs.

What are the operator-access restrictions when Perl is in safe mode?

____ is an algorithm based on a random permutation using a variable key-size stream cipher with byte-oriented operations.

Many programming languages can be used for building CGI, but the most common one is ____________________.

In Perl, the ternary conditional operator "____" is an exception to the principle of "one tainted value taints the whole expression."

____ is a search engine for the distributions, modules, documentation, and IDs on CPAN.

____ provides internal data checking for developers to catch malicious data coming into the program.

Briefly describe race conditions in file access.

Briefly describe the Perl's crypt() function.

Communication in LWP follows hypertext transfer protocol (HTTP) and is ____.

Once a variable is tainted, Perl will allow you to use it in a system() , exec() , piped open, eval() , backtick , or unlink command.

How can you test whether a variable that contains tainted data will trigger an "Insecure dependency" message?

You can enable taint mode explicitly by using the command line flag ____.

In Perl, ____ provides a "sandbox" environment that compiles and executes code in restricted compartments.

____ is a general-purpose scripting language that is widely used to implement common gateway interface (CGI).

The safe module operation ____ permits only the provided list of operators to be used when compiling code in the compartment.

Introduction to Security Concepts

Software Engineering and Security

Essential Public Key Infrastructure

Trust and Threat Model

Java Programming Security

Java Api-Level Security Features

Authentication and Authorization With Java

Secure Programming With C and Openssl

Identity Management

Security Topics

Filters

Exam 9: Secure Programming With Perl

How can you untaint Perl variables?

____ is a set of Perl modules that provide a simple and consistent Application Programming Interface (API) to the World Wide Web.

What are the steps followed by a communication in LWP?

Perl's ____ allows developers program security even when running extra privileges such as setuid or setgid programs.

What are the operator-access restrictions when Perl is in safe mode?

____ is an algorithm based on a random permutation using a variable key-size stream cipher with byte-oriented operations.

Many programming languages can be used for building CGI, but the most common one is ____________________.

In Perl, the ternary conditional operator "____" is an exception to the principle of "one tainted value taints the whole expression."

____ is a search engine for the distributions, modules, documentation, and IDs on CPAN.

____ provides internal data checking for developers to catch malicious data coming into the program.

Briefly describe race conditions in file access.

Briefly describe the Perl's crypt() function.

Communication in LWP follows hypertext transfer protocol (HTTP) and is ____.

Once a variable is tainted, Perl will allow you to use it in a system() , exec() , piped open, eval() , backtick , or unlink command.

How can you test whether a variable that contains tainted data will trigger an "Insecure dependency" message?

You can enable taint mode explicitly by using the command line flag ____.

In Perl, ____ provides a "sandbox" environment that compiles and executes code in restricted compartments.

____ is a general-purpose scripting language that is widely used to implement common gateway interface (CGI).

The safe module operation ____ permits only the provided list of operators to be used when compiling code in the compartment.

Introduction to Security Concepts

Software Engineering and Security

Essential Public Key Infrastructure

Trust and Threat Model

Java Programming Security

Java Api-Level Security Features

Authentication and Authorization With Java

Secure Programming With C and Openssl

Identity Management

Security Topics

Filters