Secure Coding

Correct Answer: A type of security vulnerability that allows attackers to inject scripts into webpages viewed by other users, and can be prevented by sanitizing input

Cross-site scripting (XSS) is a common attack that involves injecting malicious scripts into user's web browsers. This can be done by submitting malicious code through input forms, as well as embedding malicious code in URLs or by using browser-based scripting languages such as JavaScript. To prevent XSS attacks, input must be sanitized to remove any harmful content, including HTML tags, unevaluated JavaScript, or other scripting languages. Proper input validation is also critical in preventing XSS attacks.

Correct Answer: Two-factor authentication requires users to provide two forms of identification, such as a password and a fingerprint, making it more difficult for attackers to gain access to an account or device.

Two-factor authentication (2FA) is a security mechanism that requires users to provide two forms of identification to access an account or device. These factors typically include something the user knows, such as a password or PIN, and something the user has, such as a smart card or fingerprint. By requiring two forms of identification, 2FA makes it more difficult for attackers to gain access to a system or device using stolen credentials or other forms of attack, improving overall security.

Correct Answer: To mitigate or reduce the risk of a security incident

A security control is used in secure coding practices to mitigate or reduce the risk of a security incident. This can include technologies like firewalls, intrusion detection systems, and encryption, as well as security policies and procedures.