Q1medium
A developer sets up a new cloud server but leaves the default admin username and password (e.g., admin/admin). This is a failure in:
Back to Software Engineering
10 Questions Total
Software Security Engineering MCQs
Topic-wise practice questions for Software Engineering. Test your knowledge, check solutions on demand, and pace your preparation.
Zero-leak answer engine • Rate-limited explanations
Practice in Timed ModeQ2easy
What is the difference between a Vulnerability and a Threat?
Q3easy
What is the purpose of "Salting" in password storage?
audit_source.c
char buffer[10];
gets(buffer); // Reads user input into buffer
Q4easy
In the STRIDE threat model, what does "Repudiation" refer to?
Q5medium
A company implements a policy where an employee must provide both a password and a physical security token to access the corporate server. This is called:
Q6medium
A web application is suffering from a "Cross-Site Scripting (XSS)" attack. What is actually happening?
Q7medium
An application stores all user passwords in the database using the MD5 hashing algorithm. A security auditor flags this as a critical vulnerability. What is the primary reason?
Q8medium
(Code/Console Logic) You are auditing a piece of C code. Which function call is flagged as dangerous in modern security standards?
Q9easy
What is the main objective of a Penetration Test (Pen Test)?
Q10medium
An attacker exploits a vulnerability in a web application to force the database to return records from other users' accounts. This is a classic violation of which part of the CIA Triad?