Security Testing for Python Quiz

Select the best answer for each question.

1. Why is Security Testing for Python important?

Python is the most widely used programming language. And Python code is not immune for vulnerabilities. It is not. Python is immune for threats. To prevent global warming. To get an ISO/NEN certificate.

2. Is Python code compiled or interpreted?

Compiled Interpreted Both None, it is directly executed.

3. What is essential for selection a Python security test tool?

Is must minimal be FOSS. It must be expensive to use. This ensures that it is a good tool Is must be created by AI It must run in the Cloud only!

4. Should you use a SAST tool for Python testing?

No, this is not essential. It depends. Only when required by a manager. Using a FOSS specific SAST tool is a minimum for security testing and validation.

5. Why is creating a secure test environment needed?

Only to guarantee reproducibility of test. To avoid malware in the test environment. To meet compliance regulations. To speed up testing.

6. What is the 80/20 rule for Python Security testing?

Tools do 20% of the work. Tools can do 100% of the work, but only 80% is correct. Most security defects can be found with 20% smart testing efforts. Human work needed for validation and testing is only 20% work and 80% preparation.

7. What are common weaknesses in Python code?

Use of insecure editors. SHA1 usage for certificate validation Injection attacks Injection attacks, insecure deserialization and path traversal attacks

8. Why are Reproducible Builds for packages important?

To ensure that software supply chain is not compromised. To audit if all business requirements are all implemented. It is not, since Python is immune for supply chain attacks To validate if developers are security certified.

9. How to handle security findings?

Publish everything on internet since that is the spirit of Open Source. Secure the findings , so encrypt everything and restrict access on the report on a need to know basis. Mail it to the developers manager and blame the poor security practices found. Add the findings directly to the code repository, which can be private or public.

10. What are key capabilities of the SAST tool Python Code Audit?

It can do complexity scans. It can do SAST scans on code. It can detect external Egress Risks It can check for known vulnerabilities in modules, perform SAST scans, perform complexity scans and can detect external Egress Risks.