ISC2 · CISSP
Secure coding
CISSP · Lesson 34 of 34 · 4:15:52
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: CWEs and CVEs, injection, cross-site scripting, request forgery, buffer overflows, race conditions, insecure deserialization, hard-coded credentials, API security, and secure coding practices and standards. Includes three original practice questions.
Preview the topics
- A login form builds a database query by joining strings with whatever the user types. Which weakness is this?
- Which practice best defeats SQL injection?
- An API returns any patient’s file when a logged-in user changes the identifier in the request. What is missing?