Cybersecurity Quiz Flashcards

1

Nexus IQ enforces security policies by:

Removing vulnerabilities
Penetration tests
Blocking builds
Using AI for code

2

True or false: Lack of runtime context causes false positives.

True
False

3

First step encountering a high-risk vulnerability:

Replace component
Validate finding
Disable scanning
Suppress issue

4

Checkmarx One flags SQL Injection via:

ORM interactions
Parameterized queries
Unsanitized input
Hardcoded SQL

5

True or false: Nexus IQ uses package managers only.

True
False

6

Checkmarx One prioritizes by:

Static Call Graph
Risk-Based Prioritization
Dynamic Code Execution
Automated Fixes

7

What identifies vulnerabilities in Nexus IQ?

Sonatype's database
Machine learning
Behavioral analysis
Real-time API scanning

8

Nexus IQ scans transitive dependencies by:

Ignoring by default
Only direct scans
Automatic replacement
Recursively scanning

9

Command Injection risk increases with:

Use of HTTPS
os.system() in Python
Parameterized queries
eval() in JavaScript

10

Nexus IQ handles outdated libraries by:

Binary Fingerprinting
License Compliance
Age-Based Violation
Dynamic API Analysis

11

Reducing false positives in Checkmarx One by:

Reducing scan depth
Skipping third-party scans
Disabling findings
Custom rule tuning

12

True or false: Improper deserialization leads to RCE.

False
True

13

Checkmarx One's 'Taint Analysis' tracks:

Runtime performance
Network traffic
Data to operations
Log file activity

14

Remediate Nexus IQ vulnerabilities by:

Remove component
Disable policy
Suppress violation
Upgrade component

15

Differentiating XSS types in Checkmarx One by:

JavaScript sandbox
Data flow analysis
Server response monitoring
User interaction logs

Cybersecurity Quiz

Questions 15

Cybersecurity Quiz

Questions 15