Study Break
In the CodeScan case study, our client was originally using these two tools to check their code.
What is ApexPMD and SonarQube?
Profiles & Permission sets can be managed and controlled via this module in Codescan.
What is OrgScan?
Software projects can be tracked and managed using this tool.
What is an ALM?
A type of testing that checks the connection point of your apps and validates that they are working properly as reliable inputs & outputs.
What is API Testing?
Salesforce themselves recommends that passwords be reset every ______ days.
What is 90?
The initial security and compliance audit conducted by the client in the CodeScan case study cost them roughly this many million dollars.
What is 4.5 million? (*Answers around this estimate are accepted)
CodeScan’s ________ Plug-in allows you to scan code as it is being written.
What is IDE?
These development environments encourage rapid experimentation.
What are Scratch Orgs?
_______ testing ensures that the changes you just made did not impact other parts of the system.
What is Regression?
Profiles, Permission Sets, & Roles provide increasing levels of this to users.
What is Access?
Pen-testers in the CodeScan case study uncovered major vulnerabilities at ‘HealthCorp’ that could be exploited to allow for unauthorized ______ _______.
What is User Access?
These stop code from getting promoted if it is not meeting set standards.
What are Quality Gates?
The 4 types of Salesforce sandboxes are Developer, Partial Copy, and Full Copy and this.
What is Developer Pro?
This type of testing is run right before component tests.
What are Unit Tests?
Pen-Test is short for this type of tester.
What is Penetration Test?
In the CodeScan case study, one of the more concerning vulnerabilities discovered by CodeScan enabled attackers to manipulate data to commit this type of fraud.
What is Payment Fraud?
An example of a ___________ could be the ability for a hacker to inject SOQL code into an area of your application because of how your code was written.
What are Security Vulnerabilities?
Lightning Web Components must be coded in this environment.
What is an IDE?
This test helps find where there are performance bottlenecks in an application.
What is a Load Test?
A type of online scam where criminals send emails or messages to individuals or organizations, posing as legitimate entities, to trick them into revealing sensitive information such as passwords, banking details, and personal identifiable information.
What is Phishing?
One of the major vulnerabilities marked with ‘minor severity’ by ApexPMD in the CodeScan case study allowed attackers to exploit insecure ______ endpoints and extract sensitive customer data.
What is API?
The highest severity rating in CodeScan.
What is a Blocker?
You can develop Lightning components using Lightning Web Components or __________.
What is Aura?
What API stands for.
What is Application Programming Interface?
ApexPMD has this many Salesforce-specific rules.
What is 35?