You are testing an application and you see a stream of numbers that it produces and they appear to be random. How confident should you be that it is actually random? What would you need to to do be very confident?

Make an argument for why applications should have to deal with XSS themselves and that browsers shouldn’t have to provide any additional security. Note that I’m asking you to make an argument for this, not that I agree with it in practice.

You are tasked with testing an application for information leakage. Describe a plan on how you might test the application for this problem.

Describe why overly broad exceptions are a problem. In particular, what should you do if you are worried you might catch an exception you cannot directly deal with?

How many times does the following loop execute and why? for (unsigned m = 8; –m >= 0; )   printf(“hello\n”);  

Suppose an attacker can infer some data because your application sends 64 bytes of data in some situation rather than 32 bytes. Which issue are you dealing with? What would be a solution to this problem?

Does encryption stop a XSRF attack? If not, why not?

Your patient has been diagnosed with a peptic ulcer. To treat the H. pylori weakening the gastric mucosa you anticipate the doctor will order what medications? 

The school nurse is reviewing records for a 16-year-old girl recently diagnosed with ulcerative colitis requiring hospitalization last month. The nurse notices that the high school student has missed an additional 5 days of school since returning from hospitalization. What are some interventions that best support this student? Select all that apply

Water is able to form hydrogen bonds with other water molecules, because it is a polar molecule.