Security · interview question
Which option describes the most likely pitfall around safe subprocess calls?
Multiple choiceMediumchapter-17-curatedpremiumsecuritysafe-subprocess-calls
Answer and explanation
Correct answer
C. String-built shell commands invite injection and make quoting bugs harder to reason about.
Why
String-built shell commands invite injection and make quoting bugs harder to reason about. Calling out that risk matters because candidates who mention argument lists and boundaries sound safer to trust.
Test yourself on Security
A free test with instant, explained results. No account needed.
More Security questions
- What is the healthiest performance judgment around secrets management?
- What is the clearest sign that code around secrets management should be refactored?
- Which boundary choice best fits log redaction in a maintainable Python system?
- If input validation fails in production, what handling philosophy is strongest?
- Which response shows the healthiest evidence-first mindset around input validation?
- When is log redaction being used in the wrong way?