Web Security Quiz | CyberSec Academy

1. Which of these is NOT part of the OWASP Top 10?

Injection

Broken Authentication

XML External Entities (XXE)

Distributed Password Cracking

2. What is the most effective defense against XSS attacks?

Input validation and output encoding

Using HTTPS

Blocking all JavaScript

Disabling cookies

3. Which SQL injection technique uses database error messages?

Error-based SQLi

Union-based SQLi

Blind SQLi

Time-based SQLi

4. What does CSRF stand for?

Cross-Site Request Forgery

Cross-Site Remote Function

Client-Side Request Filtering

Content Security Rule Framework

5. Which HTTP header helps prevent clickjacking attacks?

X-Frame-Options

Content-Security-Policy

Strict-Transport-Security

X-XSS-Protection

6. What is the primary purpose of a Web Application Firewall (WAF)?

Filter and monitor HTTP traffic

Encrypt all web communications

Prevent DDoS attacks

Scan for viruses in uploaded files

7. Which of these is a secure coding practice?

Using parameterized queries

Storing passwords in plaintext

Disabling all security headers

Using eval() for JSON parsing

8. What does CORS stand for?

Cross-Origin Resource Sharing

Cross-Origin Request Security

Content Origin Restriction Standard

Client-Side Origin Resolution

9. Which tool is specifically designed for testing web applications?

Burp Suite

Nmap

Wireshark

Metasploit

10. What is the purpose of Content Security Policy (CSP)?

Prevent XSS and data injection attacks

Enforce HTTPS connections

Block all third-party cookies

Disable browser caching