Web-security quiz

Test your Web-security knowledge with a free interactive quiz — 50 questions with answers and explanations. No signup needed to play.

What is the correct approach to input validation on a server?

1. What is the correct approach to input validation on a server?
2. What is the difference between authentication and authorisation?
3. What is a "salt" in password hashing, and why is it needed?
4. Output encoding (HTML-escaping) protects primarily against which class of attack?
5. What does "fail securely" mean as a design principle?
6. What is OWASP?
7. What does the "Same-Origin Policy" mean for web pages?
8. What does "principle of least privilege" mean?
9. What is the OWASP Top 10?
10. What is "mixed content" on a web page, and why is it a security concern?
11. Which best captures the principle "don't trust the client"?
12. Why is "don't roll your own crypto" almost universally good advice?

More quizzes