OWASP Top 10

What are the top-level categories of the OWASP Top 10 vulnerability list?

• A1 -Broken Authentication

• A2 -Injection

• A6 -Broken Access Control

• A10 -Insufficient Logging & Monitoring

Which of the following is a vulnerability from the OWASP Top 10?

• A5 - BruteForce

• A7 - XSS (Cross-Site Scripting)

• A9 - Message Sending

• A3 - Command Injection

What type of issue is Broken Access Control?

• Client-Side

• Server-Side

• Application-Level

• Network-Level

Which of the following is NOT part of the OWASP Top 10?

• A3 Hacking

• A6 Insufficient Logging & Monitoring

• A7 Cross Site Request Forgery

• A8 Airgap Compromise

Which vulnerabilities are addressed by OWASP Top 10?

• Exploits

• Reverse Engineering

• Brute Force

• All of the Above

What is the 6th vulnerability listed in the OWASP Top 10?

• A7 Cross Site Scripting (XSS)

• A8 Insecure Deserialization

• A9 Using Components with Known Vulnerabilities

• A5 Security Misconfiguration

Which of the following attack can be classified as application-level?

• Bruteforce

• DDoS

• XSS

• Session Hijacking

What issue is A4: XXE (XML External Entity Injection) vulnerability related to?

• Type Manipulation

• Input Manipulation

• Code Execution

• Data Exfiltration

What type of issue does A9: Using Components with Known Vulnerabilities address?

• DoS

• Data Manipulation

• Code Injection

• Package Management

What type of issue is A2 Injection?

• Input Manipulation

• Data Exfiltration

• Code Execution

• Type Manipulation