OWASP

From OWASP's Top 10 Year 2021, which security risk is ranked 1st?

• Injection

• Server-side Request Forgery (SSRF)

• Broken Access Control

• Security Misconfiguration

What does OWASP stand for? Fill in the blank

Open Web _________ Security Project

• Application

• Attribute

• Assessment

• Authentication

Which of the following solutions or mitigating controls does not apply to A02:2021-Cryptographic Failures?

• Make sure to encrypt all sensitive data in both in transit and at rest

• Remove unnecessary components

• Implement proper key management

• Use strong encryption algorithms

Which of the following security risk identified by OWASP Top 10 relates to tampering of source code or components?

• Identification and Authentication Failures

• Broken Access Control

• Software and Data Integrity Failures

• Injection

Which of the following security risk identified by OWASP Top 10 relates to having the web application fetching a remote resource without validating the user-supplied URL?

• Security Misconfiguration

• Identification and Authentication Failures

• Server - Side Request Forgery (SSRF)

• Insecure Design

When was OWASP Top 10 list updated?

• 2020

• 2021

• 2023

• 2017

What is a common solution or mitigating control against Vulnerable and Outdated Components, and Security Misconfiguration?

• Data sanitation

• Remove unnecessary components

• Implement multi-factor authentication

• Parameterized queries

What Security Risk is vulnerable to credential stuffing?

• Software and Data Integrity Failures

• Security Misconfiguration

• Security Logging and Monitoring Failures

• Identification and Authentication Failures

What Security Risk is the image an example of?

• Injection

• Server-side Request Forgery (SSRF)

• Broken Access Control

• Cryptographic Failures

Bonus Question:

How many Security Risks are enumerated in the list of OWASP Top __ ?

• 10

• 20

• 3

• 5