wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

OWASP Top 10 Quiz - Easy

Total questions: 10

Worksheet time: 5mins

Name
Class
Date
1.

Which of these are examples of "Injection" attacks?

a)

A bad guy edits high scores on a leaderboard.

b)
  • A website changes colors when you click something.

c)
  • A program sends malicious instructions to the server.

d)
  • Your password stops working.

2.

What can go wrong with "Broken Access Control"?

a)
  • Someone guesses your password.

b)
  • You can't log into your favorite game.

c)
  • A user can see things they shouldn't.

d)
  • A hacker puts bad code into a website form.

3.

"Security Misconfiguration" means:

a)
  • A website doesn't protect your data well.

b)
  • A website is poorly built from the start.

c)
  • Your computer has a virus.

d)
  • You forgot to turn off your game console.

4.

Which of these are problems with "Insecure Design"?

a)
  • A website has old, un-updated software.

b)
  • Security isn't thought about enough.

c)
  • Users don't pick strong passwords

d)
  • Websites have lots of bugs.

5.

What could be a result of "Sensitive Data Exposure"?

a)
  • An attacker stealing information from a website.

b)
  • Your friend seeing your birthday.

c)
  • Your bank account information being leaked.

d)

A website forgetting what level you were in a game.

6.

Which actions could be harmful due to "XML External Entities (XXE)"?

a)
  • Opening a document from an unknown source.

b)
  • Your game crashing unexpectedly.

c)
  • Someone finding your private photos online.

d)
  • Using a USB drive you found.

7.

What can happen when using "Components with Known Vulnerabilities"?

a)
  • Your computer runs slower.

b)
  • Websites don't load right.

c)
  • You get more pop-up ads.

d)
  • Hackers can exploit weaknesses in the software.

8.

"Insufficient Logging & Monitoring" can lead to:

a)
  • Not knowing when bad guys are on a website.

b)
  • Your save file in a game getting lost.

c)
  • Websites being slower than usual.

d)
  • Having trouble changing your username.

9.

What does "Insecure Deserialization" involve?

a)
  • Bad guys sending sneaky data to a program.

b)
  • Sending a message to your friend.

c)
  • Putting information on a website.

d)
  • Getting hacked because your password is too easy.

10.

What kind of attack is "Server-Side Request Forgery (SSRF)"?

a)
  • A. Hackers tricking a server into doing something bad.

b)
  • B. Your web browser getting stuck