NEW
Font size
S
M
L
XL
WorksheetsSecurity Engineer Intern
Total questions: 28
Worksheet time: 5mins
Name
Class
Date
1.
What does setting `SameSite=Strict` on cookies help prevent?
a)
XSS
b)
CSRF
c)
Clickjacking
d)
CORS issues
2.
Which header protects against Clickjacking attacks?
a)
Content-Type
b)
X-Content-Type-Options
c)
X-Frame-Options
d)
Cache-Control
3.
In a broken access control test, what’s the best way to discover IDOR?
a)
XSS injection
b)
Changing URL parameters
c)
Clearing cookies
d)
Changing HTTP method
4.
In OAuth, what is the purpose of the `state` parameter?
a)
Session tracking
b)
Scope restriction
c)
CSRF protection
d)
Token refresh
5.
You bypass a login by modifying a JWT’s algorithm to `none`. What’s this flaw?
a)
Key reuse
b)
Signature validation bypass
c)
Replay attack
d)
Session fixation
6.
What does SSRF in a cloud app often lead to?
a)
XSS
b)
IAM access
c)
File upload
d)
Shellshock
7.
Which AWS service metadata IP is often targeted by SSRF?
a)
127.0.0.1
b)
0.0.0.0
c)
169.254.169.254
d)
192.168.1.1
8.
Public S3 bucket lists file names but blocks `GetObject`. Risk?
a)
Directory traversal
b)
Sensitive data exposure via filenames
c)
Stored XSS
d)
Log injection
9.
Which GCP IAM role has full project-level permissions?
a)
roles/viewer
b)
roles/owner
c)
roles/editor
d)
roles/admin
10.
An attacker uploads a `web.config` file in a .NET app. What can this do?
a)
Add an admin user
b)
Trigger RCE via config override
c)
SQLi
d)
CORS bypass
11.
What does the `-sC` flag in `nmap` do?
a)
Skip checksums
b)
Enable default scripts
c)
Scan UDP
d)
Use stealth mode
12.
Which tool is used to brute-force directories in web apps?
a)
Sublist3r
b)
Nikto
c)
Dirsearch
d)
Ghidra
13.
You identify `robots.txt` with `Disallow: /admin/`. What’s next?
a)
Report as misconfig
b)
Try path in browser
c)
Block IP
d)
Delete the file
14.
In Burp, how do you test rate limiting?
a)
Repeater → send 1000 fast requests
b)
Decoder
c)
Spider
d)
Search
15.
What is the fastest tool to automate open port detection?
a)
Nikto
b)
Masscan
c)
Hydra
d)
Gobuster
16.
Which of the following prevents code execution from the stack?
a)
ASLR
b)
DEP
c)
PIE
d)
RELRO
17.
Which of these can detect Windows PE security flags (like ASLR/DEP)?
a)
Burp Suite
b)
PESecurity
c)
Nmap
d)
CyberChef
18.
On Linux, what does `setuid` allow?
a)
Run process in background
b)
Allow any user to run with file owner's privileges
c)
Make it executable remotely
d)
Grant root access over SSH
19.
Which tool best reverse engineers .NET applications?
a)
Ghidra
b)
dnSpy
c)
OllyDbg
d)
Hex Fiend
20.
Which of the following indicates anti-debugging in a binary?
a)
printf("debug") calls
b)
IsDebuggerPresent() check
c)
malloc() loops
d)
fork() usage
21.
A developer accidentally exposes an `.env` file. What’s likely inside?
a)
HTML code
b)
Auth tokens / secrets
c)
Audit logs
d)
Image files
22.
Your company uses GitHub and secrets were pushed. What should you do?
a)
Force-push a clean commit
b)
Rotate keys & alert team
c)
Delete repo
d)
Rename branch
23.
Which header disables MIME type sniffing?
a)
Content-Type
b)
X-XSS-Protection
c)
X-Content-Type-Options: nosniff
d)
Cache-Control
24.
What vulnerability occurs when a user can force an admin to perform actions?
a)
CSRF
b)
XSS
c)
IDOR
d)
Clickjacking
25.
Which of the following is *not* a defense-in-depth control?
a)
WAF
b)
Logging
c)
Captcha
d)
Hardcoded credentials
26.
What is a common consequence of exposing sensitive API keys in a public repository?
a)
Enhanced security
b)
User authentication
c)
Increased performance
d)
Data leakage
27.
Which vulnerability allows an attacker to execute arbitrary code by manipulating user input?
a)
Path Traversal
b)
Command Injection
c)
Cross-Site Scripting
d)
SQL Injection
28.
What is the purpose of the `X-Content-Type-Options` header in HTTP responses?
a)
Set content encoding
b)
Control caching behavior
c)
Enable CORS
d)
Prevent MIME type sniffing
Reset
