Offensive Security Quiz

Q1. Which is an example of Broken Access Control?

a verbose stack trace a strong password policy a bank transfer page reachable without any authorisation check an expired TLS certificate

Q2. Offensive security demonstrates how a(n) ___ operates.

network cabler ethical hacker help-desk agent compliance auditor

Q3. Beyond simply finding flaws, offensive security demonstrates:

server uptime software licensing real business impact code coverage

Q4. Broken Access Control is which OWASP Top 10 category?

A07 A10 A01 A03

Q5. Offensive security primarily involves:

monitoring logs for alerts actively probing and exploiting systems to find vulnerabilities before malicious actors do installing antivirus writing security policies

Q6. Web directory enumeration is used to:

scan for open TCP ports encrypt web traffic discover hidden pages and paths on a web server crack password hashes

Q7. A penetration tester proves real business impact by:

running a scanner and stopping writing a report only listing CVE numbers exploiting a discovered vulnerability to show concrete harm

Q8. A reverse shell is one where:

no network is used the attacker connects to a port the target opens the shell runs in the browser the compromised target connects back out to the attacker

Q9. A key remediation for Broken Access Control is to:

enforce authorisation checks server-side and deny by default obfuscate the JavaScript use a longer session cookie hide the page from the menu

Q10. Cross-Site Request Forgery (CSRF) works by:

cracking the password forcing a victim's authenticated browser to make an unwanted request stealing the database scanning ports

Q11. Passive reconnaissance is characterised by:

exploiting a vulnerability gathering info without directly interacting with the target (OSINT) brute-forcing logins directly scanning the target's ports

Q12. IDOR (Insecure Direct Object Reference) lets an attacker:

access other users' objects by changing an identifier (e.g., ?id=) crack hashes sniff traffic inject SQL

Q13. Injection (e.g., SQL injection) is which OWASP Top 10 category?

A01 A03 A09 A05

Q14. The 'scope' / rules of engagement in a pentest define:

which targets and actions are authorised the report template the pricing the tools' versions

Q15. Directory enumeration finds hidden paths by:

systematically requesting words from a wordlist asking the administrator reading the public sitemap guessing at random