OWASP – Open Web Application Security Project

What does OWASP stand for?

• Open Web Application Security Project

• Online Web Application Security Program

• Open Web Application Software Project

• Online Web Application Software Program

OWASP is a non-profit organization that gathers and shares data about the most commonly exploited web application vulnerabilities.

• True

• False

What is the main goal of OWASP?

• To create web applications

• To help web developers improve security of their code

• To sell security software

• To monitor internet traffic

How often does OWASP publish the Top 10 list?

• Every year

• Every 2-3 years

• Every 5 years

• Every 10 years

Fill in the blank: The 2021 OWASP Top 10 Web Application Security Risks includes ________ as the number 1 risk.

• Broken Access Control

• Cross-Site Scripting (XSS)

• Sensitive Data Exposure

• Security Misconfiguration

Injection is listed as which number in the 2021 OWASP Top 10 Web Application Security Risks?

• 1

• 3

• 5

• 7

Fill in the blank: ________ is the 4th risk in the 2021 OWASP Top 10 Web Application Security Risks.

• Insecure Design

• Broken Access Control

• Security Misconfiguration

• Vulnerable and Outdated Components

Which risk is associated with outdated components in the 2021 OWASP Top 10 Web Application Security Risks?

• Security Misconfiguration

• Vulnerable & Outdated Components

• Software & Data Integrity Failures

• Server-Side Request Forgery (SSRF)

Fill in the blank: The 7th risk in the 2021 OWASP Top 10 Web Application Security Risks is ________.

• Identification & Authentication Failures

• Cross-Site Scripting (XSS)

• Sensitive Data Exposure

• Broken Access Control

Which of the following is NOT part of the 2021 OWASP Top 10 Web Application Security Risks?

• Security Logging & Monitoring Failures

• Server-Side Request Forgery (SSRF)

• Phishing Attacks

• Software & Data Integrity Failures