White Hat Apprentice: From Lab to Professional Report Quiz

Quiz: Python for Security

Pass mark: 70%. You can retry as many times as you need.

1 Why is it good practice to put a scope check inside your own scripts? Single answer It makes the script run faster It replaces the need for a written authorization It prevents accidental traffic to targets outside the authorized scope It lets you hide your activity from the client's logs

2 Which statements about a well designed lab audit script are correct? (several answers) Multiple answers possible It refuses hosts that are not on an allowed list It is legal to run against any website because it only sends one request It uses a timeout so that it never hangs forever It explains each decision, such as why an address was rejected

3 In a script that counts failed sign-ins, what is the main weakness of using only a fixed threshold, for example three failures? Single answer Thresholds cannot be used with Python It ignores when the failures happened, so slow, harmless events can look like an attack It always produces too few alerts It requires administrator rights on the server

4 Your regular expression matches 90 percent of the lines in a log file. What is the best next step? Single answer Delete the lines that do not match Assume the remaining 10 percent is irrelevant Make the pattern match everything, even if it becomes meaningless Count and inspect the unmatched lines to find formats you forgot

5 An HTTP header check shows that a lab application does not send a Content-Security-Policy header. How should you report it? (several answers) Multiple answers possible As a factual observation with a clear recommendation As a critical vulnerability that allows full compromise With an honest severity that reflects the context, usually low on its own By saying that its presence would prove the site is secure