White Hat Apprentice: From Lab to Professional Report Quiz

Quiz: Bug Bounty and Community

Pass mark: 70%. You can retry as many times as you need.

1 What makes testing a company's website acceptable in a bug bounty context? Single answer Having good intentions The site being accessible on the internet Finding a vulnerability and telling the company afterwards An explicit written program policy that covers the system, and following its rules

2 While testing with your own account in a program, you notice you can view another customer's personal data. What should you do? (several answers) Multiple answers possible Stop and avoid looking at more personal data Download as many records as possible to prove the impact Report it with minimal evidence, redacting personal data Describe the reproduction steps using accounts you created as much as possible

3 Which title is best for a vulnerability report? Single answer URGENT!!! Your site is hacked Order endpoint does not check ownership and exposes other customers' orders Security problem Scanner results

4 Why do many practitioners recommend completing hands-on practice before choosing an advanced practical certification such as OSCP? Single answer Because the exam is purely multiple choice Because it guarantees an immediate job offer Because the skills it tests are built through substantial practice on training platforms and labs Because it is only open to people who already work in defense

5 Which practices are appropriate when publishing a security portfolio? (several answers) Multiple answers possible Use only lab data or fictional examples in sample reports and logs Publish details of an unfixed vulnerability in a real product to show your skill Read each platform's rules before publishing a writeup Check the repository history for accidentally committed secrets Include real client names to prove that you have experience