Web › Module 3 › Lesson 6
Quiz — Auth Flaws
10-question quiz on broken auth, sessions, JWTs, and IDOR
Opening
Authentication Flaws — Module Quiz
Ten questions covering login weaknesses, session hijacking, JWT pitfalls, IDOR, and your auth lab observations.
Knowledge Check
Credential stuffing uses:
Multiple choice
Knowledge Check
True or False: HttpOnly helps prevent JavaScript from reading session cookies.
True or False
Knowledge Check
Session fixation is mitigated by:
Multiple choice
Knowledge Check
The alg:none JWT flaw involves:
Multiple choice
Knowledge Check
IDOR is primarily a failure of:
Multiple choice
Knowledge Check
Select secure cookie practices:
Select all that apply
Knowledge Check
True or False: JWT payloads should be treated as confidential without encryption.
True or False
Knowledge Check
Weak HS256 secrets enable attackers to:
Multiple choice
Knowledge Check
Rate limiting on login helps against:
Multiple choice
Knowledge Check
Best lab ethics rule for auth testing?
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)