Quiz — Cryptographic Failures
10 APPLY on A04: rest/transit, hash vs encrypt, TLS, demo http://192.168.0.1/ ethics.
Cryptographic Failures — Module Quiz
Ten APPLY items on OWASP Top 10:2025 A04: data at rest vs in transit, hashing ≠ encryption, slow salted password KDFs, TLS mistakes (verify=False, obsolete TLS, cleartext sensitive), checklist lab under $HOME/cyberlium-lab chmod 600.
APPLY: HTTPS login but plaintext password column. What failed?
APPLY: True or False: “Encrypted with SHA-256” is correct password-storage language.
APPLY: Password storage vs encrypting an API key you must read back?
APPLY: True or False: HaveIBeenPwned dumps are ethical A04 hashcat labs in Cyberlium.
APPLY: verify=False in a production HTTP client — what mistake?
APPLY: Reading example.com certificate fields is…
APPLY: True or False: MFA is a hash of the password.
APPLY: curl -sv http://192.168.0.1/ shows a TP-Link/Netgear “Router Admin” login. What do you do?
APPLY: Disk encryption on YOUR laptop means…
APPLY: You finish A04. What opens next?