Web › Module 4 › Lesson 5
Quiz — Cryptographic Failures
10 APPLY on A04: rest/transit, hash vs encrypt, TLS, demo http://192.168.0.1/ ethics.
Opening
Cryptographic Failures — Module Quiz
Ten APPLY items on OWASP Top 10:2025 A04: data at rest vs in transit, hashing ≠ encryption, slow salted password KDFs, TLS mistakes (verify=False, obsolete TLS, cleartext sensitive), checklist lab under $HOME/cyberlium-lab chmod 600.
Knowledge Check
APPLY: HTTPS login but plaintext password column. What failed?
Multiple choice
Knowledge Check
APPLY: True or False: “Encrypted with SHA-256” is correct password-storage language.
True or False
Knowledge Check
APPLY: Password storage vs encrypting an API key you must read back?
Multiple choice
Knowledge Check
APPLY: True or False: HaveIBeenPwned dumps are ethical A04 hashcat labs in Cyberlium.
True or False
Knowledge Check
APPLY: verify=False in a production HTTP client — what mistake?
Multiple choice
Knowledge Check
APPLY: Reading example.com certificate fields is…
Multiple choice
Knowledge Check
APPLY: True or False: MFA is a hash of the password.
True or False
Knowledge Check
APPLY: curl -sv http://192.168.0.1/ shows a TP-Link/Netgear “Router Admin” login. What do you do?
Multiple choice
Knowledge Check
APPLY: Disk encryption on YOUR laptop means…
Multiple choice
Knowledge Check
APPLY: You finish A04. What opens next?
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)