Skills101
← All practice quizzes

Quiz: Secure Development and Careers

5 questionsNo time limitPass: 60%+10 XP on first pass

The remaining OWASP 2025 risks in practice — software supply chain, integrity, logging and alerting, mishandled errors — plus secrets management, security testing tools, a pre-deploy checklist and how to start a career in application security.

Log in to take the quiz

Free account · see your score, answers and explanations, earn XP

  1. Question 1

    A popular package publishes a malicious version and your build installs it automatically. Which OWASP 2025 category is this?

  2. Question 2

    A secret API key was committed to Git. What is the first thing to do?

  3. Question 3

    In section 5, what did is_allowed_unsafe return when the permissions service timed out?

  4. Question 4

    Which tool type scans a running app by attacking it, e.g. OWASP ZAP?

  5. Question 5

    Which should never appear in logs?