CEH - Web Application Hacking and OWASP Top 10

By Sam Patel · Updated Jul 10, 2026

Questions22
Passing Score75%
Format59% Multiple Choice
Sessions Logged2,139
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.4 (39)

Topics covered

This quiz

Uncategorized22 (100%)

Uncategorized22 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

**Insecure Direct Object Reference (IDOR)** occurs when an application exposes a reference to an internal implementation object (such as a database key or filename) without verifying that the user has [[blank1]] to access that object.

Question 2

The **"Insecure Deserialization"** vulnerability (OWASP 2017, merged into "Software Integrity Failures" in 2021) is most dangerous when the application deserializes data from:

Answer choices

  • A. Trusted internal sources only

  • B. Untrusted user-controlled sources without validation

  • C. JSON format (which is inherently safe)

  • D. SQL databases with ORM frameworks

Question 3

Which HTTP methods should typically be **disabled on a web server** to reduce attack surface? *(Select TWO)*

Answer choices

  • A. GET

  • B. PUT

  • C. POST

  • D. TRACE

  • E. HEAD

Question 4

A web application displays error messages containing stack traces and database structure when an exception occurs. This is an example of which OWASP 2021 category?

Answer choices

  • A. Broken Access Control

  • B. Injection

  • C. Security Misconfiguration

  • D. Identification and Authentication Failures

Question 5

**True or False:** **Stored (persistent) XSS** is generally more dangerous than reflected XSS because it does not require the victim to click a malicious link.

Answer choices

  • A. True

  • B. False