TYPO3 security

System configuration and Install Tool

12 of 60 questions in the app

Install Tool

  1. How does TYPO3 protect the Install Tool out of the box? Easy
  2. What should an integrator do first when taking over a TYPO3 instance from an administrator? Easy
  3. With which command can the Install Tool password be set on the command line in TYPO3 14? Easy
  4. Why should ENABLE_INSTALL_TOOL be added to a project's .gitignore? Easy
  5. What happens to the file ENABLE_INSTALL_TOOL if it is not used? Easy

System configuration

  1. What does the setting displayErrors control? Easy
  2. Which value for devIPmask is recommended for a production site? Easy
  3. What is trustedHostsPattern used for? Easy

Install Tool

  1. Where does TYPO3 14 create the file ENABLE_INSTALL_TOOL by default in Composer mode? Medium
  2. How do you prevent TYPO3 from deleting the file ENABLE_INSTALL_TOOL after one hour? Medium

System configuration

  1. An attacker sends a password request with the header "Host: evil.example". What prevents the link in the mail from pointing to their domain? Hard
  2. A site runs behind a load balancer that passes on port 8443. Since the move, TYPO3 reports an untrusted host. Which solutions make sense? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications