Qwissit TYPO3

TCCD 14 LTS

Secure Development

12 of 64 questions in the app

RTE and authentication

  1. Which multi-factor authentication methods does the TYPO3 v14 core provide for backend login? Easy

Security

  1. What is Cross-Site Request Forgery (CSRF)? Easy
  2. A URL parameter uid contains the value "5 OR 1=1". What does (int)$uid return in PHP 8? Easy
  3. A contact form validates its input only in the browser with the HTML attribute required and JavaScript. Why is that not enough from a security point of view? Easy
  4. How does TYPO3 v14 store the passwords of backend and frontend users? Easy
  5. Which multi-factor authentication (MFA) methods does the TYPO3 Core ship with? Easy
  6. Which barriers protect the standalone Install Tool at /typo3/install against unauthorized access? Easy
  7. What is good practice for granting access permissions to editors in TYPO3? Easy

Page output

  1. The site uses a Content Security Policy. A template contains a small inline script that the browser blocks. How do you allow it specifically? Medium

RTE and authentication

  1. Administrators should be required to set up two-factor authentication in the backend, editors should not. Which statements are true? Medium

Page output

  1. How is the Content Security Policy enabled in the frontend? Hard
  2. How does an extension ship its own CSP rules? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications