Qwissit TYPO3

TCCI 14 LTS

Security and CSP

12 of 60 questions in the app

Security Team

  1. To whom do you report a security vulnerability in TYPO3 or an extension? Easy
  2. Where does TYPO3 publish its security announcements? Easy

Secure configuration

  1. Why should editors only get the permissions they really need? Easy
  2. Which user names should be avoided for backend accounts? Easy
  3. Why should security updates for TYPO3 be applied quickly? Easy
  4. Which backend module logs logins and failed login attempts? Easy

Multi-factor authentication

  1. Which MFA methods does the TYPO3 Core ship with? Easy
  2. What are the recovery codes for in MFA? Easy

Security Team

  1. How is a security bulletin for the TYPO3 Core labelled? Medium
  2. What happens if the author of an extension does not fix a reported vulnerability in time? Medium

Security Team

  1. An integrator finds a vulnerability in their own extension published in the TER. What is correct? Hard
  2. Which statements about handling vulnerabilities are correct? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications