Quiz.png Read the week’s handnotes before starting. Use HonorLock with Google Chrome and keep your camera on during the quiz. Headsets are not allowed. Use only the calculator provided in the quiz (no physical calculators). You have 30 minutes per attempt. Two attempts are allowed; the highest score counts. Complete each attempt in one sitting (you cannot save and return).

Q10 – An attacker: Injects Stored XSS Steals a session cookie Uses the cookie to access admin APIs Which failure chain best explains the attack?

Q9 – A bank deploys the following CSP: Content-Security-Policy: default-src ‘self’; script-src https://cdn.bank.com Which XSS-related issues may still occur? (Select all that apply)

Q5 – An endpoint downloads files using /download?file=report.pdf. Which inputs indicate Path Traversal? (Select all that apply)

Q1 – An e-commerce application trusts the price field sent by the browser because it was calculated in JavaScript on the client side. What is the fundamental security design flaw?

Q6 – A search page reflects the q parameter directly in the HTML response, executing immediately. What type of XSS is this?

Q2 – A logged-in student changes /grades?studentId=123 to /grades?studentId=124 and views another student’s grades. Which STRIDE categories apply? (Select all that apply)

first exam-prep.png Covers Weeks 1–4. Unlimited attempts — take it as many times as needed to master the content. 120 minutes per attempt. Each attempt must be completed in one sitting; you cannot save and return later. Proctored via HonorLock — use Google Chrome, have your camera on. This is an open-note exam. You may use your notes, including the instructor-provided handnotes for this exam, during each attempt. Use this opportunity to practice the question formats and strengthen your understanding before taking the official Exam 1.

What parts of the internal ear is used for equilibrium? [BLANK-1]

Which of the following may be used as evidence of just cause for termination should a wrongful discharge lawsuit be filed against an employer?