Certified Appsec Practitioner

I recently attempted the Certified AppSec Practitioner (CAP) exam and passed it on my first try. The CAP exam is a 60-minute multiple-choice exam (MCQs) hosted by The SecOps Group. To pass, you need to score at least 60% by correctly answering questions that test your knowledge of both the defensive and offensive sides of cybersecurity. If you’re preparing for the exam, you can find the full syllabus on the SecOps Group website.

Here I am sharing the MCQ’s which I have used to prepare for the exam.

This MCQ’s are generated from this Notes.

The Content are as follows:

1. Input Validation Mechanisms
   • Blacklisting & Whitelisting
2. Cross-Site Scripting (XSS)
3. SQL Injection
4. XML External Entity Attack
5. Cross-Site Request Forgery (CSRF)
6. Encoding, Encryption, and Hashing
7. Authentication related Vulnerability
   • Brute-force Attacks
   • Password Storage and Password Policy