Drill 20: Teach it — A practical security checklist
Explain the example to someone who has never seen it.
What you will be able to do
- Explain the example to someone who has never seen it.
Practice task
Explain the example to someone who has never seen it.
Authentication: slow password hashing, MFA, rate limiting
Authorization: least privilege, server-side checks
Input: parameterised queries, output encoding
Secrets: secret manager, nothing in Git or logs
Headers: HTTPS, HSTS, CSP, secure cookies
Dependencies: lockfile, audit, pinning
Monitoring: structured logs, few precise alerts
Backups: 3-2-1, immutable copy, restore drillsYour turn
EasyWrite your answer
Explain the example to someone who has never seen it.
TEXT · starter
Your answer…Study tools
Make it yours.
Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.
Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign inFinished reading?
Lock in what you just learned.
0%
Mark this lesson complete to save your place and move one step closer to the certificate.