Cyber Security Quiz
10 questions · no time limit
0:00
APPLICATION AND WEB SECURITY
Question 1 of 10
No time limit
Current
Answered
Flagged
Not seen
PASSAGE
A GraphQL API exposes node(id: ID!), which can return invoices, projects, or public articles. The top-level resolver verifies that the requester is authenticated. Type-specific resolvers then load objects by decoded database identifier. Only the invoice list query applies an ownership filter.
Which change provides the most reliable mitigation for invoice IDOR through node?
YOUR PROGRESS
10
QUESTIONS
Ready when you are
Answer in any order. Your progress shows here as you go.
QUESTIONS
KEYBOARD
Pick an answer ABCD
Next question ↵→
Previous ←
Flag for review F