All challenges
Multiple ChoiceIntermediate 30s

Security headers

Choose the best answer for: HTTP security
Options
  1. 1No security headers configured, relying on browser defaults
  2. 2Only HSTS is set, leaving content and framing unprotected
  3. 3HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy
  4. 4Only CSP is set, leaving transport and framing unprotected

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle