Challenge Library
Coding Challenges
5,893 curated questions across every arena — browse by topic, then jump into a live 3-minute battle to put them to the test.
Filter by type
Filter by difficulty
Popular topics
428 challenges matching your filters
Clear topic filter- Multiple ChoiceIntermediate
SNMP
cybersecintermediate - Multiple ChoiceBeginner
SSL vs TLS
cybersecbeginner - Multiple ChoiceBeginner
Subnet Mask
cybersecbeginner - Multiple ChoiceIntermediate
TCP Flags
cybersecintermediate - Multiple ChoiceIntermediate
TCP 3-Way Handshake
cybersecintermediate - Multiple ChoiceBeginner
TCP vs UDP
cybersecbeginner - Multiple ChoiceBeginner
Telnet vs SSH
cybersecbeginner - Multiple ChoiceIntermediate
UDP Properties
cybersecintermediate - Multiple ChoiceHard
VLAN Hopping
cybersechard - Multiple ChoiceBeginner
VPN: Purpose
cybersecbeginner - Multiple ChoiceBeginner
Recon: DNS Enum
cybersecbeginner - Multiple ChoiceBeginner
Recon: Port Scanning
cybersecbeginner - Multiple ChoiceBeginner
OSINT: Definition
cybersecbeginner - Multiple ChoiceBeginner
Social Engineering
cybersecbeginner - Multiple ChoiceBeginner
Recon: WHOIS
cybersecbeginner - Multiple ChoiceBeginner
Authentication Factors
cybersecbeginner - Multiple ChoiceBeginner
Blue Team
cybersecbeginner - Multiple ChoiceBeginner
CIA Triad: Components
cybersecbeginner - Multiple ChoiceBeginner
Defense in Depth
cybersecbeginner - Multiple ChoiceIntermediate
Cyber Kill Chain
cybersecintermediate - Multiple ChoiceBeginner
Least Privilege
cybersecbeginner - Multiple ChoiceBeginner
Multi-Factor Auth
cybersecbeginner - Multiple ChoiceIntermediate
MITRE ATT&CK
cybersecintermediate - Multiple ChoiceBeginner
Patch Management
cybersecbeginner - Multiple ChoiceBeginner
Penetration Testing
cybersecbeginner - Multiple ChoiceBeginner
Red Team
cybersecbeginner - Multiple ChoiceBeginner
Risk Management
cybersecbeginner - Multiple ChoiceBeginner
Security Audit
cybersecbeginner - Multiple ChoiceIntermediate
STRIDE Model
cybersecintermediate - Multiple ChoiceBeginner
Threat Modeling
cybersecbeginner - Multiple ChoiceBeginner
Vulnerability Scanning
cybersecbeginner - Multiple ChoiceBeginner
Zero Trust
cybersecbeginner - Multiple ChoiceIntermediate
API Key vs Token
cybersecintermediate - Multiple ChoiceIntermediate
API Rate Limiting
cybersecintermediate - Multiple ChoiceIntermediate
Brute Force Defense
cybersecintermediate - Multiple ChoiceIntermediate
Cache Poisoning
cybersecintermediate - Multiple ChoiceIntermediate
Clickjacking
cybersecintermediate - Multiple ChoiceBeginner
Cookies: HttpOnly
cybersecbeginner - Multiple ChoiceBeginner
Cookies: Secure Flag
cybersecbeginner - Multiple ChoiceIntermediate
CORS: Purpose
cybersecintermediate - Multiple ChoiceIntermediate
CORS Preflight
cybersecintermediate - Multiple ChoiceIntermediate
Credential Stuffing
cybersecintermediate - Multiple ChoiceIntermediate
CSP: Purpose
cybersecintermediate - Multiple ChoiceIntermediate
CSRF: Token Defense
cybersecintermediate - Multiple ChoiceIntermediate
GraphQL Introspection
cybersecintermediate - Multiple ChoiceIntermediate
Host Header Injection
cybersecintermediate - Multiple ChoiceIntermediate
HSTS
cybersecintermediate - Multiple ChoiceIntermediate
HTTP Desync
cybersecintermediate - Multiple ChoiceIntermediate
HttpOnly Cookie Flag
cybersecintermediate - Multiple ChoiceBeginner
HTTPS: Browser Indicator
cybersecbeginner - Multiple ChoiceIntermediate
IDOR
cybersecintermediate - Multiple ChoiceIntermediate
JWT Storage
cybersecintermediate - Multiple ChoiceIntermediate
Mass Assignment
cybersecintermediate - Multiple ChoiceIntermediate
OAuth: Consent Phishing
cybersecintermediate - Multiple ChoiceIntermediate
Open Redirect
cybersecintermediate - Multiple ChoiceBeginner
Same-Origin Policy
cybersecbeginner - Multiple ChoiceIntermediate
SameSite Cookie Attribute
cybersecintermediate - Multiple ChoiceIntermediate
Same-Origin Details
cybersecintermediate - Multiple ChoiceIntermediate
SQLi: Blind
cybersecintermediate - Multiple ChoiceBeginner
SQL Injection: Definition
cybersecbeginner
Practice now, dominate the arena
Every challenge here is drawn from the live Code Royale pool. Review a question, then head to the arena to answer under pressure against a real opponent — 3-minute matches, Elo ranking, and badge tiers on the line.