Practical Security Automation and Testing

Questions

1. What's the typical order of a ZAP scan?
   1. Spider scan → Active scan → Alerts → Shutdown
   2. Active Scan → Spider Scan → Alerts → Shutdown
   3. Active scan → Alerts → Shutdown
2. In ZAP, what's the key difference between a spider scan and an active scan?
   1. A spider scan involves monitoring security issues in passive mode
   2. An active scan will send malicious requests
   3. An active scan does specific security testing based on the scan policy
   4. All of the above

3. Which automation framework cannot be used to automate the user registration flow?
   1. Selenium
   2. SeleniumBase
   3. All of the above
4. What can be required to execute the user registration flow automation?
   1. Selenium
   2. Selenium ChromeDriver
   3. All of the above