Practice: Security Checklist Challenge

Relax. We'll talk through this in plain words — no textbook voice.

What you'll walk away with

Understand Practice: Security Checklist Challenge without any of the intimidation
Apply this concept right away in real-world scenarios
Get comfortable avoiding security risks for yourself and the people around you

Let's think about this for a second

Practice set 2 is a comprehensive checklist that pulls together everything up through the Advanced chapter (OWASP, SQL Injection, Linux hardening) — a way to review the entire journey of this tutorial so it feels 'complete'.

Let's connect this to a real scenario

Fill in a checklist across 4 categories — Personal (password/2FA/backup), Network (router/Wi-Fi/VPN), Web/App Development (OWASP awareness/secret management), and Server (Linux hardening). Write 3-5 items per category and mark your current status as 'Done' or 'Need to fix' for each.

Cover all 4 categories: Personal, Network, Web/App, Server
Write 3-5 items for each category
Put your 'Need to fix' items in priority order

Let's look at this together

text

Comprehensive Security Checklist
-----------------------------------
Personal:
  [ ] Password manager သုံးနေပြီလား
  [ ] Critical account တွေမှာ 2FA ဖွင့်ထားပြီလား
  [ ] 3-2-1 backup rule လိုက်နေပြီလား

Network:
  [ ] Router default password ပြောင်းထားပြီလား
  [ ] Public Wi-Fi မှာ VPN သုံးနေပြီလား

Web/App:
  [ ] Secret ကို env variable ထဲ ခွဲထားပြီလား
  [ ] Input validation/parameterized query သုံးထားပြီလား

Server:
  [ ] SSH key-only auth ဖွင့်ထားပြီလား
  [ ] fail2ban/firewall setup ထားပြီလား

You should see

You'll fill out a comprehensive security checklist covering all 4 categories.

Try it in 5 minutes

Fill in the checklist based on your own status, then figure out which category has the most 'Need to fix' items — start your next step there.

A quick word of caution

This checklist is just a starting point — it's not a substitute for a professional security audit or penetration test on a production environment (a real company server).

Easy traps

Overestimating yourself because you want every checklist item to say 'Done' instead of doing an honest self-assessment
Thinking you're 'finished' once the checklist is filled in — security is an ongoing process that needs regular revisiting

Now try it yourself

Fill in the checklist based on your own status, then figure out which category has the most 'Need to fix' items — start your next step there.

You'll know it worked when: You'll fill out a comprehensive security checklist covering all 4 categories.