Quiz Template - Technical Onboarding
This document presents a reusable example of a technical quiz for knowledge validation in the context of initial training (onboarding) in security.
It may be adapted by profile, risk level or chapter of the SbD-ToE Manual, and is especially useful in training tracks for developers.
🎯 Objective
- Objective validation of the assimilation of essential security content
- Provision of an auditable record of the completion of technical onboarding
- Reinforcement of key concepts through realistic examples
📦 Context of use
| Situation | Recommended application |
|---|---|
| Onboarding of a new Dev | Use after completion of the initial training track |
| Change of stack or project | Validation of the knowledge specific to the new context |
| Reinforcement of continuous training | Integrate as an annual revalidation (e.g. access review) |
| Checkpoint for technical access | Associate with the unlocking of permissions (e.g. Git, CI/CD) |
It may be used in an LMS, a Google Form, a GitHub Issue with markdown, or integrated into the onboarding flow via pipelines/scripts.
🧪 Example quiz: Dev on an L2 application
-
Which of these practices is mandatory when merging a PR?
- a) Resolve all conflicts automatically
- b) Validate the security requirements applicable to the application
- c) Run only
npm install - d) Ignore unused dependencies
✅ Correct answer: b)
-
What is the risk of leaving a secret in the source code?
- a) None, if it is a temporary token
- b) It may lead to unauthorised access and compromise the environment
- c) It only makes the build slower
- d) It is acceptable if it is on a private branch
✅ Correct answer: b)
-
Which of these tools is used to check for insecure dependencies?
- a) ESLint
- b) Git
- c) SCA (e.g. Xygeni, OWASP Dependency-Check)
- d) Jenkins
✅ Correct answer: c)
📌 Good practices for use
- Adapt the questions to the content actually taught in the track
- Include immediate feedback with an explanation of the answers
- Ensure a record of completion (minimum score, evidence of submission)
- Reuse questions in clinics, internal quizzes or training games
🔗 Useful links
| Document | Relevance |
|---|---|
03-checklist-onboarding.md | Checklist in which this quiz may be referenced |
trilho-formativo.md | Indicates when and for whom to apply the quiz |
90-catalogo-formativo.md | Lists the topics that must be covered |
🎯 This template may be duplicated and adapted by chapter, role or criticality - ensuring traceability and alignment with the SbD-ToE Manual.