Validates foundational and intermediate application security knowledge across the OWASP Top 10,
secure coding practices, and real-world vulnerability identification and remediation
— tested through scenario-based questions that mirror production security decisions