Sales built a customer portal in an AI app builder over the weekend and wants to send it to 50 customers on Monday. What do you check first?

A tenth of apps in one audit exposed their database to anyone. Check access control on every table, keys in the client, auth with a second account and an owner for the findings before any customer sees the link.

Updated Nov 2026 · Original practice questions with worked answers and teaching rubrics. Our editorial policy explains the sources, review process and limits.