In a quiz with multiple security questions, I'd give bonus points to an applicant who found security problems.