Thanks for pointing this out.
Answer for #14 is wrong. You should NOT employ SSL for web servers. SSL is deprecated and only TLS connections should be used. IETF deprecated SSL2 in 2011 and SSL3 in 2015 (rfc7568). https://tools.ietf.org/html/rfc7568
30 June 2018 was the deadline for disabling SSL and early TLS for PCI DSS. You should be using TLS 1.1 or higher, 1.2 strongly recommended.
If you're going to give a quiz promoting security, _please_ give out correct advice.