Bump your /version.php file to force Moodle to reload the Mobile service Create a course with a student. Create a new quiz with 3 different question types, the last one should be a random question type pointing to a category with at least two different question types As admin, enable "Mobile services": Plugins ► Web Services ► Mobile Create a Token for the student user Click on Site administration ► Plugins ► Web services ► Manage tokens Next, you can do a CURL REST call simulating a WS client with the student user . You need to replace the wstoken, quizid (the quiz instance value) and the URL of your moodle instance curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'quizid=2&wsfunction=mod_quiz_get_quiz_access_information&wstoken=ffbe3a3002f235bf9d01fd9369e10b66' --compressed Confirm that You see the following values to true: canattempt, canreviewmyattempts Execute the following curl request curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'quizid=2&wsfunction=mod_quiz_get_quiz_required_qtypes&wstoken=ffbe3a3002f235bf9d01fd9369e10b66' --compressed And check that you receive all the question types used, including the ones in the random category Now as admin or teacher edit the quiz settings, add a password restriction, limit the number of attempts two 1 and add a future date for time open and time close Run the WS again, check that now: in accessrules you see listed all the new settings you applied, in preventaccessreasons you see "This quiz is not currently available" (because is not open yet) Now, as admin, remove all the restrictions except the attempt number that must be 1 Now, as the student, access the Moodle web interface and do the quiz one time (do one attempt and ensure that is finished) Run the following query using the student token again curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'quizid=2&wsfunction=mod_quiz_get_attempt_access_information&wstoken=ffbe3a3002f235bf9d01fd9369e10b66' --compressed You should see that preventnewattemptreasons says "No more attempts are allowed" and isfinished set to true