Hi @buikem you have sufficient knowledge on basic security on steem demonstrate through this post.

In addition to these, I have also learned how to transfer token from my account to another user. And that for this I would need my master or active key.

as for this transaction, you only need your active key. You don't need to use your Master Password and Owner key for transferring token or log in to any applications or website on steem blockchain.

Master Password and Owner keys are meant to keep offline and only be used for changing your other keys.

Congratulations! You have passed the Achievement 2 on Basic Security, now please get ready for your post on the next for Achievement 3: Content Etiquette here
See you soon! 😊