Web Security

Q1. What is HTTPS?

1. A.HTTP with encryption using TLS/SSL for security✓ Correct
2. B.A database protocol for encrypted connections
3. C.A faster version of HTTP for static content
4. D.A programming language for server applications

Report an error in this question

Q2. What is a password hash?

1. A.A one-way transformation into a fixed-length string✓ Correct
2. B.A password hint for helping users remember
3. C.A password reset link sent via email notification
4. D.An encrypted password stored with a cipher key

Report an error in this question

Q3. What is XSS (Cross-Site Scripting)?

1. A.A JavaScript framework for building secure apps
2. B.A CSS extension for adding custom properties
3. C.A vulnerability where malicious scripts are injected✓ Correct
4. D.A database attack targeting stored procedures

Report an error in this question

Q4. What is a firewall?

1. A.A NoSQL database for storing security records
2. B.A JavaScript library for client-side validation
3. C.A CSS border property for styling elements
4. D.A system monitoring and controlling network traffic✓ Correct

Report an error in this question

Q5. What is authentication?

1. A.A JavaScript function for data validation
2. B.The process of verifying a user's identity✓ Correct
3. C.A CSS technique for styling form elements
4. D.Authorizing access to protected resources

Report an error in this question

Q6. What is a cookie in web security?

1. A.A CSS property for styling decorated elements
2. B.A small data piece stored for session management✓ Correct
3. C.A browser game for entertainment purposes
4. D.A JavaScript variable stored in local memory

Report an error in this question

Q7. What does SSL stand for?

1. A.Secure Socket Layer✓ Correct
2. B.Simple Security Layer
3. C.Secure Server Link
4. D.Server Side Logic

Report an error in this question

Q8. What is a CAPTCHA?

1. A.A test distinguishing humans from automated bots✓ Correct
2. B.A type of database for storing user accounts
3. C.A JavaScript function for validating form data
4. D.A CSS framework for building secure page layouts

Report an error in this question

Q9. What is two-factor authentication (2FA)?

1. A.Using two passwords for login authentication
2. B.Using two browsers for testing compatibility
3. C.Having two accounts for backup and recovery
4. D.A method requiring two forms of identification✓ Correct

Report an error in this question

Q10. Why should user input be validated?

1. A.To improve SEO ranking in search engine results
2. B.To improve CSS styling across different browsers
3. C.To speed up the database query execution time
4. D.To prevent malicious data and protect against attacks✓ Correct

Report an error in this question

Q11. What is CSRF (Cross-Site Request Forgery)?

1. A.An attack tricking users into actions on authenticated sites✓ Correct
2. B.A CSS framework for building styled web components
3. C.A JavaScript error caused by invalid syntax in code
4. D.A database attack targeting table join vulnerabilities

Report an error in this question

Q12. How is CSRF typically prevented?

1. A.Disabling JavaScript execution in the browser
2. B.Using anti-CSRF tokens to verify request origin✓ Correct
3. C.Using CSS styles to hide form submission buttons
4. D.Using longer and more complex user passwords

Report an error in this question

Q13. What is Content Security Policy (CSP)?

1. A.A database policy for query execution permissions
2. B.A JavaScript policy for variable access control
3. C.A CSS policy for restricting style inheritance
4. D.An HTTP header restricting which resources load✓ Correct

Report an error in this question

Q14. What is JWT (JSON Web Token)?

1. A.A database token for authenticating query access
2. B.A compact self-contained token for secure data transfer✓ Correct
3. C.A CSS token for custom property values
4. D.A JavaScript variable for storing session data

Report an error in this question

Q15. What is the principle of least privilege?

1. A.Disabling all non-essential application features
2. B.Giving admin access to every application user
3. C.Granting users only the minimum needed permissions✓ Correct
4. D.Using the simplest possible password for accounts

Report an error in this question

Q16. What is input sanitization?

1. A.Compressing HTML to reduce the total page size
2. B.Formatting JSON data for consistent key ordering
3. C.Removing or encoding dangerous characters from input✓ Correct
4. D.Cleaning CSS code by removing unused selectors

Report an error in this question

Q17. What is CORS and why is it a security concern?

1. A.A JavaScript library for making HTTP request calls
2. B.Cross-Origin Resource Sharing; misconfiguration exposes data✓ Correct
3. C.A CSS framework for cross-browser styling consistency
4. D.A NoSQL database system for document-based storage

Report an error in this question

Q18. What is a brute force attack?

1. A.A CSS technique for overriding existing style rules
2. B.Systematically trying all possible password combinations✓ Correct
3. C.A physical attack on server hardware infrastructure
4. D.A network protocol for secure data transmission

Report an error in this question

Q19. What is the purpose of the HttpOnly cookie flag?

1. A.To encrypt the cookie data using symmetric encryption
2. B.To prevent JavaScript from accessing the cookie✓ Correct
3. C.To make cookies only work over HTTP connections
4. D.To make the cookie persistent across browser sessions

Report an error in this question

Q20. What is OWASP?

1. A.A web framework for building server applications
2. B.A CSS standard for defining stylesheet specifications
3. C.A relational database system for enterprise apps
4. D.The Open Web Application Security Project guidelines✓ Correct

Report an error in this question

Q21. What is a SQL injection attack and how is it prevented?

1. A.A CSS vulnerability from untrusted stylesheet loading
2. B.A database feature for optimizing query performance
3. C.Inserting malicious SQL; prevented by parameterized queries✓ Correct
4. D.A JavaScript error from uncaught promise rejections

Report an error in this question

Q22. What is the difference between symmetric and asymmetric encryption?

1. A.They are identical in their encryption approach
2. B.Asymmetric is always faster than symmetric encryption
3. C.Symmetric uses one key; asymmetric uses a key pair✓ Correct
4. D.Symmetric encryption requires two separate keys

Report an error in this question

Q23. What is a man-in-the-middle (MITM) attack?

1. A.A database corruption from concurrent write conflicts
2. B.An attack intercepting communication between two parties✓ Correct
3. C.A network administrator managing server infrastructure
4. D.A CSS hack for overriding conflicting style declarations

Report an error in this question

Q24. What is the SameSite cookie attribute?

1. A.An attribute controlling cookies in cross-site requests✓ Correct
2. B.A site name attribute used in HTML anchor tags
3. C.A CSS property for styling site-specific page elements
4. D.A database attribute for defining column data constraints

Report an error in this question

Q25. What is a zero-day vulnerability?

1. A.A CSS bug affecting zero-width element rendering
2. B.A vulnerability lasting zero days before being fixed
3. C.A database error caused by zero-division in queries
4. D.A security flaw exploited before the vendor has a patch✓ Correct

Report an error in this question

Q26. What is OAuth 2.0?

1. A.An authorization framework for limited third-party access✓ Correct
2. B.A JavaScript library for building authentication flows
3. C.A CSS standard for defining cross-browser specifications
4. D.A database protocol for encrypted data transmission

Report an error in this question

Q27. What is Subresource Integrity (SRI)?

1. A.A database integrity check for verifying data consistency
2. B.A CSS property for defining element integrity
3. C.A feature verifying fetched resources are not tampered with✓ Correct
4. D.A JavaScript framework for building secure web apps

Report an error in this question

Q28. What is the purpose of rate limiting in security?

1. A.Limiting the speed of CSS transition animations
2. B.Restricting request frequency to prevent brute force✓ Correct
3. C.Limiting the number of page loads per session
4. D.Limiting the number of database queries per session

Report an error in this question

Q29. What is X-Frame-Options used for?

1. A.A CSS frame property for creating bordered layouts
2. B.Preventing iframe embedding to stop clickjacking✓ Correct
3. C.A JavaScript frame option for window management
4. D.Framing images within decorative CSS borders

Report an error in this question

Q30. What is the difference between encryption at rest and in transit?

1. A.At rest encryption is only for database systems
2. B.At rest encrypts stored data; in transit encrypts transmitted✓ Correct
3. C.They are identical in their security approach
4. D.In transit encryption is only for local file systems

Report an error in this question