Modern Web Security Fundamentals

1

What does XSS stand for?

Cross-Site Scripting Cross-Server Scripting Client-Side Scripting Cross-Site Styling

2

Which HTTP header helps prevent clickjacking?

X-Content-Type-Options X-Frame-Options Content-Security-Policy Strict-Transport-Security

3

What is SQL injection?

A database backup method Inserting malicious SQL into queries A type of encryption A SQL optimization technique

4

What does HTTPS ensure?

Faster page loads Encrypted communication between client and server Better SEO ranking only Server-side caching

5

What is CSRF?

Client-Side Request Forgery Cross-Site Request Forgery Cross-Server Resource Fetching Client-Side Resource Filtering

6

Which of the following is a secure password hashing algorithm?

MD5 SHA1 bcrypt Base64

7

What is the principle of least privilege?

Give users maximum access Give users only the access they need Remove all user access Encrypt all user data

8

What does a WAF protect against?

Hardware failures Web application attacks Network latency DNS resolution

9

What is Content Security Policy (CSP)?

A server configuration file An HTTP header that controls resource loading A JavaScript framework A CSS methodology

10

What is the purpose of input validation?

Improve UI design Prevent malicious data from being processed Speed up database queries Reduce bandwidth usage