Practice Mitigation Strategies (1.4.2) - Advanced Front-End Development

Practise this section

9 questions

Flashcard drill
4 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
3 questions · about 2 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What does CSP stand for in web security?
Show hintHide hint
Think about what content sources you can trust.
Question 2.
What does sanitizing inputs prevent?
Show hintHide hint
Consider what happens if bad code is allowed into your application.
3Question 3.
What is the primary purpose of a Content Security Policy?
- A. To define user permissions
- B. To protect against XSS
- C. To manage cookies
Show hintHide hint
Consider its role in specifying specific sources for content.
4Question 4.
True or False: HttpOnly cookies can be accessed by JavaScript.
- True
- False
Show hintHide hint
Remember what HttpOnly is designed to protect against.
Question 5.
Create a CSP that allows scripts only from your own domain and a specific CDN.
Show hintHide hint
Focus on defining where scripts can come from.
Question 6.
Discuss the implications of ignoring sanitization in web applications?
Show hintHide hint
Think about the consequences of allowing malicious scripts.

5 more questions in this section. Enroll free to practise them all.