Practice Content Security Policy (csp) (1.4.1) - Security and Best Practices in Advanced Full Stack Web Development

Practice: Content Security Policy (CSP)

Lesson 1.4.1Security and Best Practices in Advanced Full Stack Web Development

Practise this section

8 questions

Flashcard drill
4 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
2 questions · about 1 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What does CSP stand for?
Show hintHide hint
Think of website security.
Question 2.
What is the primary use of CSP?
Show hintHide hint
Consider preventing unauthorized scripts.
3Question 3.
What is the main function of a Content Security Policy (CSP)?
- To encrypt user data
- To control resource loading
- To minimize load time
Show hintHide hint
Think about preventing bad scripts.
4Question 4.
True or False: CSP allows every script to execute as long as they come from the same domain.
- True
- False
Show hintHide hint
Consider additional safety precautions.
Question 5.
Given a list of external sources, create a CSP header that only permits scripts from those sources: https://example1.com and https://example2.com while blocking all others.
Show hintHide hint
Start by identifying your trusted sources.
Question 6.
Analyze a sample CSP header that allows many sources; discuss how it can potentially create vulnerabilities and suggest improvements.
Show hintHide hint
Look at the areas where permission is too broad.

4 more questions in this section. Enroll free to practise them all.