Practice Security Headers And Best Practices (1..4) - Security and Best Practices in Advanced Full Stack Web Development

Practice: Security Headers and Best Practices

Lesson 1..4Security and Best Practices in Advanced Full Stack Web Development

Practise this section

10 questions

Flashcard drill
4 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
4 questions · about 3 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What does CSP stand for?
Show hintHide hint
Think about web security measures.
Question 2.
What does the X in X-Frame-Options prevent?
Show hintHide hint
Consider iframe vulnerabilities.
3Question 3.
What is the main purpose of the Content Security Policy?
- To allow any script to run
- To prevent XSS attacks
- To allow image loading from any domain
Show hintHide hint
Consider the types of attacks a CSP guards against.
4Question 4.
HTTP Strict Transport Security ensures that browsers can only connect via what?
- True (HTTPS)
- False (HTTP)
Show hintHide hint
Think of the difference between HTTP and HTTPS.
Question 5.
Draft a Content Security Policy that restrictively allows scripts to load only from your domain and a specific API. Justify your choices in a short paragraph.
Show hintHide hint
Focus on limiting script origins.
Question 6.
Evaluate the potential vulnerabilities of a site that does not implement HSTS. Provide examples in your response.
Show hintHide hint
Think about what happens in unsecured connections.

6 more questions in this section. Enroll free to practise them all.