Secure Coding 9-15

Question 1

What is the purpose of X-Frame-Options in HTTP headers?

Accepted Answer

Prevent clickjacking

Question 2

What feature does MongoDB offer to protect sensitive data in transit and at rest?

Accepted Answer

Encryption

Question 3

A best practice for managing classified data includes:

Accepted Answer

Encrypting at rest and in transit

Question 4

Which principle suggests re-authorizing high-value transactions?

Accepted Answer

Secure Architecture

Question 5

What data type is considered the most sensitive and damaging if leaked?

Accepted Answer

Restricted

Question 6

Which tool is commonly used in Express apps to set secure HTTP headers?

Accepted Answer

helmet.js

Question 7

In STRIDE, which threat violates Integrity?

Accepted Answer

Tampering

Question 8

Which tool helps detect vulnerabilities in Node apps?

Accepted Answer

Snyk

Question 9

What are the 5 core functions of the NIST Cybersecurity Framework?

Accepted Answer

Identify, Protect, Detect, Respond, Recover

Question 10

What is a critical React security best practice?

Accepted Answer

Sanitize user input

Question 11

What helps prevent cross-site scripting (XSS) in React?

Accepted Answer

Content Security Policy (CSP)

Question 12

What’s a key principle when assigning permissions in a Node app?

Accepted Answer

Grant least privilege

Question 13

What is a key reason to limit remote access to MongoDB?

Accepted Answer

Reduce risk of unauthorized access

Question 14

What’s the purpose of DREAD in threat modeling?

Accepted Answer

Quantify risk by evaluating severity

Questions 14