stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
New W12 Quiz Flashcards | StudBud
Explore
/
New W12 Quiz
New W12 Quiz
20 terms
·
StudBud Administration
·
424 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
Which of these is Anthony's favorite music genre:
Metal
LoFi
Rap
J-Rock
2
Do JWTs hide sensitive data?
No
Yes
3
Rendering a button that can steal data from localStorage is an example of...
a brute force attack
an XSS attack
a weak/ambiguous CORS policy
a CSRF attack
4
Which of the following is NOT true about salting a password before it’s hashed?
Ensures any given password always results in the same hash
Helps prevent rainbow table attacks
Ensures every hash is highly likely to be unique
Diminishes the effectiveness of brute force attacks
5
If I want to edit the details of a pet, which path conforms best to the RESTful convention?
/pets/:id/owners
/owners/pets/:id
/owners/:ownerId/pets/:petId
/pets/:id
6
Which EDM artists does Franco listen to while coding?
SG Lewis
Avicii
Disclosure
Swedish House Mafia
7
When discussing web security, a “role” is
An allowed action
A small unit of bread
A set of user permissions
A job
8
If I want to find all pets related to an owner, which path conforms best to the RESTful convention?
/owners/:id/pets
/owners/pets/:id
/:id/owners/pets
/pets/:id/owners
9
Identify the correct order of operations for login authentication in your Auth Me projects
BCAD
CABD
CDBA
ABCD
10
To send a CSS file to the client from an Express server, we use which middleware?
express.json()
express.static()
express.parse()
11
Which of these Maplestory BGMs is Jojo's favorite?
Henesys
Cash Shop
Login/Intro
Kerning City
12
Which method of obscuring data would best protect information that needs to be viewed later?
Salting
Encoding
Hashing
Encrypting
13
In bcrypt's hash function, a higher cost factor DECREASES the time it takes to hash a string
False
True
14
Which of these is not a scrum role?
Feature Manager
Developer
Scrum master
Project owner
15
Is this code vulnerable to XSS attacks?
No
Yes
16
How many tokens does CSRF protection use?
3
1
None
2
17
Who enforces a CORS policy?
The Browser
The FCC
The Server
Sheer force of will
18
Which of these items are NOT used to create a JWT’s signature?
Header
Payload
Hashed password
Secret key
19
Which of these is NOT a good use case for sequelize scopes?
Making it easy to query for users without retrieving sensitive data
Reusing commonly applied query constraints
Allows you to never need to write detailed queries in your end points
20
Can cors protection be applied to specific routes instead of the entire application?
Yes
No
