Q1easy
Analyze this Node.js code snippet. Why is it vulnerable to SQL Injection?
Back to Cyber Security
14 Questions Total
Web Application Security MCQs
Topic-wise practice questions for Cyber Security. Test your knowledge, check solutions on demand, and pace your preparation.
Zero-leak answer engine • Rate-limited explanations
Practice in Timed ModeQ2easy
Why is the HttpOnly flag on a cookie important for security?
Q3easy
What is the difference between Authentication and Session Management?
Q4easy
What is the primary defense against Cross-Site Request Forgery (CSRF) attacks?
Q5medium
A user changes the URL from mysite.com/invoice/500 to mysite.com/invoice/501 and is able to see someone else's private invoice. This vulnerability is known as:
Q6medium
An attacker discovers an application's hidden administrative URL / admin_backup_setup_hidden by guessing the name. This is an example of which OWASP category?
Q7easy
What is the "Least Privilege" principle applied to a web application's database user?
Q8easy
What does HSTS (HTTP Strict Transport Security) achieve?
Q9medium
To prevent XSS, a developer converts the character < into < before displaying user-provided text on a page. This process is called:
Q10medium
Which HTTP header is used to prevent the browser from rendering a page inside an <iframe>, effectively stopping Clickjacking attacks?