Nodejs: Security

Which of the following ensure a secure system

• Authentication and Authorization

• Validating User input

• Rate limiting

• All of the options

An attacker keeps sending multiple requests in hopes of bringing down my system. What type of attack is this?

• DDOS

• Cross-Site Scripting

• Zero Day Exploits

• Credential Attacks

What involves manipulating individuals into divulging confidential information or performing actions that may compromise their security?

• Credential attack

• Social Engineering

• Zero Day exploits

• Insider threats

What if the full meaning of OWASP

• Open Worldwide Application Security Project

• Open World Application Secure Project

• Open Worldwide Application Security Program

• Open Worldwide Aptitude Security Project

A malicious software that encrypts a user's data, demanding payment (usually in cryptocurrency) for its release is called?

• KidnAPP

• Ransomware

• Spyware

• Malware

In a fintech app, after releasing a feature, attacker realize they are able to withdraw funds above their current balance due to some vulnerabilities. What type threat is that?

• SQL injection

• Zero day exploits

• DDOS

• Phishing Attacks

How can you protect backend systems from brute force attacks on user credentials?

• Enforcing complex password policies

• Using multi-factor authentication

• Implementing account lockout mechanisms

• All of the above

Why is it important to keep backend system software and libraries up to date?

• To optimize database performance

• To reduce server load

• To patch security vulnerabilities

• To improve frontend user experience

How does role-based access control (RBAC) contribute to backend security?

• By enforcing complex password policies

• By controlling access based on user roles and responsibilities

• By optimizing database queries

• By encrypting data in transit

What is the purpose of input validation in the context of securing a backend system?

• Preventing buffer overflow attacks

• Protecting against unauthorized access

• Validating and sanitizing user input to prevent security vulnerabilities

• Improving server performance