Web & Security

Which one of these languages can be used for dynamic website content?

• CSS

• YAML

• HTML

• JavaScript

Select the shown web architecture

• Static Website

• Server-side rendering

• Single Page Application

• Docker-shipping Website

What is no disadvantage of server-side rendering?

• High server load

• No data-based interfaces

• No dynamic content

• Hard to scale

Authorization (AuthZ) means asking whether...

• ...the user is who they claim to be

• ...the user is allowed to do this

• ...the user is signed in

• ...the user would like to do something

How do you call the method of the validating user input to prevent XSS attacks?

• Cleaning

• Sanitization

• Disinfection

• Scanning

What could lead to an XSS attack?

• A website rendering user input without validation

• A website not using HTTPS

• A website not checking for CORS headers

• A website not using brute-force preventions

You need to validate a JWT by asking the identity provider whether it is actually valid

• True

• False

What does Eventual Conistency mean?

• Data is sometimes consistent, sometimes not

• The system will become consistent over time

• You have to enforce data consistency manually

• Data consistency depends on specific events

What is no advantage of client-side rendering?

• Higher performance through dynamic loading of content

• Lower development effort

• Static HTML site can be cached easily

• Less computing power needed for servers

CSRF stands for

• Cryptic-system Reconfiguration Framework

• Cognitive Signal Recognition Fraud

• Cookie Spoofing Redistribution Flaw

• Cross-site Request Forgery