Questions Quizzes Daily challenge System design My attempts

Loading questions…

Practice / Questions

Question bank.

Explore 2,015 questions across 22 categories. Choose a subject, format, and difficulty, then learn from each explanation.

Prefer a full quiz? Browse quizzes →

Find a question

Search questions

Category

Topic

Question format

Difficulty

81 questions found

Showing 1–20 of 81 results

1 2 3 4 5

Application security · Multiple Choice
Difficulty: Easy
What process establishes the identity of a user or other requesting principal?
Access control principlesTrust boundaries
Answer →
Application security · Multiple Choice
Difficulty: Easy
What process decides whether an authenticated or anonymous principal may perform a particular operation?

Access control principlesTrust boundaries

Application security · Multiple Choice

Difficulty: Easy

What principle grants only the permissions needed to perform the required task?

Access control principlesTrust boundaries

Application security · Multiple Choice

Difficulty: Easy

What principle uses several independent protective layers instead of relying on one control?

Access control principlesTrust boundaries

Application security · Multiple Choice

Difficulty: Easy

What access-control policy rejects requests unless a rule explicitly grants the needed permission?

Access control principlesTrust boundaries

Application security · Multiple Choice

Difficulty: Medium

What unique per-password value is stored alongside a password hash to prevent identical passwords from sharing the same stored hash?

Password protectionCredential storage

Application security · Multiple Choice

Difficulty: Medium

Which password-hashing variant combines Argon2i-style and Argon2d-style approaches with configurable memory cost?

Password protectionCredential storage

Application security · Multiple Choice

Difficulty: Medium

Which password-hashing scheme uses a configurable work factor and is based on the Blowfish cipher design?

Password protectionCredential storage

Application security · Multiple Choice

Difficulty: Medium

What secret value is kept separately from stored password hashes to provide an additional credential-protection layer?

Password protectionCredential storage

Application security · Multiple Choice

Difficulty: Medium

What short-lived, unpredictable credential permits a user to complete a password-reset flow?

Password protectionCredential storage

Application security · Multiple Choice

Difficulty: Medium

What attack persists untrusted executable content that is later rendered to other users?

Browser attacksWeb application threats

Application security · Multiple Choice

Difficulty: Medium

What attack returns malicious request input in an immediate page response without safe context-appropriate encoding?

Browser attacksWeb application threats

Application security · Multiple Choice

Difficulty: Medium

What attack occurs when client-side code places attacker-controlled data into an unsafe executable DOM context?

Browser attacksWeb application threats

Application security · Multiple Choice

Difficulty: Medium

What attack tricks a victim's browser into making an unwanted authenticated state-changing request?

Browser attacksWeb application threats

Application security · Multiple Choice

Difficulty: Medium

What attack overlays or disguises an interface so a user unknowingly clicks a different target?

Browser attacksWeb application threats

Application security · Multiple Choice

Difficulty: Medium

What vulnerability lets untrusted input alter a database command's SQL structure?

Injection flawsUntrusted input

Application security · Multiple Choice

Difficulty: Hard

What vulnerability lets untrusted input introduce unintended operating-system command behavior?

Injection flawsUntrusted input

Application security · Multiple Choice

Difficulty: Hard

What vulnerability lets untrusted input change the structure of a directory-service query filter?

Injection flawsUntrusted input

Application security · Multiple Choice

Difficulty: Hard

What vulnerability causes untrusted input to be interpreted as executable template instructions on the server?

Injection flawsUntrusted input

Application security · Multiple Choice

Difficulty: Medium

What vulnerability lets an attacker escape an intended filesystem location through manipulated path components?

Injection flawsUntrusted input

Showing 1–20 of 81 results

1 2 3 4 5