Questions Quizzes Daily challenge System design My attempts

Loading questions…

Practice / Questions

Question bank.

Explore 2,015 questions across 22 categories. Choose a subject, format, and difficulty, then learn from each explanation.

Prefer a full quiz? Browse quizzes →

Find a question

Search questions

Category

Topic

Question format

Difficulty

2,015 questions to explore

Showing 261–280 of 2015 results

1…13 14 15…101

Application security · Fill in the Blank
Difficulty: Easy
Fill in the name of a unique per-password value stored alongside a password hash: ____.
PasswordsCode completion
Answer →
Application security · Fill in the Blank
Difficulty: Easy
Fill in the cookie attribute that prevents ordinary document.cookie access: ____.

CookiesCode completion

Application security · Fill in the Blank

Difficulty: Easy

Fill in the secure HTTP scheme prefix: ____://example.com.

TransportCode completion

Application security · Fill in the Blank

Difficulty: Easy

Fill in the principle: grant the minimum necessary permissions, also called least ____.

AuthorizationCode completion

Application security · Fill in the Blank

Difficulty: Easy

Fill in the safe query technique that binds values separately from SQL syntax: ____ queries.

Database accessCode completion

Application security · Matching

Difficulty: Medium

Match the descriptions to these access control principles terms: Authentication, Authorization, Least privilege, Defense in depth.

Access control principlesConcept relationships

Application security · Matching

Difficulty: Medium

Match the descriptions to these password protection terms: Password salt, Argon2id, bcrypt, Password pepper.

Password protectionConcept relationships

Application security · Matching

Difficulty: Medium

Match the descriptions to these browser attacks terms: Stored XSS, Reflected XSS, DOM-based XSS, CSRF.

Browser attacksConcept relationships

Application security · Matching

Difficulty: Hard

Match the descriptions to these injection flaws terms: SQL injection, Command injection, LDAP injection, Server-side template injection.

Injection flawsConcept relationships

Application security · Matching

Difficulty: Medium

Match the descriptions to these browser protections terms: Content Security Policy, HttpOnly, Secure cookie attribute, SameSite.

Browser protectionsConcept relationships

Application security · Multiple Select

Difficulty: Medium

Consider [private signing key; account password; session cookie; private decryption key; public verification key; public encryption key]. Select all entries that are credentials or key material designed for public distribution.

Public informationSet membership

Application security · Multiple Select

Difficulty: Medium

Consider [account password; public TLS certificate; session cookie; certificate-chain intermediate; public verification key; private decryption key]. Select all entries that are credentials or key material designed for public distribution.

Public informationSet membership

Application security · Multiple Select

Difficulty: Medium

Consider [private signing key; certificate-chain intermediate; private decryption key; public encryption key; refresh token; session cookie]. Select all entries that are credentials or key material designed for public distribution.

Public informationSet membership

Application security · Multiple Select

Difficulty: Medium

Consider [session cookie; certificate-chain intermediate; public verification key; account password; public encryption key; refresh token]. Select all entries that are credentials or key material designed for public distribution.

Public informationSet membership

Application security · Multiple Select

Difficulty: Medium

Consider [public TLS certificate; refresh token; public encryption key; session cookie; account password; private signing key]. Select all entries that are credentials or key material designed for public distribution.

Public informationSet membership

Application security · Ordering / Sequencing

Difficulty: Medium

Arrange the dependent steps for this server-backed login task. Each step must follow its prerequisite.

Server-backed loginDependencies

Application security · True or False

Difficulty: Medium

True or false: A password salt is normally stored with the password hash rather than kept as a separate secret.

CredentialsConcept checks

Application security · True or False

Difficulty: Medium

True or false: A signed JWT automatically hides its claims from everyone who can read the token.

TokensConcept checks

Application security · True or False

Difficulty: Medium

True or false: Invalidating a server-backed session is needed for its old session credential to stop authorizing requests.

SessionsConcept checks

Application security · True or False

Difficulty: Medium

True or false: Validating input once removes the need for context-appropriate output encoding.

Input handlingConcept checks

Showing 261–280 of 2015 results

1…13 14 15…101