Back-End Development Back-End Security and Authentication

Question 1

What is JWT and what is it commonly used for in back-end applications?

Accepted Answer

JSON Web Token — used for stateless authentication and authorization

Answer

A JSON Web Token is a compact, self-contained token that encodes claims and is widely used for stateless authentication between clients and servers.

Question 2

What is the purpose of bcrypt when handling passwords in a back-end application?

Accepted Answer

To hash passwords with a salt before storing them in the database

Answer

Bcrypt hashes passwords with a random salt and a configurable cost factor, making brute-force attacks computationally expensive.

Question 3

What does SQL injection attack involve?

Accepted Answer

Inserting malicious SQL code into input fields to manipulate database queries

Answer

SQL injection occurs when an attacker inserts malicious SQL into user input that gets executed by the database, potentially exposing or corrupting data.

Question 4

What is the best way to prevent SQL injection in a back-end application?

Accepted Answer

Using parameterized queries or prepared statements

Answer

Parameterized queries separate SQL code from user data, so the database treats user input as data, not executable code.

Question 5

What is the difference between authentication and authorization?

Accepted Answer

Authentication verifies identity; authorization determines permissions

Answer

Authentication is the process of verifying who a user is, while authorization determines what resources and actions that authenticated user is permitted to access.

Back-End Development Practice Test

Back-End Development Practice Test

Back-End Development Back-End Security and Authentication