Regulatory Frameworks & Compliance Flashcards
7 cards from real Front End Development practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Frameworks & Compliance flashcards as text
Under GDPR, which legal basis allows a website to process user data without explicit consent?
Answer: Legitimate interest
GDPR Article 6(1)(f) permits processing based on legitimate interest when it does not override the user's fundamental rights.
Which HTTP response header helps prevent cross-site scripting (XSS) attacks by controlling resource loading?
Answer: Content-Security-Policy
Content-Security-Policy (CSP) lets servers specify which sources browsers may load scripts, styles, and other resources from.
COPPA applies to websites that collect personal information from children under which age?
Answer: 13
The Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting data from children under 13.
A US healthcare web application that handles patient data must comply with which regulation?
Answer: HIPAA
HIPAA (Health Insurance Portability and Accountability Act) mandates security and privacy safeguards for protected health information (PHI).
Which WCAG 2.1 success criterion requires text to have a contrast ratio of at least 4.5:1?
Answer: 1.4.3 Contrast (Minimum)
WCAG 2.1 Success Criterion 1.4.3 specifies a minimum 4.5:1 contrast ratio for normal text at Level AA compliance.
The California Consumer Privacy Act (CCPA) grants consumers the right to request that businesses do what with their data?
Answer: Delete it
CCPA gives California residents the right to request deletion of their personal information held by covered businesses.
Which attribute must be present on an `` to prevent clickjacking attacks?
Answer: sandbox
The `sandbox` attribute restricts iframe capabilities and, when used with no `allow-same-origin`, prevents clickjacking by isolating the embedded content.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy