Risk Assessment & Management Flashcards
7 cards from real Front End Development practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk Assessment & Management flashcards as text
A third-party npm package your front-end relies on is found to have a critical XSS vulnerability. What is the FIRST action you should take?
Answer: Check if a patched version exists and upgrade immediately
Upgrading to a patched release is the fastest way to close the known vulnerability while preserving functionality.
Which metric best quantifies the potential financial impact of a risk event when performing a quantitative risk assessment?
Answer: Expected Monetary Value (EMV)
EMV multiplies the probability of a risk by its monetary impact to produce a single comparable figure.
A feature toggle (feature flag) system can reduce front-end deployment risk primarily by:
Answer: Allowing instant rollback of a feature without redeployment
Feature flags let teams disable a problematic feature server-side instantly, eliminating the need for an emergency redeploy.
You discover that 40% of your users are on slow 3G connections and your bundle is 4 MB. What risk does this pose?
Answer: Performance risk leading to high bounce rates and revenue loss
A 4 MB bundle on 3G can take 10+ seconds to load, causing users to abandon the page before it becomes interactive.
Which risk mitigation strategy is applied when a team decides to use a well-tested UI component library instead of building custom components from scratch?
Answer: Risk reduction
Using a battle-tested library reduces the probability of introducing bugs compared to untested custom code.
A front-end team stores API keys directly in client-side JavaScript. Which risk does this MOST directly create?
Answer: Unauthorized access to backend services by anyone who inspects the source
Client-side code is publicly visible, so any API key embedded in it can be extracted and misused by attackers.
What does a risk register typically document for each identified risk?
Answer: Description, probability, impact, mitigation plan, owner, and status
A complete risk register captures probability, impact, mitigation actions, ownership, and current status so nothing is left untracked.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy