Front End Development Regulatory Frameworks & Compliance 2

Question 1

Under GDPR, which legal basis allows a website to process user data without explicit consent?

Accepted Answer

Legitimate interest

Answer

GDPR Article 6(1)(f) permits processing based on legitimate interest when it does not override the user's fundamental rights.

Question 2

Which HTTP response header helps prevent cross-site scripting (XSS) attacks by controlling resource loading?

Accepted Answer

Content-Security-Policy

Answer

Content-Security-Policy (CSP) lets servers specify which sources browsers may load scripts, styles, and other resources from.

Question 3

COPPA applies to websites that collect personal information from children under which age?

Accepted Answer

13

Answer

The Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting data from children under 13.

Question 4

A US healthcare web application that handles patient data must comply with which regulation?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) mandates security and privacy safeguards for protected health information (PHI).

Question 5

Which WCAG 2.1 success criterion requires text to have a contrast ratio of at least 4.5:1?

Accepted Answer

1.4.3 Contrast (Minimum)

Answer

WCAG 2.1 Success Criterion 1.4.3 specifies a minimum 4.5:1 contrast ratio for normal text at Level AA compliance.

Front End Development Practice Test