Front End Development Risk Assessment & Management 3 — Questions and Answers
Question 1: Which technique helps identify front-end risks early by continuously integrating code changes and running automated tests?
- Waterfall development
- Continuous Integration (CI) (Correct answer)
- Manual regression testing only
- Big-bang integration
Correct answer: Continuous Integration (CI)
CI catches regressions and integration failures immediately after each commit, reducing the cost and risk of late-stage defects.
Question 2: A product team learns that browser vendor X will drop support for a CSS feature your app relies on in 6 months. This is an example of which risk category?
- Operational risk
- Obsolescence / technology risk (Correct answer)
- Financial risk
- Compliance risk
Correct answer: Obsolescence / technology risk
Technology obsolescence risk arises when a platform or feature you depend on is deprecated or removed by its maintainer.
Question 3: When assessing risk severity, a 5×5 risk matrix plots risks based on which two dimensions?
- Cost and schedule
- Probability and impact (Correct answer)
- Frequency and detectability
- Scope and complexity
Correct answer: Probability and impact
A standard risk matrix rates each risk on likelihood of occurrence (probability) and severity of consequences (impact).
Question 4: Your SPA relies on a CDN to serve static assets. What risk should you plan a contingency for?
- Users enabling dark mode
- CDN outage making the app inaccessible to all users simultaneously (Correct answer)
- Increased browser memory usage from large images
- Slow DNS propagation on initial domain setup
Correct answer: CDN outage making the app inaccessible to all users simultaneously
A CDN failure can instantly make your entire front-end unavailable, so an origin fallback or multi-CDN strategy should be in place.
Question 5: Which OWASP category most directly represents the risk of including outdated JavaScript libraries with known vulnerabilities?
- A01: Broken Access Control
- A06: Vulnerable and Outdated Components (Correct answer)
- A03: Injection
- A07: Identification and Authentication Failures
Correct answer: A06: Vulnerable and Outdated Components
OWASP A06 specifically addresses the risk of using components (including front-end libraries) with known security flaws.
Question 6: A canary deployment releases a new front-end version to 5% of users before a full rollout. This strategy is an example of:
- Risk avoidance
- Risk transfer to early adopters
- Risk reduction through staged rollout (Correct answer)
- Risk acceptance with no mitigation
Correct answer: Risk reduction through staged rollout
Staged rollout limits blast radius—if the new version has defects, only a small fraction of users are affected before you can halt or fix.
Question 7: Which browser security header directly mitigates the risk of clickjacking attacks on a front-end application?
- Strict-Transport-Security (HSTS)
- X-Frame-Options (Correct answer)
- Cache-Control
- Accept-Encoding
Correct answer: X-Frame-Options
X-Frame-Options (or the frame-ancestors CSP directive) prevents your pages from being embedded in malicious iframes used for clickjacking.
Front End Development Risk Assessment & Management 3
Which technique helps identify front-end risks early by continuously integrating code changes and running automated tests?